Strata prices graded trading cards. This describes exactly what it collects, where that lives, and how to get rid of it. It is written against what the app actually does.
Strata does not run without one. The first launch asks you to sign in with Apple or Google, and there is no way past that screen — the steps after it (picking a username, connecting X, following anyone) are all skippable, but signing in is not.
This section used to say the opposite: that scanning and comping never require an account. That was true of an earlier build and is not true of this one. It is corrected rather than quietly deleted because a policy that disagrees with the app it describes is worse than no policy.
The exception is on the receiving end. A list someone shares with you opens from its link — in the App Clip or in a browser — without you signing in, installing anything, or being asked to create an account, and you can report it from there on the same terms. Viewers are readers, not users, and we do not turn one into the other as the price of looking.
Separately from your account, your device holds a random identifier in its Keychain. It is generated on first launch and survives reinstalling the app. Your daily scan allowance counts against it, and the service's per-device limits apply to it, which is what keeps one install from exhausting a shared upstream for everybody else.
It identifies a device, not a person: it is not derived from anything about you or your hardware, is not shared with anyone, and is not used for advertising or for tracking you across other apps or websites. The same identifier is attached to the diagnostic events the app sends about itself — which screen failed, how long a lookup took — so that "one person hit this forty times" can be told apart from "forty people hit it once". Those events carry no cert numbers, no card names, no values and no account identifiers, by design.
Slab recognition runs entirely on your device. The camera frames are read on the phone and never leave it — there is no endpoint on our side that accepts a photo of a card, and the only image the service ever receives is a profile picture you deliberately upload. What leaves your device for a lookup is the cert number that was read, and nothing else.
None of the above is uploaded. A list only reaches our servers if you deliberately share it, and "stop sharing" deletes it rather than hiding it.
Because the account is not optional, neither is this list. Everything below is stored on our servers against your account, and nothing else is.
| Data | Why |
|---|---|
| Provider identifier from Apple or Google | To recognise you on sign-in. We never see your password. |
| Email address | Supplied by the provider. With Apple's Hide My Email this is a relay address, and we neither know nor need the real one. |
| Username, display name, bio, profile photo | Your public profile. |
| X handle, if you provide one | Shown on your profile. The handle only — never the token. |
| Who you follow | To build your feed. |
| Lists you explicitly share, and their share links | So the people you send them to can open them. |
Values are estimates derived from publicly available sales data, presented with their source and their age. They are not appraisals, not offers, and not a guarantee of what any card will sell for. Every comp links out to its source so you can check the figure yourself.
Settings → Account → Delete account, inside the app. It removes your account record, your username, your follows, any connected X handle and your profile photo — the image file itself, not merely the link to it — from our servers, and immediately invalidates your session. Slabs and lists saved on your device stay on your device; clear those with "Clear cached comps" or by deleting the app.
Strata is not directed at children under 13 and we do not knowingly collect their personal information.
If this policy changes materially we will update the date above and surface the change in the app before it takes effect.