Privacy Policy

Nextform Holdings (“we,” “us,” or “our”) runs Rarity Ledger. This policy covers the Rarity Ledger website and related tools we operate.

We are not a grading company or an auction house. Names of those firms may appear because they are in a sale record. That does not mean they get your personal information from us, or that they endorse us. See our Terms for the full “not affiliated” note.

What we collect depends on how you use the site.

If you browse or search. We may log your search text, pages you open, and technical data such as browser type, device, and a rough location from your IP address. Hosts and security tools need this to run the site.

If you make an account. We keep your email, a password hash (we cannot read your password), and your plan (Free, Hammer, or Ledger). If you use Google to sign in, Google shares the email and basic profile we need to create the account.

If you use photo ID without an account. We count tries with a scrambled (hashed) version of your IP address so the monthly cap is fair. Scrambled means we cannot turn it back into your address. We do not use it to name you.

If you pay. Square collects your payment details. We keep a Square customer or subscription id, your plan, and whether a charge worked. We do not store full card numbers on our servers.

If you send feedback. If you tap yes or no on a search match, we store that note with the catalog id and query so we can improve matching.

We do not ask for your home address unless a payment or legal process needs it later. We do not need your collection inventory to run search today.

When you use photo ID, your image goes to our servers and then to an AI provider (today that is Anthropic through Vercel’s AI Gateway, or Anthropic directly). The model returns text clues — such as a title, platform, or catalog hint — so we can search our catalog.

We keep those text clues and the match you confirm or reject. We do not keep a photo album of your uploads. Hosts and the AI company may hold the image for a short time to finish the request. The AI company has its own rules about whether it learns from the image. Read theirs if that matters to you.

Do not upload pictures of people, IDs, or anything you do not have the right to share. Photo ID is only for identifying a collectible.

We use information to:

• Run search, photo ID, and item pages.
• Create and secure your account.
• Enforce photo-ID caps and paid-plan access.
• Charge and cancel plans through Square.
• Fix bugs, stop abuse, and keep the site up.
• Improve matching when you tell us a result was right or wrong.
• Send account mail, such as a sign-in link or a plan change.
• Follow the law if we must.

We do not sell your personal information. We do not use your photos to train our own public AI. The AI company we send the photo to has its own rules. If that ever changes on our side, we will update this policy first.

We share information with companies that help us run the site — only as needed for their job:

• Supabase — accounts, database, and usage counts.
• Square — checkout and subscriptions.
• Google — sign-in if you choose “Continue with Google.”
• Anthropic and Vercel AI Gateway — photo ID.
• Email delivery used by sign-in links.

Those companies are not allowed to use your information for their own marketing just because they process it for us. They have their own privacy policies for their products.

We may share information if the law requires it. We may share it to protect people or the site. If we sell or merge the business, the buyer must honor this policy or give you notice.

Auction houses and graders do not get a feed of your account or your photos from us. Public sale data on an item page is about the lot, not about you.

We use cookies that keep you signed in (Supabase auth). Those are needed for the account to work.

Your browser may also store a theme choice (rl-theme) and a short “already answered” flag after search feedback. That stays on your device. You can clear it in your browser.

We do not run a third-party ad network on the site today. If we add analytics that track you across sites, we will say so here and give you a choice where the law requires it.

Browsers may send a “Do Not Track” signal. There is no common standard for it yet, so we do not change behavior based on that signal alone.

We keep account and billing records while your account is open, and for a reasonable time after if we need them for taxes, disputes, or the law.

Identify logs (search text, match notes, photo-ID clues) help us improve the catalog. We keep them only as long as they are useful for that, then we delete or strip them. Guest photo-ID counts reset each month.

Backups can lag. Deleted data may sit in a backup for a short time, then it ages out.

You can:

• Use much of the site without an account.
• Skip Google and use email instead.
• Cancel a paid plan on your Account page.
• Log out and stop uploading photos.
• Email us to correct your email, close your account, or ask what we have about you.

We may need to verify it is you before we change or delete data. We may keep a small record of the request. We may refuse a request that is abusive, repeats too often, or would break the law or someone else’s privacy.

Rarity Ledger is not directed at children under 13. We do not knowingly collect personal information from them. If you think a child under 13 gave us personal information, email us. We will delete it.

We lock data as it travels (encryption in transit) and limit who can open the database. No system is perfect. We cannot promise that a determined attacker will never succeed. Use a unique password. Tell us if you see something wrong.

We operate in the United States. If you use the site from another country, your information may be processed in the U.S. U.S. law may not match the law where you live. If you do not want that, do not use the site.

If you live in California, the UK, or the EU, you may have extra rights. You can ask what we have about you. You can ask for a copy. You can ask us to fix it or delete it. You can ask us to stop some uses.

We do not sell your personal information (facts that can point to you). We also do not give it to ad networks so they can follow you from site to site.

To use these rights, email [email protected]. We will not treat you worse because you asked. If we say no, we will tell you why we think we can, and how to appeal if the law gives you that step.

We may update this policy. We will change the date at the top. If a change is big, we will try to tell you by email or a note on the site. If you keep using the site after a change, you accept the new policy.

Privacy questions and requests: [email protected]. That mailbox also covers our Terms.

Nextform Holdings · Rarity Ledger