Privacy Policy
Last updated September 8, 2026
What we collect
When you create a CardToolKit account, we store your email address and a securely hashed password. We also generate a personal API token, used only to authenticate the CardSniper browser extension to your account.
What the CardSniper extension sends
When you drag-select a card, the extension sends a cropped screenshot of that selection to our backend. That image is passed to Anthropic's Claude API to identify the card (player, set, parallel, card number) — it is not stored by us afterward. The resulting search query is then sent to a third-party sold-listing data provider to estimate a real sold-price range. We do not sell or share this data for advertising.
Usage data
We record how many card identifications your account makes each month. This is used only for our own plan limits and billing — not the image content itself, just a count.
Extension permissions
The extension requests activeTab and
scripting so it can draw the
drag-select overlay on the page you're viewing, and
storage to save your API token and
backend URL locally in your browser. Its network access is limited to
cardtoolkit.com — it cannot read or send data to any other site.
Contact
Questions about this policy or your data? Email pepito@garabatosonoro.com.