SuperRod Scanner
Privacy policy

What the extension does

SuperRod helps identify Pokémon cards from captures and images, review the printed set and number, and consult market references. This policy covers the SuperRod Scanner Chrome extension. The Dex has its own privacy policy.

Captures and local history

When you use capture or choose an image, SuperRod processes the image to find and read the card. It can also read relevant content from the page you activate, such as the page URL, listing title, and visible price. It does not continuously record your screen or collect browsing history from unrelated pages.

The extension keeps identified readings in local browser storage. A reading can include the card image, card identity, source URL, time, and price references saved with it. Settings, interface language, and a hosted-service address you save are also stored locally.

Scanning a store page

Scan page works only when you choose it in the panel, and only on the open tab. While it is on, SuperRod reads the cards for sale in the visible part of that page (their photos, text, and prices) and takes screenshots of the visible area to recognise those photos inside your browser. The screenshots are neither stored nor sent, and nothing from a scan is saved to the history.

To show each offer's market reference, a connected SuperRod backend receives the TCGplayer product identifier shown on the page, or the card identifier and its language, and answers with the TCGplayer price in US dollars. The page's address, text, prices, and images are not sent. Leaving the mode stops the extension from reading the page.

When images leave your browser

No hosted-service connection is configured by default. If you save a SuperRod service address in Settings and grant access to that host, SuperRod can send cropped card images to that service for assisted reading. This can happen automatically during identification while the connection is configured; there is no separate per-capture AI switch.

• Name and number: image strips containing the printed card name or number can be processed by Google Gemini. A backend configured to route Gemini through OpenRouter also sends those requests through OpenRouter.
• Print language: a reduced card image can be processed by OpenAI to identify the language printed on the card.
• Service access: the hosted SuperRod backend uses Convex and creates an anonymous session. It processes a session identifier, authentication tokens, request times, and usage counters for access control and request limits. An access token is kept temporarily in memory and a refresh token in the browser's session storage.

Only connect to a service you trust, and crop out faces, addresses, private messages, or other information unrelated to the card. The configured host and the providers it uses receive the submitted content and normal network metadata. Their processing and retention policies apply. Relevant policies: Convex, Google, OpenAI, and OpenRouter.

Catalogs and market references

Card searches and market features communicate with the providers needed for the selected feature, including TCGdex, Pokémon TCG API, TCGplayer, and eBay. Requests can include card names, set or card identifiers, language, and search terms. When connected, the SuperRod backend also receives card identifiers and language for price lookups. Providers receive normal network metadata; an external link opens under that site's policy.

We use this data to identify cards and return relevant references. We do not sell it or use it for advertising. SuperRod does not request your Whatnot password or order history.

Permissions and your controls

Active-tab and scripting permissions support the capture and page features you activate. Storage keeps readings and settings; alarms support background work. Catalog and market host permissions support lookups. A hosted-service connection requires additional access to its origin when you save it.

History lets you export readings, remove individual entries, or clear the entire history. To avoid hosted image readings, do not configure a hosted-service connection. If one is already saved and you want all extension requests to stop, disable or uninstall the extension in your browser's extension manager.

Retention and deletion

Local history remains until you delete it, clear extension storage, or uninstall. Exported files remain wherever you save them. Deleting local history does not recall requests already sent to a hosted service or its providers.

The SuperRod image-reading routes process images for a response rather than saving them as a hosted photo history. Anonymous authentication records, usage counters, and operational logs are separate service data and can outlast a request. Third-party retention depends on the configured service and provider; this policy does not promise immediate deletion of their logs or copies.

For questions about hosted processing or a data request, contact cardochoo@gmail.com. Include the service address and approximate request time, but never send session tokens or API keys.

Limited use

Use of extension data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only for the features described in this policy and shared only as needed to provide them, for security, or to meet legal obligations. It is not sold or used or transferred for personalized advertising, creditworthiness, or lending. Human access is restricted to specific user consent for support, security needs, or legal requirements.

Questions or changes

SuperRod is operated by James Cardona. Support email is handled as described in the website support-data policy. We will update this policy and its effective date when practices change.

Get help with SuperRod