Privacy

You can browse the entire site without an account. Nothing below applies until you choose to sign in. There is no advertising, no analytics, and no tracking of any kind.

Two things are stored, both briefly and neither identifying you personally:

• Your IP address, to rate limit the search endpoint. It's kept for up to 24 hours and then deleted automatically. This exists to stop one person hammering the database, not to track anyone.
• Your currency preference, in a cookie, if you change it from the default. That's the only thing that cookie holds.

Our host (Vercel) keeps standard server logs of requests, as any web host does.

Signing in with Discord or an email link stores:

• Your email address. Required — it's how your account is identified.
• Your Discord display name and avatar, if you sign in that way, plus the tokens needed to keep that connection working.
• A username and bio, only if you choose to set them.

There is no password, so there's nothing to leak, reset, or reuse elsewhere.

• Your collection — which figures, condition, quantity, what you paid, when you bought them, and any notes.
• Your wishlist — figures and how badly you want them.
• Sale reports — price, condition, date, and optionally a link.

Your profile is private by default. Nothing about your collection is visible to anyone until you switch it on in settings.

If you do make it public, visitors see which figures you own and their market value.

What you paid is never shown publicly. Not on your profile, not anywhere, whatever your settings. Neither is your profit or loss. Those exist for you alone.

Sale reports appear on the figure's page attributed to your username, because a price index that can't be traced isn't worth much. The report shows a price, condition and date — nothing about you beyond the name you chose.

FigureIndex doesn't sell data or share it for marketing. These companies are involved in running the site:

• Vercel — hosting. Processes every request, keeps server logs.
• Neon — the database where everything above is stored.
• Resend — sends sign-in emails. Sees your email address.
• Discord — only if you sign in with it, and only what you approve.

One thing worth knowing that most sites don't mention: listing photos are loaded directly from eBay rather than copied here. That means your browser contacts eBay when you view a figure page, and eBay can see your IP address as a result — the same as if you'd visited a listing. We do this because copying their images would be a licensing problem, but it's your information and you should know.

• Account, collection and wishlist — until you delete your account.
• Rate-limit records (IP addresses) — up to 24 hours.
• Sign-in links — 15 minutes, and they work once.
• Sale reports — kept indefinitely, because they're part of the price history other people rely on. If you delete your account, your reports stay but stop being linked to you: they become anonymous data points rather than yours.

Only what's needed to work. A session cookie so you stay signed in, a short-lived one during sign-in for security, and your currency preference.

There's no cookie banner because there's nothing to consent to. No advertising cookies, no analytics, nothing shared with anyone else.

Email hello@figureindex.com from your registered address and you can:

• Get a copy of everything stored about you
• Have anything corrected
• Have your account and its data deleted

If you're in the UK or EU, the GDPR gives you these rights and we'll honour them whether it applies to you or not. No account is needed to browse, so declining to create one is always an option.

If this changes in a way that affects what's collected or who sees it, the date at the top changes and anyone with an account gets an email. Quietly broadening what we do with your data isn't something we'd do.