Privacy Policy

Owlex is a UK-based service and is the data controller for the personal data described in this policy. If you have any questions about this policy, or want to exercise any of your rights, contact us at support@owlex.co.uk.

• Account details. Your email address and authentication data when you sign up — either email and password, or Google/Apple sign-in. With Google or Apple sign-in, the provider confirms your identity to us; we never see or store your Google or Apple password.
• Your collection. The cards you add, folders, quantities, notes, and any card photos you take — so we can identify, track, and value your collection.
• eBay connection. If you choose to connect eBay, we store an OAuth access token for your eBay account, encrypted at rest, used only to create and manage listings on your behalf. We do not store your eBay password. See “Selling with eBay” below.
• Subscription status. Subscriptions are purchased through the Apple App Store or Google Play and managed via RevenueCat. We receive your subscription tier and status — never your card number or bank details.
• Usage & analytics. Basic in-app events (for example, that a scan happened) so we can fix bugs and improve the app.
• Advertising identifiers. On the free tier only, the advertising identifier provided by your device may be used to serve ads. Paid tiers have no ads and no advertising identifiers are used.

• To provide the core features — scanning, identifying, pricing, and tracking your cards.
• To create and manage eBay listings when you ask us to, on your own eBay account.
• To manage your subscription and apply your plan’s limits and features.
• To keep the app secure, prevent abuse, fix bugs, and understand which features are used.
• To show ads on the free tier (subscribing removes ads).
• To respond when you contact us for support.

We do not sell your personal data, and we do not use it for third-party marketing.

We use a small set of service providers to run Owlex, and share only what each one needs:

• Supabase — our database and authentication host. Stores your account, profile, and collection data.
• eBay — when you list a card, the listing details you approve are sent to eBay and published under your own connected eBay account.
• JustTCG — our pricing source. We send only card identifiers (game, set, name, number) to fetch market prices; we do not send any personal data.
• RevenueCat and the Apple App Store / Google Play — to process and validate in-app subscription purchases. Payment itself is handled entirely by Apple or Google.
• Google AdMob — to serve ads on the free tier only. Ads are configured as child-safe, and where required in the UK/EU we ask for your consent before personalised ads are shown.

Owlex is not a marketplace and is not affiliated with or endorsed by eBay. When you sell through Owlex, we list items to your own eBay account; the sale contract is solely between you (as the seller) and your buyer. Owlex never handles payment for a sale and takes no commission.

To connect eBay, you go through eBay’s own OAuth consent flow. Owlex receives and stores an access token (encrypted at rest) that allows it only to create and manage listings on your behalf. We never see or store your eBay password.

All eBay account setup happens on eBay, not in Owlex: becoming a registered seller, setting up eBay managed payments and linking a bank account, creating eBay Business Policies (payment, postage, returns), and any identity verification are all completed by you directly on eBay — Owlex simply redirects you to eBay to complete those steps. Data you provide during those steps goes to eBay under eBay’s own privacy notice and terms — we never receive it.

If you close your eBay account, eBay notifies us and we delete the eBay tokens we hold for you. Your Owlex collection is unaffected — that’s your data, not eBay’s. You can also disconnect eBay at any time from within the app.

We keep your account and collection data for as long as your account is active. Card photos on the free tier are stored on your device; paid tiers back them up to our cloud storage. Encrypted eBay tokens are kept only while your eBay connection is active and are deleted when you disconnect, when eBay tells us your account was closed, or when your Owlex account is deleted. Analytics events are aggregated and old raw events are pruned automatically. When you delete your account, we delete your personal data, except where we must keep limited records to meet a legal obligation.

Owlex is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it. Ads on the free tier are configured for a general (child-safe) audience.

Our website uses only the essential cookies needed to keep you signed in and remember basic preferences. We do not use advertising or third-party tracking cookies on the website.

Some of our providers may process data outside the UK. Where that happens, we rely on appropriate safeguards — such as UK adequacy decisions or standard contractual clauses (with the UK addendum where applicable) — to protect your data.

Under UK GDPR (and, where it applies, the EU GDPR), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Where we rely on your consent (for example, personalised ads), you can withdraw it at any time. To exercise any of these rights, email support@owlex.co.uk. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner’s Office (ICO).

You can request deletion of your account and associated data at any time by emailing support@owlex.co.uk. We will remove your collection, profile, card photos stored with us, and any encrypted eBay tokens we hold. Deleting your Owlex account does not cancel an app-store subscription — cancel that through your Apple or Google account settings.

We may update this policy as Owlex evolves. We’ll change the “last updated” date above and, for material changes, let you know in the app.

Questions about this policy or your data? Email support@owlex.co.uk. You can also read our Terms & Conditions.