Privacy

Your account and collection

We store your email address, account preferences, and any handle, display name, profile details and avatar choices you save. Passwords are stored as hashes, not readable passwords. If you use Google or Discord sign-in, we store the provider's account identifier and the account details it supplies to complete sign-in.

Your saved cards, quantities, conditions, purchase information, binders and wishlist provide your collecting features. Profile and sharing settings control what other collectors can see. Choosing a public or friends-only audience makes the corresponding content visible to that audience; private account data is not made public by choosing a theme.

A session cookie keeps you signed in. The server stores a hash of that token and session information such as the browser's user-agent. Requests also expose connection information, including IP addresses, to Chaserr and its hosting and security providers. We use this to deliver requests, limit abuse and investigate failures.

Scanning on the website

Card photos and recognition results are processed to identify cards. Diagnostic captures can be stored on the server for troubleshooting and recognition improvement. Where the scan review offers a reference-material choice, that choice controls whether the confirmed scan may be used as reference material. The extension's automatic scanning works differently, as described below.

Waitlists and email

If you join a beta or Pro waitlist, we store your email, the list you selected, any interests you supplied and the request date. We use these to acknowledge your request and send relevant access news. Joining does not create an account, start a subscription or authorize a charge. You can ask us to remove your request by replying to the receipt or contacting support.

Chrome extension

The card on screen. Not your browsing history.

The Chaserr extension helps identify cards in a Whatnot video you have open and shows card information and prices. It adds its own panel to the page. You can pause scanning or disable the extension in Chrome.

What it reads and sends

• Video frames: the card detector runs in your browser. To identify a detected card, the extension sends Chaserr a cropped image of the card, with a small surrounding margin. For graded cards, it may also send a crop of the slab label to read the grader, grade and printed details.
• Your Chaserr session: the extension reads the Chaserr sign-in cookie for authentication with Chaserr. It does not send it to Whatnot. The account endpoint supplies your public display name or handle and appearance preferences to the panel; it does not return your email address or internal account ID.
• Your wishlist: the extension requests your Chaserr wishlist, sends search terms you enter in its wishlist search, and sends star or unstar requests when you choose those actions. This is the same wishlist you manage on the website.
• Card information: the panel requests card images and identification results from Chaserr, including available prices and their sources.

The extension does not send the Whatnot page URL or stream identifier to Chaserr. It does not read Whatnot chats, bids or account details, place bids, or track your activity across unrelated websites. Information you type into the extension's own controls, such as wishlist search, is handled for that feature.

Browser storage and sync

The recent-card recap stores card names, sets, displayed prices and timestamps in browser storage, capped at 200 entries and expiring after twelve hours. Panel position, tour status and the current free-scan count are also kept in browser storage. The free allowance is currently counted in the browser, rather than an account-wide server counter.

Some preferences use Chrome's sync storage, including developer endpoint and token settings if you configure them. Chrome may sync those preferences through your Google account when browser sync is enabled. Other panel and recap data use local browser storage. Removing the extension or clearing its stored data removes the local copy; synced data also depends on your Chrome sync settings.

What happens to an automatic scan

Chaserr processes card and slab-label crops to return identification results. Normal extension scan requests do not enable server image archiving. Recognition telemetry, such as a candidate card, match outcome and processing time, is recorded to diagnose recognition and improve catalogue coverage. The automatic-scan log does not include a Whatnot stream ID or page URL. Your server-side wishlist remains associated with your Chaserr account.

Development builds can expose an optional, off-by-default debug setting that copies images and diagnostic information to a program on your own computer at 127.0.0.1. Custom development endpoints and diagnostic captures may behave differently from the standard Chaserr service.

Limited use

Extension data is used to provide and improve card identification, displayed card information, account connection and wishlist features, and to protect the service. We do not sell it, use it for targeted advertising, or use it for credit or lending decisions. The extension contains no advertising or analytics SDK. The Chrome Web Store User Data Policy, including its Limited Use requirements, governs extension data handling.

About the extension · Permanent extension privacy link

Providers that help deliver Chaserr

• Cloudflare carries and protects traffic between your browser and Chaserr. The website also uses Cloudflare Web Analytics. Its browser script reports visits and page-performance measurements to help us understand traffic and improve loading and responsiveness. Cloudflare describes this analytics service as cookie-free and does not use it to track individual visitors across websites. This website analytics script is separate from the Chrome extension.
• Google and Discord provide sign-in when you choose them. Chrome's optional preference syncing is controlled by Google and your browser settings.
• Our email delivery provider, Resend, processes recipient addresses and message content to deliver account and waitlist mail, including delivery and suppression information.
• Card data and image providers supply catalogue information and prices. Directly loaded external images and links may expose ordinary connection information to the provider. We do not send them your collection contents for price lookups.
• Fonts: current themes use locally hosted fonts. Pages using the legacy font loader may request fonts from Google Fonts.

These providers process information needed to deliver their services under their own policies. Chaserr does not sell your personal information.

Access, correction and deletion

Use account settings to update your details and privacy choices. Settings → Data provides a downloadable account-data export and account deletion. Collection tools let you manage your holdings. Contact support about accessing, correcting or deleting data, including anything missing from the current export. Deleting your website account does not automatically clear extension storage on your devices; clear that in Chrome as well.

Account and collection records are kept while needed to provide your account. Waitlist requests are kept for relevant access news unless you ask to be removed. Operational records and diagnostic captures may outlast an account record; contact us about a specific capture or request. We do not currently promise a fixed deletion interval for all logs or backups.

Contact

Privacy questions or requests: support@chaserr.io