Privacy policy
Last updated October 31, 2026. Grailhouse is run by an individual collector.
Who can use Grailhouse
A Grailhouse login is for adults (18 or older). A parent or guardian can add their children as people in their own household so the kids can keep a collection, track team sets and ask Buddy questions. Children don't get their own logins, and the adult who owns the household is responsible for how the kids use it.
What Grailhouse keeps
- Your login: your email address and a password (stored by our database provider, never in plain text).
- Your collection: card photos and scans you upload, card details, boxes, what you paid and sold for, trades, goals, breaks and the people in your household (names you type, such as a kid's first name and the teams they collect).
- What you ask Buddy: the conversation stays on your phone or computer. Grailhouse saves the start of each question with what it cost, to count each person's questions for the day and the household's AI use.
- Things you connect, only if you turn them on: order emails your Gmail script forwards (purchases from eBay, Whatnot, Fanatics and breakers), and your eBay seller connection.
- Feedback you send from inside the app.
- AI use: how much AI each household used each month, so allowances work.
- How the app gets used: which pages your household opens and when, and any errors the app hits (the error message, the page, and the kind of phone or browser). That's how problems get found and fixed quickly. Page visits are deleted after 90 days and errors after 180. It doesn't record what's on your cards, what you type, or your photos.
- Sets you need: when you add a card from a set Grailhouse doesn't have yet, the set's name (with the year, sport and what was read off the card) goes to the admin so the set can be added.
Who else sees it
- Nobody else in Grailhouse sees your cards, photos, costs, sales, household or Buddy chats (when Buddy can't answer a grown-up's question, that question is noted for the admin so it can be fixed; a kid's never is). Other households only share the catalog: set checklists and parallels, kept by the admin, which help everyone identify cards. The admin can see each household's usage (the pages opened, card counts and errors described above) to keep the app working, but not your cards' details, photos or costs.
- Service providers that run Grailhouse: Supabase (database, photo storage and logins), Vercel (hosting), Stripe (payments, once you pick a plan: your email, your plan and the card you pay with go to Stripe; Grailhouse never sees or keeps your card number) and Anthropic (the Claude AI that reads card photos, order emails and answers Buddy). Photos and questions are sent to Anthropic to get an answer; under Anthropic's commercial terms they aren't used to train its models.
- eBay, only when you connect your seller account or upload a listing file you made.
- Grailhouse doesn't sell your information, show ads, or share it with anyone for marketing.
Prices
Price data Grailhouse shows comes from sales you or the app look up and from services such as SportsCardsPro. Prices from a SportsCardsPro subscription stay inside the household that loaded them.
Deleting your data
Settings → Delete my Grailhouse deletes your household, its cards, photos, usage records and your login, right away. Backups made by our database provider roll off within about a week. You can download your cards first from Cards → Export.
Kids
Grailhouse isn't meant for children to sign up on their own. If you think a child has made a login, tell us and we'll delete it. Parents can remove a kid's profile from Settings → People at any time.
Changes and questions
If this policy changes, the date at the top changes too. Questions or requests: support@grailhouse.ai.