Privacy Policy

Who is responsible

MonDex is run by Naran Solutions, St. Tirana 42, 10000 Pristina, Kosovo. We’re responsible for the personal data described on this page.

You can reach us about anything in this policy at contact@mondextcg.com. Our full details are in the Legal Notice.

The website and the waitlist

Hosting

mondextcg.com is a static website hosted on GitHub Pages. To deliver the website, GitHub processes technical request data such as your IP address, browser information and the requested URL. See the GitHub General Privacy Statement for more information.

The launch waitlist

When you submit the waitlist form on this website, your browser sends the following directly to the MonDex server (see section 11):

• your email address
• your first name and your platform (iPhone or Android), if you give them
• where on the site you signed up, or the campaign name if you arrived through a campaign link
• your selected website language, so the launch email can be in your language

Joining the waitlist doesn’t create a MonDex account. We use these details for one thing: telling you when MonDex launches. We keep them until six months after MonDex launches. You can remove yourself at any time by emailing contact@mondextcg.com.

Keeping bots out

The form contains a hidden field that people don’t see but bots tend to fill in. To limit repeated requests, our server briefly holds your IP address in memory. This rate-limit entry is not written to the waitlist database. Infrastructure request logs are separate; see the retention section.

Language preference and website resources

When you choose English or German, this website saves the cookie “mondex-language” for up to one year. It contains only your language choice and is not used for tracking. You can remove it through your browser settings; English is the default. Fonts, card images and application scripts are served with the website. Our website code adds no advertising or analytics tools. The card and portfolio demos use sample data and do not access your camera or create an account.

Your MonDex account

You can create an account in one of two ways.

Email and password

We store your password only as a hash, never in readable form. To confirm your email address, we send you a 6-digit code that’s valid for 15 minutes.

Sign in with Apple or Google

We receive your account identifier from Apple or Google and your verified email address. We never see your Apple or Google password. If you use Apple’s “Hide My Email”, we only see the relay address Apple creates for you.

Your profile (optional)

If you like, you can add a display name, a short bio (up to 280 characters), a profile photo, your display currency and your default card condition.

Your collection

Your collection is stored on our server, so it’s there on any device you sign in on. It includes the cards you own and the details you enter:

• quantity, condition and language
• grading company, grade and certificate number
• purchase price and date
• notes
• your physical binders and boxes, including which card sits in which slot

Purchase prices are used for one thing only: showing your gains and losses. Your cards first, their price second.

Card scanning and photos

Camera and photo library

The app uses your camera only while you scan. It uses your photo library only when you choose a picture yourself, such as a card image or your profile photo.

Recognising a card

For online recognition, the app sends the photo to our server to compare it with the card catalogue. Supported offline camera scans use a previously downloaded recognition pack on your device. Scan photos aren’t saved on our server. We don’t use your photos to identify you, and we don’t use them to train AI models.

Grade

The Grade feature estimates a card’s condition from photos of its front and back. That analysis happens entirely on your phone, and nothing is uploaded. It’s an estimate, not a professional grade.

MonDex Plus and purchases

Buying Plus

MonDex Plus is sold through the Apple App Store and Google Play. Apple or Google take the payment and handle billing as independent providers, under their own privacy policies (Apple, Google). We never see your payment details. From the store, we learn what you bought and its status: the product, the store, when it started, when it renews or ends, and whether it was cancelled or refunded.

The conditions for Plus are in our Terms of Use.

RevenueCat

To check purchases and keep your Plus status up to date, we use RevenueCat (RevenueCat, Inc., USA). The app signs in to RevenueCat with an anonymous app user ID: your MonDex account ID, not your name or email address. For that ID, RevenueCat receives the store’s purchase receipts and transaction data (the Apple receipt or the Google Play purchase token) and when you last used the app. With each request it also receives technical data: your device type, operating system and its version, app version, locale, currency, store country and IP address. RevenueCat tells our server when a subscription starts, renews, ends or is refunded. It processes this data on our behalf and not for advertising. Transfers to RevenueCat in the USA are based on the EU Standard Contractual Clauses. See RevenueCat’s privacy policy.

Welcome Week

Your Welcome Week starts with your first recognised scan. We store with your account when it started and when it ends.

One per device: Apple DeviceCheck

So that each iPhone gets only one Welcome Week and one invitation reward, the app uses Apple’s DeviceCheck. Apple keeps two bits per device for us: “Welcome Week used” and “invitation reward received”. The app creates a short-lived token on your phone, and our server sends it to Apple to read or set these two bits. Apple doesn’t tell us which device it is. The bits contain no personal data and identify no one. They stay with the device, even if you reinstall MonDex or delete your account. On Android, there is currently no equivalent check per device.

Invitations

When you invite a friend, you share your personal invitation link from your phone, for example through the share sheet. MonDex doesn’t email your friends and doesn’t read your contacts.

When someone joins through an invitation, we store:

• your personal invitation code
• who invited whom, and when
• the invitation’s status (waiting, qualified, rewarded) and the extra Plus days granted
• for the invited account, counters that show whether it has really been used, such as the number of recognised scans and the days on which the app was opened

We use this only to grant rewards and to prevent misuse, such as inviting yourself with the same account, device or email address. For the device, we use the DeviceCheck bits described in section 6. The person who invited you doesn’t see your collection.

Price alerts and push notifications

You can set a price alert on a card, and MonDex tells you when its price rises above or drops below your target. We store the alert with your account: the card and printing, the target and its currency.

The app asks for permission to send notifications only when you start a price alert. If you allow it, your phone gets a device token from Apple Push Notification service (on iPhone) or Firebase Cloud Messaging (on Android, a Google service). We store this token with your account, together with the platform and the app’s language, so the notification reaches this phone in your language. When an alert is reached, our server sends the notification through Apple or Google, who deliver it to your phone. It contains the card and its price.

We delete a token when you sign out on that phone, when Apple or Google tell us it’s no longer valid, and when you delete your account. You can turn notifications off at any time in your phone’s settings. Price alerts in the sample collection never send notifications and stay on your device.

Data that stays on your device

Some things live only on your phone. They aren’t sent to us, which also means they don’t sync between your devices:

• favourites
• lists: Wishlist, For Trade, To Grade and your own custom lists
• binder designs and layouts
• achievements and stars
• your Home layout
• the “hide values” setting
• activity history
• unsent scan drafts
• the data behind the home-screen widgets

The sample collection (“preview mode”) needs no account and sends nothing to our server.

What we don’t do

• No advertising.
• No tracking across apps or websites.
• No analytics or advertising SDKs.
• No selling or renting of your personal data.

RevenueCat (see section 6) only tells us whether you have MonDex Plus. It isn’t used for advertising or tracking.

The app’s privacy declaration to Apple says the same: no tracking.

Service providers and where data goes

A few service providers help us run MonDex. They handle data on our behalf, for the purpose listed:

Render

App server and database, including the waitlist. Region: Oregon, USA.

Titan Email

Sending sign-up codes, password-reset codes and collection exports, and receiving the emails you send us.

Sentry

Error reports from our server, so we can find and fix problems. Names, email addresses, passwords, sign-in tokens and IP addresses are removed before a report is sent.

Apple and Google

Sign-in, only if you choose Sign in with Apple or Google.

Apple App Store and Google Play

Selling and billing MonDex Plus, under their own terms and privacy policies.

RevenueCat

Subscription status for MonDex Plus (see section 6). RevenueCat, Inc., USA.

Apple Push Notification service and Firebase Cloud Messaging

Delivering price-alert notifications to iPhone and Android (see section 8).

Apple DeviceCheck

Two bits per iPhone for the Welcome Week and invitation rewards (see section 6).

GitHub Pages

Hosting this website (see section 2).

Card data and prices

Our card catalogue and prices come from pokemontcg.io, pokemonpricetracker.com and exchangerate.host. Our server requests card data and exchange rates from them. None of your personal data is sent to them.

International transfers

Some of our service providers are based, or process data, outside the EU and Switzerland, mainly in the USA: Render (app server and database), RevenueCat, Titan (email), Sentry (error reports), Apple (App Store, push notifications, Sign in with Apple), Google (Google Sign-In, Android push notifications, Google Play Billing) and GitHub (website hosting).

Where the recipient is certified under the EU-US Data Privacy Framework (and, for data from Switzerland, the Swiss-US Data Privacy Framework), transfers are based on that framework. Otherwise, they are covered by the EU Standard Contractual Clauses (Commission Decision 2021/914), with the adaptations required for Switzerland, which are part of each provider’s data processing agreement.

Emails we send

We only email you when there’s a reason to:

• a code to confirm your email address when you sign up
• a code when you reset your password
• your collection export, when you ask for one

There are no marketing emails. The one exception: if you joined the waitlist, you’ll get a single email when MonDex launches.

How long we keep data

Account and collection

Until you delete them.

Sign-up codes

Expire after 15 minutes.

Password-reset codes

Expire after 30 minutes.

MonDex Plus status

As long as your account exists. Deleting your MonDex account doesn’t delete your purchase history at RevenueCat, which stays stored under your anonymous app user ID. Email us at contact@mondextcg.com and we’ll have it deleted there too.

Welcome Week and invitations

As long as your account exists. When you delete your account, they are deleted immediately.

DeviceCheck bits

Kept by Apple with the device, not with your account.

Price alerts

Until you remove the alert or delete your account.

Push tokens

Until you sign out on that phone, Apple or Google report the token as invalid, or you delete your account.

Waitlist

See section 2.

Server logs

7 days.

Your rights and controls in the app

You can do most of this yourself, right in the app:

• Export your collection as CSV or JSON, or have a CSV emailed to you.
• Edit your profile at any time.
• Deactivate your account. This is reversible: signing in again restores it.
• Delete your account permanently. This removes your collection and your sign-in data. If you use Sign in with Apple, we also revoke MonDex’s access with Apple.
• Cancel MonDex Plus in your App Store or Google Play account settings. Deleting your MonDex account doesn’t cancel a store subscription.
• Turn notifications off in your phone’s settings, and remove price alerts in the app.

You can also email us at contact@mondextcg.com to access, correct, delete or port your data, or to object to how we use it. And you have the right to complain to a data protection authority, in particular the one in the EU country where you live or, if you live in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

Security

All connections use HTTPS. Passwords are stored only as hashes, codes work only once, and your sign-in tokens are kept in your phone’s secure storage.

Children

You need to be at least 16 to create a MonDex account. If you’re younger, you need the consent of a parent or guardian. If you think a child under 16 has given us personal data without that consent, email us at contact@mondextcg.com and we’ll delete it.

Changes to this policy

When we change this policy, we’ll update the date at the top of this page. If a change matters for how we handle your data, we’ll also tell you in the app.

Contacting us

Contact links open your own email app. This website does not send a message until you choose to send it. When you email MonDex, your email address and the contents of your message are used to handle your enquiry. Only include the information needed to explain the issue; never send your password.

Emails you send us are received and stored by our email provider, Titan. We don’t delete them after a fixed period. If you’d like us to delete your emails, just ask.