Privacy Policy

1. Information CarDex collects

CarDex uses an anonymous account identifier to keep each player's collection separate. Gameplay does not currently require a name, email address, phone number, password, or social login. If you choose to contact support, the separate support form requires a contact email.

• An anonymous account identifier used to maintain the game session.
• Vehicle photos taken with the camera or selected from the photo library.
• Discovered vehicles, discovery dates, sighting counts, rarity, and XP.
• Support-form information: contact email, request category, device and OS information (or N/A), anonymous Player ID (or N/A), and a free-text message.
• Technical request data necessarily processed for hosting, security, and authentication.

CarDex does not currently request precise or approximate location.

2. How information is used

We use this information to provide vehicle identification and collection features, save and restore a collection, associate photos with the correct private collection, award XP, secure anonymous sessions, and diagnose operational failures when necessary. Support-form information is used to respond to requests, troubleshoot issues, verify and complete data requests, keep necessary request records, and prevent abuse.

CarDex does not sell personal information or use it for targeted advertising or cross-app tracking.

3. Vehicle photos and identification

When you submit a vehicle photo, CarDex uploads a normalized JPEG to private cloud storage associated with your anonymous identifier.

Before connecting a third-party identification provider, we will review and update this policy and the applicable app-store disclosures.

4. Service providers

CarDex uses Supabase for anonymous authentication, database storage, private photo storage, and server-side functions. CarDex uses Tally to host and store responses to the support and data-request form. Tally processes those form responses on our behalf. Service providers process data only to provide and protect the applicable service.

5. Retention and deletion

Vehicle photos, anonymous identifiers, and collection history may be retained while needed to provide your persistent CarDex collection or meet legal, security, and dispute-resolution obligations.

Support-form submissions may be retained while reasonably needed to respond, troubleshoot, verify and complete the request, maintain necessary records, prevent abuse, and meet legal obligations. Deleted Tally form data may remain in Tally backups for up to 90 days unless permanently removed sooner.

CarDex does not use traditional email/password accounts. To request deletion, choose Data deletion request in the support form. We may need the anonymous player ID available in the app to locate the correct private records. We will verify the request before deleting data.

6. Camera and photo-library access

CarDex asks for camera access so you can photograph vehicles and may request photo-library access so you can select an existing image. These permissions are used only when you initiate a capture or selection flow.

7. Children's privacy

CarDex is a general-audience car collection game and is not directed specifically to children. If its intended audience or data practices change materially, this policy will be reviewed and updated.

8. Security

CarDex uses authenticated sessions, private storage, access controls, and encrypted network connections to protect game data in transit and restrict access to player-specific records. No security system can guarantee absolute protection.

9. Changes to this policy

We may update this policy when features, providers, or data practices change. We will update the effective date on this page when we do.

10. Contact

CarDex is operated by Sewon Min. Privacy questions and data requests can be sent through the official Tally-hosted support form. Do not include passwords, authentication tokens, payment information, or unrelated sensitive data.