Privacy Policy

Last updated: 21 September 2026

What is stored on your device

Your collection lives on your device (in your browser or app storage): the cards you own, wishlist and favourites, graded slabs, notes, decks, sealed products, settings, and the market prices you have looked up. You can export this to a file, or clear it at any time by clearing the app or browser data.

Optional account and cloud sync

If you choose to create an account to sync your collection across devices, we store on our server:

• Your email address and a securely hashed password. Your email is used to sign you in and, if you forget your password, to send you a one time reset code through our email provider (Resend).
• Your collection data (the same information listed above) and a few account settings, such as your market, currency, grading company and text size, so they sync between your devices.

This is entirely optional. If you never sign in, none of this is collected. You can delete your account and its synced data at any time from the Account page in the app using Delete account, or by contacting us using the details below.

Notifications

The iPhone and Android apps can send you notifications about new sets, news, release dates and stock alerts. To make this work, the app registers a push token for your device with our server. The Android app does this when it opens, and the iPhone app does it once you allow notifications. Along with the token we store:

• Your platform (iPhone or Android) and when the app last checked in.
• Your notification choices, including the sealed products you follow for stock alerts.
• Your chosen market, so alerts match your region.

The token is not linked to your account or email address. Notifications are delivered through Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iPhone). The web app does not register a push token.

Contact form

If you send feedback through the app or the form on our roadmap page, we receive the topic, your message, and your email address if you choose to add one so we can reply. Messages sent from the app also include the app version and platform (web, iPhone or Android) so we can look into problems. It is delivered to us by email through our email provider (Resend) and is used only to respond to you.

Camera

In the iPhone and Android apps, SphereDex can use your camera to recognise a card, or the grading label on a slab, and add it to your collection. This happens entirely on your device. Camera images are never uploaded, stored, or shared.

Prices and card data

To show market values, the app asks our server for prices using card names and numbers (plus the grade, for graded slabs) and the market you chose. When the app opens it may also send the numbers of the cards you own, so their last sold prices can be refreshed. Price lookups are not linked to your account. To stop any one install using up the shared daily price lookups, the app makes a random tag for itself, keeps it on your device, and sends it only with price lookups. The server keeps a one way scrambled form of it for a day, then deletes it. It is tied to nothing else and is never used to identify you. Older versions of the app send no tag, and for those the server uses your IP address the same way. The app also tells the server which version it is running, so we can see how many people are on each build. That is a version number on its own, with nothing attached to it. Our server then asks eBay and our price providers (OpenWeb Ninja and Palworld Prices) for prices, without sending anything that identifies you. Buy links open the retailer's own website, where that retailer's privacy policy applies.

Service providers

We use a small number of companies to run SphereDex. Each one only gets what it needs for its job:

• Cloudflare runs our server and database (accounts, synced collections and notification tokens) and keeps short term request logs.
• GitHub Pages hosts this website and the web app.
• Resend sends password reset codes and delivers contact form messages to us.
• Google Firebase Cloud Messaging and Apple Push Notification service deliver notifications to Android and iPhone.
• eBay, OpenWeb Ninja and Palworld Prices supply price data. They receive card searches from our server, never your personal details.
• Google ML Kit recognises cards on your device in the Android app. The library sends Google anonymous performance and usage metrics, never camera images.
• The official Palworld card game website supplies the artwork for any card whose image is not yet built into the app, so your device loads that image from their site.

What we do not do

• No advertising and no ad networks.
• No analytics or usage tracking, and no tracking across other apps or websites. The download and install counts we see come from the standard reports Apple and Google give every developer, not from the app.
• No selling or sharing of your data with third parties for their own use.

Delete your SphereDex account

You can delete your SphereDex account and the data synced to it at any time.

• In the app: open the Account page, tap Delete account, then tap Yes, delete. This happens straight away.
• Without the app: email spheredex@thecraigescape.com from the address on your account and ask us to delete your SphereDex account. We will delete it and reply to confirm.
• What is deleted: your email address, your hashed password, any password reset code, and your synced collections and account settings.
• What is kept: nothing linked to your account. Your notification token is not linked to your account, so mention it in the same email if you also want it removed. Cards saved on your device stay until you clear the app or its data.

Data retention and deletion

Data on your device stays until you remove it (clear the app or browser storage, or export then delete). If you created an account, you can delete it and all of its synced data from our server at any time with Delete account on the Account page, or by contacting us. We keep a notification token until Google or Apple tell us it is no longer valid, which we only learn when we next send that device a notification. A device that is not being sent notifications, for example one with every notification turned off, may stay stored until then. Contact us if you want yours removed.

Children

SphereDex is not directed at children under 13 and does not knowingly collect their personal information.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Questions, or want your account data deleted? Use the feedback option inside the app, or email us at spheredex@thecraigescape.com.

SphereDex is a free, fan made tracker for the Palworld Trading Card Game. Card data and artwork are © Pocketpair / Bushiroad. SphereDex is not affiliated with or endorsed by Pocketpair or Bushiroad.