Privacy Policy

1. Who We Are

HobbyMetrics ("we," "us," or "our") operates the HobbyMetrics platform available at hobbymetrics.io — a portfolio management and analytics tool built for sports card and collectible sellers. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website and services (collectively, the "Service").

For questions about this policy, contact us at privacy@hobbymetrics.io.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third-party services you connect.

Information you provide directly:

• Account information — your email address and password when you register. If you sign in with Google, we receive your name and email from Google.
• Card inventory data — player names, card details, grades, cost basis, sale prices, platforms, and any notes you enter about your cards.
• Expense records — categories, descriptions, amounts, and dates of expenses you log.
• Communications — messages you send us via the contact form or support email.

Information collected automatically:

• Usage data — pages visited, features used, time spent in the app, and click patterns (via aggregated analytics).
• Device and browser data — IP address, browser type and version, operating system, and referring URL.
• Session data — authentication tokens stored in your browser to keep you logged in.

Information from third-party services:

• If you connect your eBay account, we receive listing data and sales history that you authorize us to access. We store only what you direct us to sync.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and provide the Service
• Store, display, and calculate insights from your inventory and expense data
• Send transactional emails — account confirmation, password resets, billing receipts
• Respond to your support requests and communications
• Monitor and improve Service performance, stability, and features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not use your data to serve you advertising, build advertising profiles, or sell insights about your inventory or selling behavior to any third party.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

• Service providers — We use Supabase for database and authentication infrastructure, and Stripe for payment processing. These providers access only the data necessary to perform their services and are contractually prohibited from using it for any other purpose.
• eBay API — If you connect eBay, data flows between your eBay account and HobbyMetrics under the permissions you grant. We do not share your HobbyMetrics data back to eBay beyond what the integration requires.
• Legal compliance — We may disclose information if required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of HobbyMetrics, our users, or the public.
• Business transfers — If HobbyMetrics is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
• With your consent — We may share your data in any other way with your explicit consent.

5. Data Retention

We retain your account data and inventory records for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years for financial records).

You can export all your data at any time from the app before deleting your account. Aggregated, anonymized analytics data that cannot identify you may be retained indefinitely.

6. Data Security

We take reasonable measures to protect your data from unauthorized access, loss, misuse, or alteration, including:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Passwords are hashed using industry-standard algorithms — we never store plaintext passwords
• Your inventory and expense data is protected by Row Level Security (RLS) policies — each user can only access their own records at the database level
• Authentication is managed by Supabase Auth, which follows SOC 2 Type II security standards

7. Cookies and Tracking

We use minimal cookies and local storage:

• Authentication tokens — stored in your browser's local storage to keep you signed in across sessions. These are essential for the Service to function and cannot be opted out of while you are logged in.
• Analytics — we may use privacy-respecting analytics (such as aggregated page view counts) that do not track you individually across sites and do not use third-party advertising cookies.

We do not use third-party advertising cookies, retargeting pixels, or behavioral tracking technologies.

8. Third-Party Services

HobbyMetrics integrates with or links to third-party services. Their handling of your data is governed by their own privacy policies:

• Supabase — database, auth, and storage infrastructure. Supabase Privacy Policy
• Stripe — payment processing. Stripe Privacy Policy
• eBay — marketplace integration (when connected). eBay Privacy Policy

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies.

9. Children's Privacy

HobbyMetrics is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has created an account, contact us at privacy@hobbymetrics.io.

10. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention obligations)
• Data portability — export your inventory and expense data from within the app at any time
• Objection — object to certain processing activities
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at privacy@hobbymetrics.io or delete your account directly from the app settings. We will respond to verifiable requests within 30 days.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale or sharing of personal information — we do not sell or share personal information, so no opt-out is necessary
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit use of sensitive personal information

To submit a California privacy request, contact us at privacy@hobbymetrics.io with the subject line "California Privacy Request." We will verify your identity before processing your request.

12. International Data Transfers

HobbyMetrics is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

By using the Service, you consent to this transfer. Where required by applicable law, we will implement appropriate safeguards (such as standard contractual clauses) for international data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the app at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Service after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using the Service and delete your account.

14. Contact Us