Privacy Policy

• Search and activity data. Search text, filters, pages viewed, cards opened, marketplace links clicked, feature use, timestamps, referrer, and basic browser or device information.
• Text you write into a feature. Search queries and binder page briefs are free text. Please do not type anything into them you would not want stored alongside the results they produced.
• Account data. If you sign in, we receive your email address and authentication identifiers. Sign-in is a single-use link sent to your email address; Illudex never sees or stores a password. You may also provide a handle, display name, bio, selected avatar, collections, published binder pages, likes, reports, and saved searches.
• Saved searches. If you save a search, we keep its words and filters on your account and email you when a new set has cards like it, once for each set. Every such email has a link that pauses them, and you can pause or remove your saved searches on your account page.
• Binder data. Your binder is stored in your browser. If you sign in, it may also be synced to your account so it is available on other devices.
• Image searches. An image you submit is sent to our search service and held in memory long enough to create search results. Illudex does not retain the uploaded image after processing; the file size and format are recorded as analytics, the picture itself is not.
• Votes and hearts. When you pick the better of two card pictures on a Pokémon page, or tap the heart on a card, we record the cards, your choice and a random identifier your browser makes for itself (and your account, if you are signed in), so each person counts once and abuse can be stopped. Only totals are shown, never who voted. No account is needed and nothing else about you is asked for.
• Messages. We receive the contents of emails or other communications you send us.

We use information to provide and improve visual search, sync binders, operate community features, understand which features work, prevent abuse, moderate public content, troubleshoot errors, protect the service, and respond to requests.

Searches and interaction data may be analyzed in aggregate to improve relevance and product decisions. Illudex does not sell your personal information, does not share it for cross-context behavioral advertising, and does not provide it to data brokers.

Illudex uses browser storage for your binder and preferences, authentication cookies to keep you signed in, and analytics storage — a cookie and a local-storage entry — that gives your browser a random identifier so repeat visits can be counted as one person. That identifier is not linked to your name, and to your email address only if you sign in.

Analytics and error reports are sent to illudex.com/ingest and illudex.com/monitoring and forwarded from there to PostHog and Sentry. We route them through our own domain because ad blockers otherwise drop a large share of the measurements, not to disguise who receives the data: those two companies receive it, and this paragraph is here so a first-party request is not mistaken for data that never leaves Illudex.

You can clear this storage through your browser settings, and a browser-level tracker blocker will stop the analytics script from loading at all. Clearing site data may remove a signed-out binder that has not been synced to an account.

Illudex also keeps a record of what you do with what it suggests: a suggested card kept or swapped away in the binder studio, a card left off a page the organizer built, a search result clicked, a scene followed off a Pokémon's page. Each entry holds the action, the card, the words that led to it, and the cards that were on screen at the time, under a random identifier your browser made for itself, plus your account id if you are signed in. It never includes the contents of your binder, and it is used to improve which cards the site puts together. You can turn it off for this browser here.

Illudex participates in the eBay Partner Network and, through Impact, the TCGplayer affiliate program. Marketplace buttons on card pages are affiliate links, and they are labeled as such where they appear.

• A marketplace link first passes through illudex.com/api/go, which records the card and the destination and then redirects you. That is how we count which cards send people to a marketplace.
• The destination URL carries our campaign or publisher identifier so the marketplace can attribute a later purchase to Illudex. It identifies us, not you.
• The marketplace receives the referring URL and sets its own cookies to track that attribution. What it collects is governed by its privacy policy, not this one.
• Illudex is paid a commission on a qualifying purchase and is told that a purchase happened. We do not receive your name, address, payment details, or the contents of your order, and we cannot connect a purchase back to an Illudex account.

We use service providers to host and operate Illudex, including Vercel for the web application, Fly.io for search processing, Cloudflare R2 for card image delivery, Supabase for authentication and account data, Resend for the email that tells us a new account was made and for the new-card emails your saved searches send, PostHog for product analytics, and Sentry for error and performance monitoring. They process information on our behalf under their own terms and privacy commitments.

Card pages also link to marketplaces such as eBay and TCGplayer, as described above, and show TCGplayer and Cardmarket market prices. Following a link to any outside site means that site, and not Illudex, decides what it collects.

Illudex can be used from inside ChatGPT and other AI assistants that connect to it. When you ask one of them to find cards, the assistant sends Illudex the words of the search, a card you asked about, or a theme for a binder page, and Illudex sends back cards and links to their pages. Illudex does not receive your name, your email, your account with that assistant, or the rest of your conversation, and it does not keep the words an assistant sends. The assistant's own privacy policy covers your conversation with it. Links from these results carry a tag saying they came from an assistant, so a visit that follows one is counted the way any other visit is (see analytics above).

When you import a spreadsheet, or paste a page copied from Collectr, the file or text is read in your browser. The card name, set, number and TCGplayer product ID from each row are sent to our search service to match them to cards, and are not kept after matching. Nothing is saved to your account until you click Save; the collection then keeps the matched cards, how many of each, and whether you marked them as owned.

The Illudex Import extension for Chrome runs only on app.getcollectr.com and illudex.com. When you click its button on Collectr, it reads the collection you pick, using the session already open in that tab, and keeps the cards' details (name, set, number, quantity, condition, printing, grading company, language and TCGplayer product ID) in the extension's own storage until the Illudex import page takes them, then deletes them. So that its button can offer to sync into a collection you already have, it also keeps the names, sizes and owned marks of your Illudex collections, read from Illudex while you are signed in there, and which Illudex collection each Collectr collection went into; these stay in your browser. It does not read your Collectr password or any other site, changes nothing on Collectr, and sends nothing anywhere except to that import page, which treats the cards as described above. What the extension handles is not sold or used for advertising.

Your handle, display name, bio, avatar, public collections, and public binder pages can be viewed by anyone and may appear in search engines. Unlisted content can be viewed by anyone who has its link. Do not publish information you want to keep private.

We keep information for as long as reasonably necessary to operate the service, maintain security, comply with legal obligations, and resolve disputes. Retention varies by data type and provider. Browser-only data remains until you or your browser removes it. No online service can guarantee absolute security.

Illudex is operated from the United States and its providers store and process information in the United States and other countries where they operate. If you use Illudex from elsewhere, you are sending information to those countries, and their data-protection rules may differ from your own.

You can edit your profile and community content, sign out, and clear Illudex cookies and local storage through your browser. Depending on where you live, you may also have rights to access, correct, delete, or receive a copy of personal information, or to object to certain processing. Exercising them will not cost you access to Illudex.

To make a privacy or account-deletion request, email illudexsupport@gmail.com from the address connected to your account. We may need to verify your identity before completing the request.

Illudex is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and remove it.

We may update this policy as Illudex changes. The date at the top shows the latest revision. Questions or requests can be sent to illudexsupport@gmail.com, and the Terms of Service cover the rules for using the site.