Privacy Policy

Last updated October 26, 2026

HoloEx is a trading-card swap app built by four college students. This page explains what we collect when you use it, what we do with it, and how to get it removed. We've tried to write it in plain English; if anything is unclear, email us at holoexcustomerservice@gmail.com.

What we collect

From your Google account

HoloEx uses Sign in with Google. When you sign in, Google gives us your name, email address, profile picture and a Google account ID. We use these to create your HoloEx account and show your name and avatar to other traders. We never see your Google password, and we don't request access to your Gmail, contacts, Drive or anything else.

What you add

• Your profile: handle, display name, bio, location (whatever you type — we suggest city and state, not a street address) and the "wants" tags on your profile.
• Your binder: the cards you add, their condition, grade and certification number, whether they're open to trade, and any photos you upload of them.
• Your activity: cards you pass on, save or offer for in Swipe; offers, counteroffers and trade status; messages you send to other traders; reviews you leave and receive.
• Tracking numbers you add when shipping a trade.

Automatically

A session cookie (hx_session) keeps you signed in. Our hosting providers keep standard server logs (IP address, browser type, pages requested, timestamps) for security and debugging. We don't run advertising trackers or third-party analytics.

What we use it for

• Running the app: showing your binder, matching you with traders, carrying out trades and messages.
• Estimating card values. We combine market prices with the condition and grade you enter and, if you use it, our AI grade estimate of your photos.
• Trust and safety: reviews, trade history and completed-trade counts are shown on profiles so traders can judge who they're dealing with.
• Support: answering your emails and fixing problems.

We don't sell your personal information, and we don't use it for advertising.

What other traders can see

Your profile (handle, display name, avatar, bio, location text, wants), your binder, your wishlist, your reviews and your trade count are public to anyone using HoloEx. Cards you've marked open to trade, with their photos and AI grade estimate, appear in other traders' Swipe queues. Messages and offers are visible only to the two traders in that conversation. Your email address is never shown to other users. Tracking numbers are shown only to the other trader in that trade.

Who else handles your data

• Google — sign-in (Google's privacy policy).
• Railway — hosts our server, database and your uploaded photos.
• Cloudflare — serves the website.
• PriceCharting and TCGdex — provide card prices and card images. We send them nothing about you; price lookups happen on our server.
• If we add an AI grading provider, your card photos (and nothing else) will be sent to it to produce the estimate. We'll name the provider here when that happens.

We'll also disclose information if the law requires it, or to investigate fraud or abuse of the app.

How long we keep it

Your account and everything in it stays until you ask us to delete it. Completed trades, reviews and messages are kept while both accounts exist because other traders rely on them. Server logs are kept for a short period by our hosting providers and then discarded.

Deleting your account

Email holoexcustomerservice@gmail.com from the address you signed up with and we'll delete your account, binder, photos, wishlist and swipes within 14 days. Reviews you've left for others and messages in trades that actually completed are kept but detached from your name, so the other trader's history still makes sense. An in-app delete button is on our list.

You can also revoke HoloEx's access to your Google account at any time from your Google account's "Third-party apps" settings; that signs you out everywhere but doesn't delete your HoloEx data on its own.

Age

HoloEx is for people 13 and older. If you're under 18, trade with a parent or guardian's knowledge — real cards get shipped to real addresses. If we learn we've collected information from a child under 13, we'll delete it.

Security

Traffic to HoloEx is encrypted (HTTPS). Sign-in is handled by Google so we never store passwords. Session cookies are HTTP-only. That said, no system is perfectly secure; don't put anything in a message or bio that you'd be uncomfortable with others seeing.

Changes

If we change this policy in a way that matters, we'll update the date at the top and mention it on the site. Continuing to use HoloEx after that means you accept the updated policy.

Contact

HoloEx · holoexcustomerservice@gmail.com