Privacy

Operator

Compbook does not publish an operator name, phone number, or social profile. It provides a dedicated partnerships inbox for serious operational inquiries.

Anonymous analytics

If you leave analytics on, Compbook sends privacy-preserving page views, feature events (search used, sale opened, copy/share), and Core Web Vitals (LCP, INP, CLS). Paths are included, but the analytics payload does not include search text, player names, IP addresses, or cookies.

Global Privacy Control and Do Not Track are honored automatically.

Protecting public data

Public browsing uses a necessary, first-party security cookie that expires after 30 minutes. The server stores only a hash of its random token, expiry time, and request counters to slow bulk extraction. These counters do not store IP addresses, browser fingerprints, search text, or browsing history, and expired records are removed during routine access. The cookie is separate from optional analytics. Sales are delivered in bounded pages; we no longer save the complete ledger in local storage.

Sale reports

Reported sale details and screenshot proof are stored only while pending admin review. Proof uploads are permanently deleted after approval or rejection. Approved sale details may become part of the public comps ledger.

Missing-card reports

Missing-card requests store the submitted player, set, rarity, subset, print run, short explanation, optional contact, and a card-details screenshot for admin review. Approved requests add catalog metadata so the card can be selected; they do not create a sale, price, or market estimate comp. Screenshots are admin-only and deleted after approval or rejection.

Estimate feedback

Market Estimate feedback stores the selected card fields, issue type, explanation, optional observed price, optional evidence URL, the estimate route, and server-validated estimate snapshot for admin review. It does not create an account, profile, fingerprint, or IP-based identity.

To keep the public feedback endpoint usable, Compbook applies database-backed rate limits using short-lived global, estimate, and content counters. Clear repeated spam, excessive links, or targeted abuse can be quarantined for admin review; strongly worded price criticism is still allowed. Dismissed or abusive feedback is removed after 30 days, and other closed feedback after 90 days, during routine app access or admin review.

What this app does not do

• No accounts, email capture, or cross-site advertising pixels.
• No fingerprinting, IP bans, CAPTCHAs, or third-party analytics SDKs.
• Sale notes and player names from the public sheet stay on screen only.