Privacy Policy
Last updated October 25, 2026
This policy explains what PullPile collects and why.
What we collect
Your email address and name (if you sign in with Google), the cards identified in the photos you scan, and the cards you save. For visitors without an account we keep a browser cookie and a one-way hash of your IP address to limit free scans.
Payments
Stripe processes payments. We never see or store your card number.
How we use it
To identify and price your cards, keep your collection, enforce plan limits, and send sign-in emails. We don’t sell your data.
Your photos
We don’t keep the photos you scan. A photo is stored only while we identify its cards and show you the results. It is deleted as soon as you add the cards to My Cards or leave the results page, and in any case within an hour. The list of cards found in it stays with your scan.
Retention
Scans by visitors without an account (the cards found, never the photo) are deleted after 24 hours. Delete your account and we delete your scans and collection.
Services we use
Railway (hosting), Cloudflare R2 (temporary photo storage while a scan is processed), Stripe (payments), Resend (email) and, when enabled, Anthropic (to double-check uncertain card matches).
Contact
Privacy questions or deletion requests: [email protected]