PixelsForged AES-256-GCM encrypted
Card Collection Tracker

Your cards. Your data. Sealed.

A mobile-first collection tracker with end-to-end encryption. Log purchases, track graded and raw cards, look up PSA certs, and watch your collection value grow — all inside your browser.

AES
GCM encrypted
$0
Cost forever
0
Data uploaded
Loggero CERT #00248-A1
24
Cards
$1.8k
Spent
11
Graded
13
Raw
Shohei Ohtani RC
2018 Topps Chrome · eBay
$420
PSA 10
Fernando Tatis Jr.
2019 Bowman · LCS
$280
BGS 9.5
Wander Franco Auto
2021 Topps · Card Show
$95
Raw
+ Log new card
Features

Everything a collector actually needs.

📷
Photo logging

Attach a photo to every card. Images are compressed client-side before storage — no uploads, no external CDN, no size bloat.

🔖
PSA cert lookup

Enter a cert number and auto-fill card details straight from the PSA public API. BGS, SGC, and CGC get direct verify links.

📈
Collection analytics

A live chart tracks cumulative spend over time. Filter by 30, 90, or 180 days. See total invested, average value, and trend.

⚡
Mobile-first

Built for your phone. Bottom tab navigation, swipe-to-close sheets, camera capture, and safe-area insets on every device.

🔍
Search & filter

Search across name, set, source, and notes. Filter the grid by Raw or Graded. Results update instantly as you type.

🖥
Desktop layout

On wide screens the add form moves to a sticky sidebar and your collection fills the main panel. Full keyboard support throughout.

Security

Built on real cryptography, not promises.

Every card in your collection is encrypted with AES-256-GCM using a key derived from your password via PBKDF2 with 100,000 iterations. Your data is unreadable without your password — including to the storage layer itself.

$ encrypt(card, AES-256-GCM) → ciphertext + 12-byte IV
🔐
AES-256-GCM encryption

Cards are encrypted before storage using the Web Crypto API. A random 12-byte IV is generated per save.

🔑
PBKDF2 key derivation

Your password is never stored. A key is derived at login using PBKDF2 (SHA-256, 100k iterations) with a unique salt per account.

🏠
Stays in your browser

No server, no cloud sync, no telemetry. All data lives in the storage layer of the device you're using.

Start logging.

Create an account in seconds. No email required.

Works in any modern browser · Free forever