Privacy Policy
Last updated 25 September 2026
This policy explains what personal data Dexter (dexter.fm) collects, why, who helps us process it, and your rights. Dexter is run by [Company name] (company number [company number], [registered address]), the controller of your data under the UK GDPR and the Data Protection Act 2018. Contact us at [contact email].
Using Dexter without an account
You can browse cards, sets, prices and search without signing in. Our hosting provider records standard request logs (IP address, browser, pages requested, time) to run and protect the site. We don't use analytics, advertising or tracking cookies.
When you create an account
- Account details: your email address, name, username, profile photo and how you sign in (email and password, or Google, Discord or Apple). Sign-in is provided by Clerk, which also serves the Dexter mobile apps, so one account works in both.
- Your collections: the cards you add, with the quantities, prices paid, dates, grades, notes and sales you enter, your wishlist, and your cover photo.
- Imports: when you import a file (for example a PokePulse export), we read it to find each card and save the purchases you confirm. The file itself isn't kept.
- Photos: profile and cover photos are checked by an automated moderation service before they're saved.
Why we use it (lawful basis)
- To provide your account and collections: contract.
- To keep the site secure, prevent abuse and moderate photos: legitimate interests.
- To meet legal obligations: legal obligation.
What other people can see
Your profile is private unless you turn on Public profile in Settings, and each collection is private unless you choose to show it. A public profile shows your photo, cover, username and the cards in collections you show. What you paid, values, returns, private collections, your wishlist, name and email are never shown.
Who processes your data
| Provider | What for |
|---|---|
| Clerk | Accounts, sign-in and profile photos |
| Supabase (data stored in Frankfurt, Germany) | Collections, wishlist, profile settings and cover photos |
| Vercel | Hosting and request logs |
| OpenAI | Checking uploaded photos against its content policy |
| Google, Discord, Apple | Sign-in, only if you choose one of them |
Some of these providers may process data outside the UK. Where they do, they rely on safeguards recognised under UK law, such as the UK International Data Transfer Addendum or adequacy regulations. Card prices and listings come from the Dexter pricing service; links to eBay, TCGplayer and other sites are governed by their own policies.
How long we keep it
We keep your account data while your account exists. When you delete your account, your web collections, wishlist and cover photos are deleted automatically. Request logs are kept for a short period by our hosting provider.
Your rights
You can ask to access, correct, delete or receive a copy of your data, and object to or ask us to restrict how we use it. Most of it you can change yourself in Settings. To exercise a right, email [contact email]. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Dexter accounts are not for children under 13.
Cookies
See our Cookie Policy.
Changes
We'll update this page when this policy changes and change the date at the top.