Updated: October 9, 2026 · iOS and Android app
1. Controller and contact
market port GmbH
Splieterstraße 27
48231 Warendorf, Germany
info@marketport.de
+49 2581 9493360
marketport.de
Data protection officer: Nils Möllers, Keyed GmbH
info@keyed.de
+49 2505 639797
2. Local data processing
Collections, templates, metadata, notes, optional storage locations and acquisition dates, settings and photos are normally stored only on this device. There is no CollectorsHub account, synchronization, advertising, analytics or tracking. The app does not send this data to a CollectorsHub or WordPress server.
A backup file or CSV file is exported only at your express request. Depending on the export, these files may contain storage locations, acquisition dates. You decide where to store or share them. Importing a backup replaces the locally stored collection data after your confirmation.
When you send feedback, the name, email address and message you enter, your app language, app version and build number, device model, operating system version and IP address are sent over HTTPS to the CollectorsHub contact API. The message is emailed to the CollectorsHub project at awork with the technical details as a text attachment; a copy of the message without the attachment is sent to your email address. No collections, photos or API keys are included automatically.
When you open the FAQs, the app loads public answers for the selected language over HTTPS from collectors-hub.io. The server processes the IP address to provide the connection. No search terms, collection data, photos, API keys or device diagnostics are sent. Confirmed answers are cached on the device for offline use.
Optional catalog lookup starts only when you tap “Search” or “Review match”. The search term, optional set name or catalog ID and selected catalog language are sent over HTTPS to collectors-hub.io and from there to Rebrickable (LEGO) or TCGdex (Pokémon). Providers see the server IP; CollectorsHub processes the device IP for the connection and short-term rate limiting using a hashed identifier. The app sends no photos, notes or full collections. Responses are cached on the server for up to five minutes, LEGO theme names for up to one hour. Accepted details and source references are stored locally and included in backups and CSV exports. External source and image links open in the browser only when tapped; the provider’s terms and privacy notices then apply.
Optionally retrieve market prices for catalog-linked Pokémon items: manually or, after saving a price basis and “Update when opening”, when opening after at least 24 hours since the last successful retrieval. Only the catalog ID, catalog language and price basis are sent via collectors-hub.io to TCGdex (Pokémon; Cardmarket/TCGplayer data). Providers see the server IP; CollectorsHub processes the device IP for the connection and short-term rate limiting with a hashed identifier. Responses are cached on the server for up to five minutes. Photos, notes and full collections are not sent. Prices and their history remain local and are included in JSON backups; CSV includes the latest unit price, source, currency and timestamps. No retrieval runs while the app is closed. Provider credentials remain exclusively on the server.
3. Photo recognition
Photos are stored locally on the device. Photo recognition in the editor uses only the optional OpenAI connection after consent and manual start. Local text recognition is not offered in the editor.
4. Optional OpenAI autofill
This feature is off by default. Only after your explicit consent and a manual tap on “Recognize with AI” does the app send the note for this run, this collection’s AI instructions, the selected template and its fields, and the current photo to OpenAI over an encrypted connection. Taking a photo alone sends nothing. The response fills only empty details of the current entry; you review and save it yourself. Other collections and entries are not sent. Collection instructions are stored locally and included in JSON backups.
After the same consent, “Find suggestions” sends only your entered description, the current collection’s AI instructions and template fields to OpenAI. An existing photo and other entries are not sent. AI search suggests possible identifications from model knowledge, not live web or catalog matches. Only your selection fills empty fields; saving requires your confirmation.
For the optional AI template assistant, only “Suggest template” sends your collecting-area description and the standard template catalog to the selected OpenAI connection. Custom templates, collections and photos are not sent. You review the suggestion in the editor and explicitly save a new template yourself.
The app sets store: false for requests. OpenAI may retain request content in abuse-monitoring logs for up to 30 days by default, unless your OpenAI account has different settings or longer retention is legally required. OpenAI may process data outside the EU. Your OpenAI account terms and settings also apply.
The API key is stored only in iOS Keychain or Android Keystore and is not exported. It is sent to OpenAI to authenticate a request, which may associate that request with your OpenAI account. market port GmbH does not receive the key, submitted content or response.
During optional ChatGPT sign-in, OpenAI receives a random identifier for this installation. The app securely stores the account ID, email address and access credentials on this device, outside backups and CSV files. Tokens are sent only to OpenAI; the app does not access chat history. You can disconnect here and revoke access in ChatGPT. Your ChatGPT account terms and privacy settings also apply to processing.
5. Legal basis and withdrawal
Optional transmission is based on your consent under Art. 6(1)(a) GDPR. You can disable the feature and remove the API key at any time in Settings. Withdrawal applies to future requests. Collection features remain available without OpenAI.
6. Deletion and your rights
You can delete local collection data in Settings. Individual photos, items and collections can also be removed. Deletion of data in your OpenAI account is governed by its settings and terms. For access, rectification, erasure, restriction, portability or objection, contact the data protection contact above. You may also lodge a complaint with a data protection authority.
7. Third parties
This notice covers the CollectorsHub app. The market port GmbH website privacy policy applies when you visit its website.