Where our data comes from, and what we do with it.

Owned — images from sources with explicit display licenses (Scryfall, user uploads). Stored in our r2://owned/ bucket and can be served publicly.

Cached — images from sources where we have limited or no redistribution rights (MFC, Pop Mart, Coleka). Stored in our r2://cached/ bucket and never publicly served. They exist only to render inside an authenticated user’s own collection view via signed URLs.

Cleared — data from this source flows through our B2B API endpoints without modification.

Redacted — certain fields (imagery, price observations, etc.) are stripped from B2B responses due to license restrictions. Consumer display OK.

Blocked — data from this source is internal-use only and does not flow to B2B partners at all.

• ScryfallB2B: cleared
  Domainapi.scryfall.com
  LicenseFan-content license (Wizards Fan Content Policy)
  Storager2://owned/
  AttributionCard images are subject to Wizards' Fan Content Policy and Scryfall's terms.
  NotesOur primary MTG catalog source. Full card metadata + imagery cleared for both consumer and B2B.
• Pokemon TCG APIB2B: redacted
  Domainapi.pokemontcg.io
  LicenseFan-content (TPCi editorial/informational use)
  Storager2://cached/
  Attribution© The Pokemon Company / Nintendo / Creatures / GAME FREAK
  NotesCard metadata cleared. Imagery REDACTED from B2B responses (TPCi sublicense prohibition). Consumer display OK with attribution.
• MyFigureCollection (MFC)B2B: blocked
  Domainmyfigurecollection.net
  LicenseCC BY-NC-ND (user-uploaded images)
  Storager2://cached/
  AttributionImage: MFC community (CC BY-NC-ND)
  NotesClient-side connector only. Images stored in cached bucket, never publicly served. Internal-use only due to NC license prong.
• Pop MartB2B: blocked
  Domainpopmart.com
  LicenseScraped (ToS gray-area; client-side only)
  Storager2://cached/
  Attribution© POP MART
  NotesClient-side connector parses public storefront. Images stored in cached bucket. No restock/drop detection features.
• ColekaB2B: blocked
  Domaincoleka.com
  LicenseCommunity-curated catalog (no explicit ToS)
  Storager2://cached/
  AttributionCatalog data via Coleka (coleka.com)
  NotesClient-side connector. Same storage posture as MFC. Attribution required on figure surfaces.
• Mercari JPB2B: blocked
  Domainjp.mercari.com
  LicenseBLOCKED — no licensed path
  Storagen/a (no images)
  Attributionn/a
  NotesConnector code exists but is gated behind MERCARI_LICENSED_VIA env var. No live data flows until a licensed aggregator path is chosen.
• RedditB2B: redacted
  Domainreddit.com
  LicenseData API (commercial-tier required for our use)
  Storagen/a (no images)
  AttributionPull rates derived from community consensus
  NotesWe extract median pull rates, not user content. Derivative rates redacted from B2B until commercial-tier license lands.
• TCGplayerB2B: redacted
  Domaintcgplayer.com
  LicenseAffiliate partner (Impact); pricing via Scryfall relay
  Storagen/a (no images)
  AttributionPrices shown are estimates, not appraisals
  NotesConsumer-side prices surfaced as 'where to buy' affiliate links. TCGplayer-sourced price rows REDACTED from B2B responses (redistribution prohibition).
• CardmarketB2B: redacted
  Domaincardmarket.com
  LicenseAffiliate partner; pricing via Scryfall relay
  Storagen/a (no images)
  AttributionPrices shown are estimates, not appraisals
  NotesSame posture as TCGplayer. EUR prices flow via Scryfall for consumer display; direct Cardmarket rows REDACTED from B2B.
• eBay Browse APIB2B: cleared
  Domainapi.ebay.com
  LicenseOAuth API (client-credentials)
  Storagen/a (no images)
  Attributionn/a
  NotesActive listings only. Sold comps require separate Marketplace Insights approval (pending Andrei action).
• MTGJSONB2B: cleared
  Domainmtgjson.com
  LicenseOpen data with attribution
  Storagen/a (no images)
  AttributionHistorical price data via MTGJSON
  Notes7-day staleness cap enforced by connector. Attribution required on surfaces displaying MTGJSON-sourced data.

If you own one of the sources listed above and believe we’re using your data or imagery inappropriately, please email:

legal@rarix.app

Include the specific content URL(s), the basis for your claim, and your contact information. DMCA notices should include the elements required under 17 U.S.C. 512(c)(3).

We respond to valid takedown requests promptly. We’d rather work with you than play lawyer-tag.

• /legal/connector — connector architecture + User-Agent disclosure
• /terms — terms of service
• /privacy — privacy policy