Lowball Privacy Policy

Version 1.2 · Effective October 15, 2026

This Privacy Policy explains how Optume Ventures LLC ("Optume," "we," "us") handles information in connection with Lowball at getlowball.app and related applications (the "Service").

Lowball is privacy-first by design: your collection, portfolio, tracked cards, cost basis, and settings are stored locally on your own device and are never sent to us. We cannot see them. This policy describes the limited information that is nonetheless involved in operating the Service and in billing for Lowball Pro.

---

1. The short version

• No account required. No login, name, or email is needed to use Lowball's free tier.
• Your collection data stays on your device, in your browser's local storage. We do not receive it, store it, or have any ability to read it.
• If you subscribe to Pro, a random per-installation identifier is stored with your license key to enforce the device limit (see Section 3). You can view and release your devices in the app.
• We do not use advertising, and we do not use cross-site tracking. We run no analytics: the app contains no analytics scripts, and Cloudflare Web Analytics is switched off. The only usage figures we can see are the aggregate traffic totals (request counts, bandwidth, countries) that Cloudflare produces for every website it serves.
• We never see your card number. Lowball Pro payments are handled by a third-party payment provider acting as merchant of record.
• We do not sell your personal information.
• Loading the Service and card images necessarily reveals your device's IP address to our hosting/CDN providers and to third-party image hosts, as with any website. Section 6 lists every outside service the app or our server contacts.

2. Information stored on your device (not collected by us)

The following is stored in your browser's storage, on your device only.

• Local storage: your tracked cards, collection, and portfolio (your pile and any trade in progress, with the cash on each side, the resell channel and a sale price you typed, so a deal survives the app being closed; sold log, deals, and watch list); your offer history (the cards on each offer sheet you log, the percentage of comp offered on each line, the totals, and whether the offer was accepted, declined or pending; buyer and seller names typed on a sheet are not saved); purchase prices / cost basis you enter, and a purchase you are still adding from the scanner (the items and quantities, until you save or discard it); a daily snapshot of your portfolio's total market value and cost basis, one point per day, kept for up to two years, used only to draw the value graph on your own device; fee, channel, currency, exchange-rate, buy-rate (including any value bands), store-credit, and condition settings; your recent additions and a count of your searches; display preferences (language, collapsed sections, the tab you were last on, how you sort your holdings, whether you have seen the tour or the install prompt); the date your price data was last refreshed; a record of which Terms version you accepted and when; your Lowball Pro license key, if you have one; graded card prices you have looked up, saved on your device so they are on hand without a connection (capped, and never a bulk file of someone else's data); and the random installation identifier described in Section 3.
• Cache storage (used by the app's service worker so it works offline): the app's own files, the price, catalog, and price-history files, the card scanner's engine and language data, card images you have viewed, and answers from card searches.
• IndexedDB, only if you turn on Save scanner misses (Settings, At a show; off by default): for up to 20 live scans that did not find the card, a few small pictures of the card as the camera saw it, the scanner's match scores, and the text it read. It stays on your device; it is sent only if you tap Share and choose where it goes yourself.

The app may ask your browser to keep this storage persistent so that it is not cleared automatically when the device runs low on space. That request stays on your device.

This data is not transmitted to Optume. You can delete it at any time from within Lowball, or by clearing your browser's site data for getlowball.app. Because it lives only on your device, we cannot recover it for you if you lose it, so please back it up.

3. Information we or our providers process

• Technical/hosting logs. Lowball is hosted and delivered by Cloudflare. Cloudflare automatically logs standard technical data (IP address, browser and device type, timestamps) for delivery, security, and abuse prevention. This is standard for essentially every website. We do not use these logs to build profiles.
• Our server's request logs. The small server the app talks to (api.getlowball.app, also reachable at lowball-feed.mmilliard2516.workers.dev) runs on Cloudflare Workers with Cloudflare's request logging turned on. For each request to it, Cloudflare records the time, the address requested (which can include a card name or number you looked up), the result, and the network details Cloudflare attaches to every request, such as approximate location, and it may include the request's headers. We use these logs only to find and fix faults and abuse, and Cloudflare deletes them after at most 7 days.
• Pro license checks. When the app checks your Pro license, it sends your license key and installation identifier to our server, which asks Polar whether the key is valid. When you return from checkout, the app sends the checkout reference to our server, which fetches your new license key from Polar so Pro turns on without you copying it from email. Neither involves your collection.
• Rate limiting. To stop abuse of the license, device, checkout, graded-price, condition-price, and acceptance routes, our server counts requests per IP address. It never stores the address itself, only a one-way hash of it combined with a secret value (a "salted hash"), and the counts expire on their own (see Section 10).
• Graded and condition price lookups. When you look up a graded or condition price, our server asks a price provider on your behalf (see Section 6). The provider receives the card name, number, grade, or TCGplayer product id, never your IP address, license key, or collection.
• Pro device seats. If you use Lowball Pro, your subscription may be used on a limited number of devices at a time (see the Terms). To enforce that limit, the app creates a random identifier for that installation (not for you) and sends it to our server alongside your license key. We store that identifier and the date it was last used, associated with your license key. We use it only to count and enforce device seats, and to show you your own devices in the app so you can release one. It is not linked to your browsing, your location, or your collection, and it is not used for advertising, profiling, or analytics. You can release a seat at any time in the app under Settings, Manage devices, which deletes that identifier immediately. Seats not used for 45 days are deleted automatically.
• Third-party card data and images. Prices and images are sourced from third parties (including TCGplayer data via TCGcsv). When images load, your browser requests them from third-party servers, which will receive your IP address and standard request data. Their content is governed by their own terms and privacy policies.
• Support communications. If you email us, we receive your email address and message, and use them only to respond.

4. Lowball Pro: payment and subscription data

Lowball Pro is a recurring monthly subscription. Payments are processed by Polar (the "Payment Processor"), which acts as the merchant of record. - You provide payment details directly to the Payment Processor. Optume does not collect, receive, or store your full payment card number. - The Payment Processor handles billing, recurring charges, payment security, and applicable sales tax/VAT. - We receive limited order and subscription information, such as: the email address you provide at checkout, confirmation that a purchase or renewal occurred, subscription status (active / cancelled / lapsed), the license key issued to you, and country/region for tax purposes. - We use this to deliver and validate your license, provide support, honor cancellations and refunds, and keep required business and tax records. - The Payment Processor's own privacy policy also applies: https://polar.sh/legal/privacy.

5. Cookies and local storage

Lowball uses your browser's local storage for functional purposes only, to save your collection, settings, and license so the app works. This is necessary/functional storage, not advertising or cross-site tracking, and Lowball does not set advertising or tracking cookies.

Verified: as of this version, Lowball's source contains no analytics, no advertising, no tracking pixels, and no third-party tracking scripts of any kind. (Confirmed by scanning the application source, not merely assumed.)

If any analytics is ever added, including self-hosted or "privacy-friendly" analytics, this policy must be updated before it ships, and users in the EU/UK will likely require a consent mechanism.

6. Third parties we rely on (sub-processors)

When you use Lowball, your browser contacts the following third parties. Each receives, at minimum, your IP address and standard request information. This is inherent to how the web works.

Links to other sites. Some pages link out: our Instagram page (instagram.com) in Settings, and the marketplaces' own fee pages on the selling-fees page (www.ebay.com, help.tcgplayer.com, www.whatnot.com, help.whatnot.com). Nothing is sent to those sites unless you tap a link, and what happens after that is governed by their own privacy policies.

Fonts are self-hosted. The typefaces Lowball uses are served from getlowball.app itself. Your IP address is not sent to Google or any font network to render this app.

The card scanner runs entirely on your device. It uses on-device optical character recognition. Photos and camera frames are never uploaded, transmitted, or sent to us or to any third party. The OCR engine, its worker, and its language data are all served from getlowball.app itself, so not even the fact that you used the scanner is shared with a third-party CDN. (If we ever change this, for example by adding a cloud image-recognition service, we will update this policy and tell you before it ships.)

7. Legal bases (EEA/UK users)

Where the GDPR applies, we process the limited data described above on the basis of: contract (to provide and bill for Lowball Pro), legitimate interests (to secure and operate the Service and prevent abuse), and legal obligation (to keep tax and transaction records).

8. Your rights and choices

Because your substantive data lives on your own device, you already have direct control: view, edit, export, or delete it in Lowball at any time.

For the limited data we or our providers hold (support emails, subscription/order records), depending on where you live you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent, for example under the EU/UK GDPR or the California Consumer Privacy Act (CCPA/CPRA). We do not sell or share your personal information for cross-context behavioral advertising. You will not be discriminated against for exercising these rights.

If you are a Lowball Pro subscriber, Polar's customer portal also lets you download a complete export of your personal data, subscriptions, and orders in one click.

To make any other request, email mmmilliard@optumeventures.com. We may need to verify your request (for example, by matching the email used at checkout).

9. Children's privacy

Lowball is a tool for collectors, investors, and sellers and is not directed to children under 13 (or under 16 where that is the applicable age). We do not knowingly collect personal information from children. Every feature other than Pro runs entirely on your own device and stores nothing with us. Lowball Pro may only be purchased by adults (18+). If you believe a child has provided us personal information, contact mmmilliard@optumeventures.com and we will delete it.

10. Retention and security

Data on your device persists until you delete it. Nothing below is kept indefinitely, and each item is held only for as long as the purpose it was collected for requires.

• Pro device seat (needed to enforce the seat limit): 45 days after that device was last used, immediately when you release it in the app, or when a newer device takes its place.
• Acceptance record (proof of which Terms you agreed to, and when, together with the price shown, your browser’s user-agent string, and a hash of your IP address): three years from the date recorded, to cover payment dispute and regulatory periods.
• Abuse counters (a salted one-way hash of your IP, used to rate limit): one minute for the license and device routes, two hours for the others.
• License check results (whether a key was valid): one hour, or five minutes after a failed check. Checkout claims (the license key fetched for a checkout reference): one hour.
• Our server's request logs (Section 3): up to 7 days, deleted by Cloudflare.
• Licence sharing counter (how often a key changed devices): 90 days.
• Price and lookup caches: 48 hours. These describe cards, not people.
• Portfolio value snapshots (one point per day): capped at roughly two years of daily points; cleared immediately by Delete my data.

To have your records removed sooner, release your device seats in the app, which deletes them immediately, and email us to remove any acceptance record. Data held by our providers (hosting logs, subscription and tax records) is retained per their policies and as long as needed for business, security, accounting, and legal purposes. We use HTTPS in transit. No system is perfectly secure; the local-first design substantially limits what is at risk, but we cannot guarantee absolute security.

11. International transfers

We operate from the United States and use providers that process data in the United States and elsewhere. If you use the Service from outside the U.S., the limited technical and billing data described above may be processed in the U.S.

12. Changes to this policy

We may update this policy. Material changes will be reflected in the version and date above and, where appropriate, by additional notice (email and/or in-app).

13. Contact

Optume Ventures LLC Pennsylvania, United States mmmilliard@optumeventures.com

---