Privacy Policy
Effective date: 2026-08-06
This policy explains what GrailCharts collects, why, and who else is involved. It is written to be read, not to be survived.
Who we are
Questions about this policy, or about data we hold: [email protected].
We are an independent price-tracking site. We are not affiliated with The Pokemon Company International, Nintendo, Game Freak, Creatures Inc., or any card grading company.
What we collect
Automatically, when you visit a page:
- Server and network logs. Your IP address, browser type, referring page, and the time of your request. These are processed by our hosting and CDN provider for security, abuse prevention and diagnostics.
- Analytics. We use Google Analytics 4 to understand how the site is used — which pages are visited, where visitors arrive from, and how they move between pages. Google Analytics sets first-party cookies on your device for this purpose and processes your IP address to derive an approximate location. We use it to improve the site; we do not use it to identify you personally.
We do not ask you to create an account, we run no sign-up form, and we do not ask for or store payment details. We do not sell anything directly.
Cookies and similar technologies
| Source | Type | Purpose |
|---|---|---|
| Google Analytics | First-party | Measuring how the site is used, in aggregate |
| Affiliate programs | Third-party | Attributing a purchase to a referral from this site, usually for a limited window after you click |
| CDN / security provider | First-party | Security and bot mitigation |
You can block or delete cookies in your browser settings. Blocking them does not break any feature of this site — price data, charts and search all work without cookies. You can also install Google's Google Analytics Opt-out Browser Add-on to stop Analytics data being sent from your browser.
Advertising
We currently show no advertising on this site. If that changes, this policy will be updated before any advertising cookie is set.
Affiliate links
Some links on this site — typically buttons and listings that take you to a marketplace — are affiliate links. If you buy something after following one, we may receive a commission at no additional cost to you. The marketplace, not us, handles the transaction and any personal data you give it.
Affiliate programs set a cookie to attribute the referral. We do not receive your name, address, or payment details from them — only aggregate reports of how many referrals converted.
Our full disclosure is on the Affiliate Disclosure page.
How long we keep things
| Data | Retention |
|---|---|
| Server and security logs | A short operational window, then deleted or aggregated |
| Google Analytics data | Retained for the period configured in Google Analytics, then deleted by Google. We use it in aggregate |
Your rights
You can ask us to tell you what personal data we hold about you, to correct it, or to delete it. To make a request, email [email protected].
If you are in the EEA or UK, you also have the right to object to processing, to request portability, and to lodge a complaint with your local data protection authority.
California
This policy is governed by California law.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We show no personalised advertising, and the analytics we run is not connected to any advertising account. There is nothing here to opt out of, which is why you will not find a "Do Not Sell or Share" link — we would rather not have one than have one that does nothing. If that changes — for example, if we begin showing personalised advertising, or link our analytics to an advertising account — this section will be rewritten first, a "Do Not Sell or Share My Personal Information" control will be added to the site, and we will honour Global Privacy Control signals.
We are a small operation, and the California Consumer Privacy Act's thresholds do not currently apply to us. We would rather say that plainly than reproduce a compliance statement we are not in a position to make. This is a statement about where we stand today, not a permanent one — CCPA/CPRA's thresholds are crossed by traffic volume as well as by revenue, and we will revisit this section as the site grows. Regardless of whether the statute applies, we will honour these requests from anyone who asks:
- Tell me what personal data you hold about me
- Delete it
- Correct it
Email [email protected].
Changes
If we change this policy we will update the effective date at the top. Material changes will be noted on the page for a reasonable period.