Card LensBY AAP COLLECTABLES← Back to Card LensYour cards. Your privacy.
How AAP Card Lens handles your account, card records and photos.
Effective 18 October 2026 · Version 2026-10-18
Who looks after your data?
AAP Collectables Ltd operates AAP Card Lens and is the controller of the account and collection information described here. Company number 17047209, registered in England and Wales. Registered office: Solar House, 282 Chase Road, London, United Kingdom, N14 6NZ. Contact christofipeter67@gmail.com for privacy questions or requests.
What we collect
Signing in provides a site-specific account identifier, email and, where available, display name from ChatGPT. We store your plan, subscription and payment references, usage counters, team membership and any collection records you choose to save to the cloud. Cloud records can include card identifiers, quantities, purchase costs, sale prices and notes. Service providers also process connection and security information, such as IP addresses and request logs.
Photos and recognition
Card-photo recognition runs in your browser. The scanning workflow does not upload source photos to our account database or send them to a paid AI recognition service. Photos and unfinished reviews may be saved in this browser’s device storage. Catalogue and reference-image requests still use the internet. If you send a screenshot to support yourself, it becomes part of that support conversation. Avoid including personal details in card photos or notes.
Why we use information
We use account details and cloud records to provide the service you request, and billing references to administer your subscription (performance of our contract). We use limited usage and security records to enforce allowances, prevent abuse and investigate faults (legitimate interests in operating a secure, reliable service). We retain necessary financial and tax records to meet legal obligations. Card Lens does not automatically enrol you in marketing.
Providers and sharing
OpenAI/ChatGPT provides sign-in and hosting infrastructure, Cloudflare provides hosting and database infrastructure, and Stripe processes payments and manages billing. We receive payment references and statuses; card details are entered with Stripe rather than stored by Card Lens. Catalogue and image references use TCGdex; marketplace lookups use eBay and CompSniper. Searches send card identifiers or search terms, not your uploaded card photo. Opening marketplace links sends you to that provider’s website and privacy practices. We do not sell your personal information.
Team workspaces
A Vendor workspace shares collection records with its members. Members can edit those records and use the shared allowance. The owner can manage members and billing. Only join a workspace whose owner you trust, and keep private notes out of a shared collection.
Device storage and cookies
We use browser storage for saved cards, settings and dismissed setup tips. Hosting and payment providers use cookies or similar tools for authentication, security and payment functionality. We have not added advertising or behavioural analytics to Card Lens. Your browser can clear its local copy; export a backup first. Clearing local data does not cancel your subscription or remove a cloud collection.
Where information is processed
Our providers may process information outside the UK, including in the US. Their processing locations and transfer terms are described in their privacy notices. Contact us for information about the safeguards relevant to your account; we do not promise UK-only storage.
How long information stays
Device records remain until you remove them, clear browser storage or the browser removes them. Cloud collections remain available while we provide your account and until a deletion request is processed. Billing and necessary accounting records may be retained after closure to meet legal obligations or resolve disputes. Security logs and cached marketplace results are kept according to operational need and provider retention settings; sold-result cache entries expire after 12 hours. We do not claim that expiry immediately removes every provider log or backup.
Your choices and rights
Contact us to request access, correction, deletion, restriction or a portable copy of your personal information. You may object to processing based on legitimate interests, including our security processing; we will assess the request and any grounds for continuing it. Rights may be limited by legal obligations. Deleting a cloud record does not remove another team member’s exported copy. We do not use card matching to make decisions with legal or similarly significant effects about you. You can also raise a privacy concern with the UK Information Commissioner’s Office at ico.org.uk.
Account closure and updates
Ask support to close your Card Lens account or remove cloud data. Cancel renewal separately in Manage billing so charges stop; we can help if that is unavailable. You do not need to delete your ChatGPT account. This notice may be updated when the service changes; the version date appears on this page.
Contact support · Subscription terms · Refunds · Privacy
To save a copy, use your browser’s Print option and choose Save as PDF.