Last updated: September 4, 2026
The short version
We collect what we need to run TobyTool for you and nothing more. Your files are processed on the TobyTool machine, never sold, never used for ads, and never handed to anyone else's AI. Email [email protected] any time to see, correct, or delete your data.
1. What we collect
· The waitlist: the email address you give us and when you joined.
· Your account: your email address, your password (stored only as a salted hash, so we cannot see it), and when the account was created.
· Your working files: the card scans you upload, your TCGplayer catalog exports, any order files you choose to upload (pull sheets, shipping exports, packing slips), the corrections you make during review, and the files TobyTool builds for you (upload CSVs, labels, your ledger).
· Your buyers' details, if you upload order files: shipping files can include your buyers' names and addresses. We process them only to build your pick lists, packing output, and labels, and we use them for nothing else. Those buyers are your customers, and handling their information properly under your marketplace's rules is your responsibility.
· Billing, once subscriptions are open (the beta itself is free and collects no card): subscriptions are processed by Stripe. Your card number goes to Stripe and never touches the TobyTool machine; what we keep is your subscription status, Stripe's identifiers for your customer record and subscription, and the dates that go with them.
· Feedback and messages: what you type into the feedback box and any email you send us.
· Technical basics: your IP address, browser type, and request logs, kept for security and troubleshooting.
2. How we use it
To run TobyTool for you: reading your scans, matching your catalog, building your files, showing you your own data, and emailing you when a batch finishes or needs another try. To answer you when you write to us. To keep the service safe and working: rate limits, abuse prevention, and debugging. That is the whole list. We do not sell personal information, we do not show ads, and we do not use your files to train AI models. Card reading happens on the TobyTool machine with no metered cloud AI. When you correct a card during review, TobyTool remembers that correction inside your own account so repeat cards read better for you; that memory is never shared with other accounts.
3. Where your data lives
On the TobyTool machine in the United States. Traffic to the site passes through Cloudflare, which provides our networking and the sign-in gate for the app; emails to you are delivered through Gmail; and payments are processed by Stripe, which holds your card details on its own systems. Those providers see what they need to deliver their service and have their own privacy policies.
4. Who can see it
You. The operator of TobyTool, when needed to run the service or help you with a problem. Our service providers (Cloudflare for networking and access, Google for email delivery, Stripe for payments), as described above. Nobody else, unless the law requires it of us.
5. Cookies
The app sets one cookie, and its only job is keeping you logged in. Your browser also stores a few small preferences (like which game you were working on) on your own machine. There are no advertising cookies and no third party analytics.
6. How long we keep it
While your account is active. TobyTool is built to never silently delete your work, so your files stay until you ask us to remove them. Email us and we will delete your account and its files; copies in backups can take a little longer to age out. Waitlist emails are kept until you get your invite or ask to come off the list.
7. Your choices
Email [email protected] to: get a copy of your data, correct something, delete your account and its files, or leave the waitlist. Emails about your own batches are part of the service itself; deleting your account stops them. Depending on where you live you may have specific legal rights over your data (for example under the GDPR or the California Consumer Privacy Act). We honor reasonable requests from anyone, wherever they live.
8. Children
TobyTool is for sellers and requires you to be at least 18. It is not directed to children, and we do not knowingly collect information from children under 13. If you believe a child has given us information, email us and we will delete it.
9. Changes
If this policy changes, the date at the top changes with it, and significant changes will be announced by email or with a notice in the app before they take effect.
10. Contact
Privacy questions or requests: [email protected]. See also our Terms of Service.