Privacy Policy

Effective November 11, 2026.

This policy explains what Azudex collects, why, who receives it and what you can do about it. Azudex is run by Christopher Durst, an individual in New York, United States, who is responsible for your data. You can reach us at hello@azudex.com.

What we collect

• Your email address, to sign you in and to write to you about your account.
• When your account was made, when you confirmed you are 18 or older, which version of the terms you agreed to and when, and the time zone your browser reports, so dates come out right. We ask for your month and year of birth only to check your age, and we don't store them.
• What you enter: purchases, sales, trades, the sealed product you open and what came out of it, your collection, binders, wishlist, fees, shipping methods, notes and any spreadsheet you import.
• Card photos, when you scan. Your phone takes a picture of the card in the box on screen and sends it to our server, which passes it to Anthropic's AI to read. Azudex doesn't save the photo. It is taken from the camera picture, so it doesn't carry the location data a phone's photo files can hold.
• When Azudex is trying a free picture matcher beside the AI, your phone also sends our server two tiny, blurred colour copies of the card in the box, 16 dots across at most, and numbers that describe its edges, but not the photo. Azudex doesn't save them. For each scan we keep which cards the AI and the matcher picked, how sure the matcher was, when the scan was made and whether it was for a purchase, a rip, a trade or cards you already had, until you delete your account.
• Cookies. One keeps you signed in for 30 days, one holds your time zone so dates come out right, one remembers which side of the site you used last, and one stops a second try after an age check fails. There are no advertising or analytics cookies. Cloudflare may also set its own cookies to tell people from bots and protect the site.
• Your browser also keeps unsaved form drafts and how you sorted tables, in its own storage on your device. They never reach our server.
• Your IP address, which our server sees with each request. Azudex holds it in memory only to limit how many sign-in links can be asked for, and doesn't store it in its database. Our hosting provider and Cloudflare may keep network logs for security.

Why we use it

We use your data to run Azudex for you: to sign you in, store and show your records, look up prices and read the cards you scan. For people in the EU and UK, the legal basis is our contract with you. We also use it to keep Azudex secure and stop abuse, which is our legitimate interest, and keep the record of your age check and agreement to the terms because the law expects it. While we are trying a free picture matcher, we compare its picks with the AI's for each scan to judge whether it could replace the AI, which is our legitimate interest in keeping scanning affordable.

We don't sell your data, share it for advertising or build profiles from it. Because Azudex doesn't keep your photos, it doesn't use them for anything except reading the card.

Who receives it

• OVH, which hosts our server and database in the United States.
• Cloudflare, a US company that carries all traffic between your browser and our server to protect the site from attacks. It handles what you send and see on Azudex, including your email address when you sign in.
• Amazon Web Services, whose Simple Email Service delivers sign-in emails from the United States and so receives your email address and the email.
• Anthropic, which receives card photos to identify them. Anthropic doesn't train its models on data sent through its API. It keeps that data for a limited time under its own retention policy, and can keep content its safety systems flag for up to two years.
• Paddle, once Pro is on sale. Paddle is merchant of record and handles payments under its own privacy notice on paddle.com. We would get your subscription status and the basic details of each payment from Paddle, never your full card number.
• Authorities, when the law requires it.

Card pictures load straight from TCGplayer's and TCGdex's image servers. Like any website you visit, they see your IP address and browser, but they don't get your account or records.

Nobody else receives your records.

Where it is stored

Azudex's server and database are in the United States. If you use Azudex from another country, your data is transferred to the United States and processed there.

How long we keep it

• Your account and records stay until you delete your account.
• Sign-in links stop working after 15 minutes and are deleted a day later.
• A sign-in session ends when you sign out, or 30 days after you last used Azudex.
• The server keeps a copy of the database from each of the last 7 days, and up to three copies made just before restoring a backup, which happens rarely. Every copy is deleted after 7 days, so deleted data can stay in a backup for up to 7 days.

Your rights

Download my data, on the Account page, gives you your records at any time as CSV files of your purchases, sales, rips, trades, collection, binders and fees. You can correct your records by editing them in Azudex, and delete your account and everything in it from the Account page. You can also email hello@azudex.com to ask for a full copy of everything we hold about you, to correct or delete it, or to object to how we use it, and we'll answer within 30 days. If you are in the EU or UK, you can also complain to your data protection authority.

Deleting your account

Delete my account, on the Account page, removes your account and every record in it straight away. Copies in server backups are deleted within 7 days. If a backup made before you deleted your account is ever restored, your account is deleted again straight away. For that, we keep your account's number and when it was made, and nothing else.

Security

Sign-in links work once and stop working after 15 minutes. We store only hashed copies of sign-in links, session ids and invite codes, so a copy of the database can't be used to sign in. Your records and scans are never shown to other users.

Do Not Track

Azudex has no ads or analytics and doesn't track you across other websites, so it does nothing different when your browser sends a Do Not Track signal.

Children

Azudex is for adults. You must be 18 or older to make an account, and we don't knowingly collect personal information from anyone under 18, including children under 13. If you believe a child has given us information, email hello@azudex.com and we'll delete the account and its data.

Changes to this policy

If we change this policy, we'll update the date at the top, and tell you by email or on the site before a change that affects how your data is used takes effect.

Contact

Christopher Durst. Email hello@azudex.com.