Privacy
What this site collects, and how to say no.
Plain words, no tricks. Effective September 21, 2026.
The short version. PokéSpa is a Recursis Holdings venture. We collect what you send through the quote form (including your card photos), the email you give us for the drops digest, cookieless page-view counts, and — only if you press Accept when we ask — a Meta ad pixel. Some shop links are Amazon affiliate links. We don't sell your data, we don't trade it with data brokers, and a person answers info@pokespa.com.
What we collect and why
The quote form. Requesting a quote asks for your name, email, a description of the card, and up to four photos. Photos are shrunk in your browser before they're sent. The whole thing is turned into one email — photos attached — and sent to our inbox through Resend, our email provider, with your address set as reply-to so we can answer you. We use it to assess the card and reply, and for nothing else. Your photos are never posted anywhere.
The drops digest. If you sign up on the Drops page, your email goes into a mailing list held by Resend and you get a short weekly email about upcoming sets. Every email has an unsubscribe link; one click removes you. We don't add anyone to that list who didn't sign up for it, including people who send a quote request.
Analytics. We use Vercel Web Analytics and Vercel Speed Insights to count page views and measure how fast pages load. They are cookieless, don't build a profile of you, and don't follow you across other sites. We see aggregate numbers — pages, countries, device types, load times — not people. How Vercel handles it.
The ad pixel — off until you say yes. We use the Meta Pixel (Facebook and Instagram) to tell whether our ads bring collectors here, and — if you send the quote form — to count that as a lead. None of it loads until you press Accept on the bar at the bottom of the page. Before that there is no request to Meta, no fbevents.js, no pixel cookie, and nothing about your visit goes to Meta. If you say yes, the pixel sets cookies and sends Meta the pages you view here along with your browser and IP details, and we always send Meta the Limited Data Use flag, which tells Meta to process that data under California’s restrictions. We never send Meta your name, your email, your message, or your card photos. We keep your answer in your browser for 12 months and then ask again. Change it any time with Change my choice in the footer, or the switch below — and we honor your browser’s Global Privacy Control signal automatically, in which case we never ask at all. Meta’s privacy policy covers what Meta does with what it receives.
Amazon affiliate links. As an Amazon Associate, PokéSpa earns from qualifying purchases. Links marked "(paid link)" on the Shop page carry our affiliate tag. When you click one, Amazon sets its own cookies and handles everything from there under Amazon's privacy notice. Amazon tells us what was bought through our links in aggregate; it does not tell us who bought it.
The merch shop. shop.pokespa.com is hosted by Fourthwall, which is the merchant of record: Fourthwall takes your payment, prints, ships, and handles returns under its own privacy policy and terms (linked in the shop footer). We can see order details in the shop dashboard so we can help with a problem; we don't get your card number.
The tools. The value lookup sends your search terms from your browser to the community Pokémon TCG API to fetch results; the show finder links you out to Google Maps and Facebook searches, which run under their own policies. The Drops page pulls set dates and headlines from public sources on our server; nothing about you goes with those requests.
What we don't do
- We never sell your data, and we never hand it to data brokers.
- We don't combine what you send in a form with the ad pixel or analytics.
- We don't send marketing email to quote requesters. The only list is the drops digest, and only for people who signed up for it.
- This site isn't aimed at children under 13, and we don't knowingly collect their information.
How long we keep it
| What | How long |
|---|---|
| Quote requests and photos (in our inbox) | As long as the job or conversation is live, or until you ask us to delete them |
| Drops digest list | Until you unsubscribe or ask to be removed |
| Vercel analytics | Aggregate only, kept by Vercel under its standard retention |
| Meta Pixel data | Only exists if you said yes; held by Meta under Meta’s policy. Turn it off any time with the switch below |
| Shop orders | Held by Fourthwall for as long as it needs to fulfil and support the order |
Your choices
- Say no to the ad pixel — it is off until you press Accept, and the switch below turns it back off whenever you like. Global Privacy Control in your browser does the same thing automatically.
- Leave the drops list with the unsubscribe link in any digest email.
- See, correct or delete anything you've sent us — photos included: email info@pokespa.com from the address you used and we'll do it, usually within a few days.
- Block cookies in your browser if you'd rather — the site works fine without them.
Ad cookies
The Meta ad pixel is off on this browser until you turn it on. This is the same switch as the bar at the bottom of the page and the Change my choice link in the footer — press it to turn the pixel on, press it again to turn it off. We keep your answer in this browser for 12 months, then ask again. This also covers California’s “Do Not Sell or Share My Personal Information” right: saying no here is that request.
Changes and contact
If we change what we collect, we change this page and the date at the top. Questions, requests, or something that looks wrong here: info@pokespa.com. PokéSpa is a Recursis Holdings venture, United States.