Pulled

Effective September 22, 2026. Last updated September 29, 2026.

Privacy Policy

This policy explains what information Pulled collects, why we collect it, who processes it for us, how long we keep it, and the choices and rights you have. It applies to the Pulled iPhone app, the pulled.cards website, and our support email (together, “Pulled”). It describes our handling of information, including our disclosures to other companies. Where Apple, Google, eBay, or another company uses information for its own purposes, its privacy policy also applies.

We collect what we need to run your account, identify and price your cards, and, if you connect eBay, sell for you. We do not sell your personal information, we do not show ads, and we do not track you across other companies’ apps or websites.

Contents

Who we are

Pulled is made by Tuckes Dev LLC, a North Carolina limited liability company (“Pulled,” “we,” “us”). We are the controller of the personal information described in this policy. You can reach us at admin@pulled.cards. You can also use this email address to request a postal contact address for privacy or legal correspondence.

What we collect and why

An account identifier, created when you first open Pulled. The first time you open the app, Pulled creates an anonymous account for you so your collection can be saved before you sign in. That account is a random identifier with no name or email attached. We use it to store your data, to keep one person’s data separate from another’s, and to apply fair-use limits to our servers.

Sign-in information. If you sign in, you choose how:

We use this to let you sign in, keep your collection safe across devices, and contact you about your account. We never receive your Apple or Google password.

Your collection and portfolio. The cards you save, with the condition, grading company, grade, quantity, and any purchase price you enter; the history of cards you add, remove, or regrade; and a daily snapshot of your collection’s estimated value. We use this to show your collection and portfolio and to send price alerts if you turn them on.

Card photos and text read from them. Photos you take or pick to scan a card, and text Pulled reads from the photo on your iPhone. See Card photos below.

eBay seller information, only if you connect eBay. See eBay below.

Notification information, only if you allow notifications. Your device’s push token, the app version, which notification topics you turned on (sales and offers, price alerts), your device’s time zone, and a record of which notifications we sent so we do not send the same one twice. We use the time zone so a date in a notification, such as an eBay ship-by date, is correct where you are. This does not use GPS.

Onboarding answers. When you first set up Pulled, you can answer a few questions, such as how long you have collected and what you want Pulled to help with. These answers stay on your iPhone and are sent to Superwall to choose which subscription offer and wording you see.

Subscription and app usage information. Whether you subscribe to Pulled Pro, which plan, and trial and renewal status, plus the analytics described in Subscriptions, analytics, Superwall, and PostHog.

Technical and security information. When the app talks to our servers, our hosting provider records ordinary request information, such as the time, the function called, the response status, the size of the request, and the network address the request came from. We also keep short-lived request counters tied to your account identifier to stop abuse. We use this to run, secure, and fix Pulled.

Support messages. If you email us, we receive your email address, your message, and anything you attach, and we use them to answer you.

Website visitors. The pulled.cards website sets no cookies, runs no analytics, and loads nothing from other websites. Cloudflare, which hosts it, processes the network address and request details of each visit to deliver the page and protect the site from attacks.

Information on your iPhone only. Pulled keeps some information only on your device: your scan history and its photos, scans waiting to finish, your appearance and notification choices, and caches that make the app faster. We do not receive these unless this policy says so.

We do not request access to your contacts, GPS location, health records, or browsing history. We receive the ship-from location you enter for selling, and providers can derive an approximate location from your network address. Photos and messages may contain other personal information you choose to include. We do not use your information for advertising.

Card photos

Pulled uses your camera, or photos you pick from your library, to identify cards and prepare listing photos. Camera access requires permission; library selection gives Pulled access to the photos you choose.

Please photograph only the card. If a photo includes other things, such as a face or a document, it is processed in the same way.

eBay

Connecting eBay is optional. When you connect, eBay asks you to sign in on eBay’s own page and approve Pulled’s access. We never see your eBay password. eBay then gives us access tokens that let Pulled act on your eBay seller account for the actions you choose.

What we store. Your eBay user ID and username, the access tokens and the permissions you granted, the selling preferences you set in Pulled (which Pulled saves to eBay as your business policies and ship-from location), the listings you create through Pulled and their details (title, description, price, format, quantity, condition, grading, shipping, returns, photo links, fees, and status), and a copy of the orders and payouts for those sales (order ID, item, price, status, ship-by date, and payout amount and status). We also store the country eBay has on file for your account, because Pulled currently supports U.S. sellers only.

Setting up selling on eBay. If eBay says your account is not set up to sell yet, Pulled asks eBay only whether a name and address and a phone number are already on file, so it can show which steps are left. We do not store that answer or the details themselves. Pulled then opens eBay’s own setup page, where eBay collects anything else it needs, such as identity and payout details. Pulled never sees or stores that information.

Normal shipping setup uses your ship-from ZIP code. If you choose to add Product Safety details to a listing, those optional details may include a manufacturer or responsible contact's name, street address, email address, and phone number. Pulled saves them with that listing and sends them to eBay.

What we do with it. Create, revise, and end your listings; upload the photos, videos, and documents you add; read your offers and send the responses you choose; read orders and add the tracking you enter; read payouts; and send you notifications about sales and offers if you turn them on. We only do these things for you, when you ask or to keep your Pulled screens up to date.

Buyer information. Pulled is built not to store or show your buyers’ addresses, email addresses, or phone numbers. eBay shows those to you directly. If a buyer’s name appears in order information eBay returns, we use it only to show you your own order.

Disconnecting. You can disconnect eBay in Pulled’s Settings at any time. Pulled then deletes your stored eBay tokens and stops acting on your account. You can also remove Pulled’s authorization in your eBay account settings. Disconnecting does not end live listings or cancel orders on eBay; manage those on eBay. If you close your eBay account, eBay notifies us and we delete your stored eBay credentials. Disconnecting or receiving that notice does not currently erase Pulled’s historical listing, order, or payout records; see How long we keep it and your deletion rights below.

eBay’s own User Privacy Notice applies to information on eBay.

Subscriptions, analytics, Superwall, and PostHog

Pulled Pro is sold through Apple’s App Store. Apple handles payment; we never receive your card number or billing address. Apple tells us, and Superwall, whether your subscription is active, which plan it is, and its trial and renewal status, and we store whether your account is subscribed.

We use Superwall to show the subscription screen, run purchases and restores through Apple, and measure how the subscription screen performs. The Superwall software in the app sends Superwall your Pulled account identifier, your onboarding answers, subscription and purchase events, and events such as a subscription screen opening, closing, or converting, together with device information such as model, operating system, language, region, app version, and network address, from which approximate location may be derived. These events can be linked to your account; they are not anonymous simply because we also view aggregate reports. We use this information to test offers and understand and improve the subscription experience. We do not use Superwall, or anything else, to track you across other companies’ apps or websites.

We use PostHog to understand which screens and features people use, where setup is unclear, and why the app crashes or freezes. The PostHog software in the app sends PostHog your Pulled account identifier, device and app version, approximate location derived from your network address, the screens you visit and the named buttons you use, the fixed answers you choose during setup, your subscription status, and crash and freeze reports. It does not send your card photos, email address, name, listing text, or anything you type. You can turn this off in Settings under “Share usage and crash data”, which stops collection from that moment. Our servers also send PostHog your account identifier with subscription events (a trial starting or converting, a renewal, a cancellation, a refund, or a billing problem) so we can understand how subscriptions perform; these are recorded whether or not that setting is on.

Who processes your information

We disclose information to the following companies to provide Pulled. Their role depends on the service: some process information on our behalf, while others also determine their own purposes, such as operating a marketplace, providing an account, or handling payments.

Card prices come from third-party market data, including PokeTrace, TCGplayer data provided through TCGcsv, and Cardmarket data provided through TCGdex. We send them card identifiers, rather than your Pulled account details for server-side price lookups. Separately, your iPhone downloads catalog images directly from TCGdex and TCGplayer image servers, and listing images from their hosts. Those hosts receive your network address and ordinary request information, including the image requested. We cache images to display cards efficiently. These image requests are different from our server-side price lookups.

When we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only:

How long we keep it

We may keep limited information longer when the law requires it, to resolve disputes, or to prevent fraud or abuse.

Your choices and how to delete your account

Deleting your account does not cancel Pulled Pro, which Apple bills (cancel it in the iPhone Settings app under your name, then Subscriptions), and does not end live eBay listings or orders. You can also ask us to delete your account by emailing admin@pulled.cards. Requests can cover information held by our processors, including Superwall; identify any specific records you want us to address. We may need to verify your identity to protect your account.

Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, get a copy of it, correct it, delete it, object to or restrict certain uses, and withdraw consent. You can see and correct most of your information in the app, and request deletion as described above. For anything else, email admin@pulled.cards.

We will verify your request by confirming it comes from the account concerned, for example through the email or sign-in on the account, and answer within the time the law allows (usually 30 or 45 days). You may use an authorized agent where the law allows; we may ask for proof of the agent’s authority. We will not treat you differently for using your rights. If we deny your request, you may appeal by replying to our answer, and, if you are unhappy with the outcome, contact your state attorney general or data protection authority.

California residents

Where the California Consumer Privacy Act, as amended, applies to our processing, this section supplements the rest of this policy. We collect the following categories of personal information from you, your device, and the services you connect, for the purposes described in What we collect and why:

We disclose these categories for business purposes to the providers and in the situations listed above. We do not sell or share (for cross-context behavioral advertising) personal information, including that of consumers under 16. We keep each category for the periods in How long we keep it. You have the rights to know, delete, correct, and not be discriminated against, described in Your rights.

EEA, UK, and Swiss residents

Where applicable data protection law requires a legal basis, we process personal information on the following bases, depending on the purpose:

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. You may complain to your local data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal. You may contact us at admin@pulled.cards to exercise your rights or request more information about our processing.

Children

Pulled is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has used Pulled or provided personal information, we will take steps to delete it and close the account as appropriate.

People aged 13 to 17 need their parent or guardian’s permission to use Pulled. Only an eligible adult may connect an eBay seller account or publish listings through Pulled. If a parent or guardian sells a younger person’s cards using their own Pulled and eBay accounts, we process that adult’s eBay information as described above.

If you believe a child under 13 has provided personal information, contact admin@pulled.cards so we can investigate and handle the information as required by law.

Security

Information travels between the app and our servers over encrypted connections. Your data is protected by database rules that let each account read only its own information. eBay tokens are kept on our servers and never sent to the app. Access to our systems is limited to the people who need it. No service can guarantee perfect security; if we learn of a breach that affects you, we will tell you as the law requires.

International transfers

We are based in the United States, and our processors store and process information in the United States and other countries, where privacy laws may differ from those where you live. You can contact admin@pulled.cards for information about the locations, provider arrangements, and transfer safeguards applicable to your personal information. Using Pulled does not waive protections provided by applicable law.

Changes to this policy

We may update this policy as Pulled changes. We will change the dates at the top, and if a change is material we will tell you in the app or by email before it takes effect.

Contact us

Tuckes Dev LLC, North Carolina, United States. Privacy and legal requests: admin@pulled.cards. Product help: support@pulled.cards.