Privacy Policy

1. Who we are

PikaPulse is a Pokémon TCG market intelligence platform operated as a private service. References to “we”, “us” or “PikaPulse” in this policy refer to the platform and its operators. We are not affiliated with, endorsed by, or connected to The Pokémon Company, Nintendo, or any of their subsidiaries.

2. What data we collect

When you create an account or use PikaPulse, we collect:

• Your name and email address (provided at registration)
• A securely hashed version of your password — we never store passwords in plain text
• Cards and products you add to your watchlist, portfolio, or targets
• Session data stored in a secure, HTTP-only cookie to keep you logged in
• Basic usage information such as pages visited and features used, for platform improvement

3. How we use your data

We use your data solely to operate and improve the platform:

• Authenticating your account and keeping your session secure
• Personalising your dashboard, watchlist, portfolio, and alerts
• Delivering stock alerts and market intelligence relevant to your targets
• Understanding how the platform is used so we can improve it

We do not sell your data to third parties. We do not use your data for advertising.

4. Data storage and security

Your data is stored in a PostgreSQL database hosted on Replit's infrastructure within the EU. Passwords are hashed using scrypt with a unique salt per account — they cannot be reversed. Sessions are managed via secure, HTTP-only cookies that expire after 30 days of inactivity. All data in transit is encrypted via TLS.

5. Third-party data sources

PikaPulse monitors publicly available price and stock data from third-party sources including CardMarket, PokeTrace, PokePRICE, and the Pokémon TCG API. We also monitor publicly accessible retail websites for stock availability. We do not share your personal data with any of these sources. Price data is used only to generate market intelligence within the platform.

6. Cookies

PikaPulse uses a single essential cookie to maintain your login session. This cookie is required for the platform to function and does not track you across other websites. We do not use advertising cookies or third-party tracking cookies.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your watchlist and portfolio data

To exercise any of these rights, contact us at the address below.

8. Data retention

We retain your account data for as long as your account is active. If you request account deletion, your personal data will be removed within 30 days. Anonymised, aggregated market data (price history with no personal identifiers) may be retained for analytical purposes.

9. Changes to this policy

We may update this policy from time to time. Any significant changes will be communicated via the platform. Continued use of PikaPulse after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any privacy-related queries or data requests, please contact us at privacy@pikapulse.app