Privacy Policy

Last updated November 2, 2026

HoloEx is a trading-card swap app built by four college students. This page explains what we collect when you use it, what we do with it, and how to get it removed. We've tried to write it in plain English; if anything is unclear, email us at holoexcustomerservice@gmail.com.

What we collect

From your Google account

HoloEx uses Sign in with Google. When you sign in, Google gives us your name, email address, profile picture and a Google account ID. We use these to create your HoloEx account and show your name and avatar to other traders. We never see your Google password, and we don't request access to your Gmail, contacts, Drive or anything else.

What you add

• Your profile: handle, display name, bio, location (whatever you type — we suggest city and state, not a street address) and the "wants" tags on your profile.
• Your binder: the cards you add, their condition, grade and certification number, whether they're open to trade, and any photos you upload of them.
• Your activity: cards you pass on, save or offer for in Swipe; offers, counteroffers and trade status; messages you send to other traders; reviews you leave and receive.
• Tracking numbers you add when shipping a trade, and the mailing address and phone number you save on the Account tab. Your phone is only used for shipping labels: when you buy postage in HoloEx, it goes on the label with your address and email, which we send to our postage provider (Shippo) and the carrier to make the label. Other traders never see your phone or email.

Automatically

A session cookie (hx_session) keeps you signed in. Our hosting providers keep standard server logs (IP address, browser type, pages requested, timestamps) for security and debugging. We don't run advertising trackers or third-party analytics.

What we use it for

• Running the app: showing your binder, matching you with traders, carrying out trades and messages.
• Estimating card values. We combine market prices with the condition and grade you enter and, if you use it, our AI grade estimate of your photos.
• Trust and safety: reviews, trade history and completed-trade counts are shown on profiles so traders can judge who they're dealing with.
• Support: answering your emails and fixing problems.

We don't sell your personal information, and we don't use it for advertising.

What other traders can see

Your profile (handle, display name, avatar, bio, location text, wants), your binder, your wishlist, your reviews and your trade count are public to anyone using HoloEx. Cards you've marked open to trade, with their photos and AI grade estimate, appear in other traders' Swipe queues. Messages and offers are visible only to the two traders in that conversation, with one exception: if one of you reports the other or flags a trade with “Something's wrong”, HoloEx staff may read that conversation to look into scams, harassment or trade disputes. Staff can't open chats that haven't been reported or flagged, and every time staff opens one it's logged. Your email address is never shown to other users. Tracking numbers and your mailing address are shown only to the other trader in a trade you've both accepted; the address never appears on your profile.

Who else handles your data

• Google — sign-in (Google's privacy policy).
• Railway — hosts our server, database and your uploaded photos.
• Cloudflare — serves the website.
• PriceCharting and TCGdex — provide card prices and card images. We send them nothing about you; price lookups happen on our server.
• If we add an AI grading provider, your card photos (and nothing else) will be sent to it to produce the estimate. We'll name the provider here when that happens.

We'll also disclose information if the law requires it, or to investigate fraud or abuse of the app.

How long we keep it

Your account and everything in it stays until you delete it. Completed trades, reviews and messages are kept while both accounts exist because other traders rely on them. Server logs are kept for a short period by our hosting providers and then discarded.

Deleting your account

Delete your account any time from the Account tab on your binder. It happens right away: your account, binder, photos, wishlist and swipes are deleted, along with chats and offers that never became a trade. Reviews you've left for others and messages in trades that actually completed are kept but detached from your name, so the other trader's history still makes sense. If a trade is in progress (cards accepted or in the mail), finish it first.

You can also email holoexcustomerservice@gmail.com from the address you signed up with and we'll delete it for you within 14 days. The Account tab also lets you download a copy of your data and log out on every device.

Revoking HoloEx's access in your Google account's "Third-party apps" settings stops HoloEx signing you in with Google, but doesn't delete your HoloEx data on its own.

Age

HoloEx is for people 13 and older. If you're under 18, trade with a parent or guardian's knowledge — real cards get shipped to real addresses. If we learn we've collected information from a child under 13, we'll delete it.

Security

Traffic to HoloEx is encrypted (HTTPS). Sign-in is handled by Google so we never store passwords. Session cookies are HTTP-only. That said, no system is perfectly secure; don't put anything in a message or bio that you'd be uncomfortable with others seeing.

Changes

If we change this policy in a way that matters, we'll update the date at the top and mention it on the site. Continuing to use HoloEx after that means you accept the updated policy.

Contact

HoloEx · holoexcustomerservice@gmail.com