Privacy statement

Version of 22 October 2026. This is an English translation of the Dutch privacy statement. If the two differ, the Dutch version prevails.

Who we are

Veroplay is a trade name of MCP Network BV, based in Echt, the Netherlands, Chamber of Commerce (KvK) 75344637. Questions about privacy? Email info@veroplay.nl.

Which data we use and why

• Waiting list: your email address and what you fill in yourself (name, number of collectors, what you collect, choice). We use this to let you know when it's your turn and to allocate the founder spots.
• Account: email address, name, family name and the language you use the app in. You log in with a link or code by email, or with your Google account; we don't store passwords.
• Family members: first names of child profiles that a parent creates. Children under 16 don't have their own login; a parent manages their profile.
• Your collection: cards, wishes, boxes, purchase prices, notes and photos you add. This is needed for the app's features.
• Payments: which subscription you have, when you paid and the status of the payment. Payment details such as your account number or credit card are processed by Mollie; we don't see them in full.
• Notifications: if you turn on push notifications, we store a technical address of your device so we can send the notification.
• Problem reports: what you send us via "Report a problem", with the screen you were on and technical error messages, so we can fix it.
• Visitor statistics: we count visits to the site with Matomo on our own server, without cookies and without tracking you on other sites.

Why we're allowed to

We process your data because it's necessary for the agreement with you (your account, your collection and your subscription), because the law requires it (keeping payment records for the tax authorities), or because you choose it yourself (waiting list, push notifications, AI features).

Who helps us

We work with a few parties that only process data on our behalf:

• Hosting: the app and the database run at our hosting provider. The email is also sent from there.
• Mollie (the Netherlands) for payments.
• Google, only if you choose to sign in with Google. Google then tells us your email address and first name, so we can find or create your account. We don't get access to your Google account and don't store anything else from Google. A Google script then loads on the login screen.
• Anthropic (Claude) for the AI features: the quality scan, the grade scan, the AI value and recognising cards in a photo. Only the photo or the card details that are needed go to Anthropic, not your name or email address. Anthropic is based in the United States; the transfer takes place with the safeguards the GDPR requires for this. Anthropic doesn't use this data to train its models.

For card data and prices we retrieve public information from TCGdex and Cardmarket. We don't send any data about you along with it.

Who sees what

Your family sees what you choose to show: everything, only cards (without amounts) or nothing. Friend collectors only see your duplicates and your wishlist, never amounts. A link to your wishlist that you share yourself can be opened by anyone with that link.

How long we keep it

• Waiting list: until you have an account or unsubscribe, at the latest one year after launch.
• Account and collection: as long as your account exists. If you delete your account, we erase your data within 30 days, including from backups.
• Payments: 7 years, because Dutch tax law requires it.
• Problem reports and error messages: at most one year.

Your rights

You may always access your data, have it corrected, deleted or take it with you (you can also download your collection yourself as PDF or Excel). You can object or withdraw your consent. Email us at info@veroplay.nl; we respond within a month. If you're not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

The connection is always encrypted. Login links only work once and for a short time, and each family only sees its own data.

Changes

If we change this statement, we'll put the new version here with a new date. For major changes we'll send you an email.