Privacy Policy

Last updated: [EFFECTIVE DATE]

CardboardTens (the website at www.cardboardtens.com and the CardboardTens mobile app) is run by [COMPANY NAME] ("we", "us"). This policy explains what information we collect, why we collect it, who we share it with, and the choices you have. It goes with our Terms of Service.

The short version

• We collect what we need to run your account: your email address, how you sign in, and the lists, inventories and trades you create.
• We don’t sell your personal information, and we don’t show ads.
• You can delete your account at any time, and that deletes your data.

What we collect

Your account

• Your email address, from the sign-in service you choose: Google, Apple or Discord. If you use Sign in with Apple, Apple may give us a private relay address instead of your real one.
• Which sign-in service you used and the account identifier it gives us, so we can recognize you next time. We never see or store your password for those services.
• Your profile picture link, if your sign-in service provides one.
• When your account was created and when it was last used.

What you add

• Lists: the cards on them, quantities, notes, prices you enter, and whether a list is private or public.
• Inventories: the cards you hold, quantities, what you paid, and a history of changes.
• Trades: the cards and cash on each side, the rates used, your notes, and which inventory the trade used.
• Trade photos you choose to attach. They are stored in a private storage bucket (Cloudflare R2), are not public, and are served through short-lived private links created for your signed-in account.
• Your settings, such as your default trade rates and trade inventory.

Your subscription

Your plan (Free, Premium or Pro), how you got it, when the current period ends, and where you are billed. Payments are handled by Apple, Google or Stripe through RevenueCat. We never receive your full card number.

Usage counts and sign-in sessions

• Daily counts of things like scans and completed trades, so plan limits can be applied.
• A record of each device you are signed in on (a scrambled form of its sign-in token, a device label, and when it was last used), so we can keep you signed in and let you sign out of all devices.

Technical information

• Error reports: when something breaks, we receive a report through Sentry describing what failed, the app or browser version and the type of device. We set it up so these reports do not include your email address.
• Website analytics: the website uses Google Analytics to count page views and understand which pages are used. Google Analytics receives information such as the pages you visit, your browser and device type, and your approximate location, and uses cookies.
• Server logs: like most websites, our hosting providers record requests (such as IP address, the page requested and the time) to keep the service running and secure.

What stays on your device (mobile app)

• Your recent searches are stored only on your phone and are not sent to us. You can clear them in Settings.
• The offline card catalog, and changes you made offline that are waiting to sync.
• Scanning: when you scan a card, its text is read on your phone using the phone’s own text recognition. Scan images are not uploaded. Only trade photos you choose to attach are uploaded.
• Your sign-in tokens, kept in your phone’s secure storage.

How we use it

• To run CardboardTens: show prices and values, keep your lists, inventories and trades, and sync them between your devices.
• To handle your subscription and apply plan limits.
• To keep accounts secure, for example by detecting a reused sign-in token and preventing abuse.
• To find and fix problems, and to understand which parts of the website are used.

We do not sell your personal information, we do not use it for advertising, and we do not make automated decisions about you that have legal effects.

Who we share it with

We share information only with the companies that help us run CardboardTens, and only what each one needs:

• Railway: hosts our servers and database.
• Cloudflare: runs our domain and network, and stores card images and your private trade photos (Cloudflare R2).
• Sentry: receives error reports.
• Google Analytics: website analytics.
• RevenueCat: manages subscriptions. It receives your CardboardTens account identifier and, if you buy on the website, the email address you check out with.
• Apple (App Store), Google (Google Play) and Stripe: process payments, under their own privacy policies.
• Google, Apple and Discord: sign you in, under their own privacy policies.
• Scrydex: supplies card and price data. We do not send Scrydex your personal information.

We link to marketplaces such as eBay and TCGplayer. When you follow one of those links you are on their site, under their privacy policy. TCGplayer links may carry our affiliate code, which tells TCGplayer the visit came from CardboardTens.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger, sale or reorganization of our business, in which case this policy continues to apply to your information.

Public lists

Lists are private unless you make them public. If you make a list public, other signed-in CardboardTens users can see the list’s name, the cards on it, and the first part of your email address (the part before the @) as its owner, and they can follow it. You can make it private again at any time, and it disappears for them straight away.

Cookies

• Sign-in cookie (needed): keeps you signed in on the website. It holds your encrypted session and is removed when you sign out or it expires.
• Security cookies set during sign-in (needed): protect the sign-in step from forgery.
• Google Analytics cookies: count visits and pages on the website.
• The checkout pages from RevenueCat and Stripe may set their own cookies when you subscribe.

You can block or delete cookies in your browser. If you block the sign-in cookie you will not be able to stay signed in.

How long we keep it

• Your account information and everything you add: for as long as your account exists.
• When you delete your account: it is removed from our database right away, your trade photos are deleted from storage, and we ask RevenueCat to delete its customer record. Copies may remain in our database backups for up to [BACKUP RETENTION PERIOD] until those backups are replaced.
• Error reports: up to [ERROR REPORT RETENTION PERIOD].
• Server logs: up to [SERVER LOG RETENTION PERIOD].
• Website analytics: [ANALYTICS RETENTION PERIOD].
• Payment records kept by Apple, Google or Stripe are kept by them under their own policies.

Deleting your account

You can delete your account yourself, at any time. On the website, sign in, open Manage Account and choose Delete account. In the app, go to More, then Manage Account, then Delete account. Deleting permanently removes your account, lists, inventories, trades, trade photos, settings, sign-in sessions and usage counts. It can’t be undone.

Deleting your account does not cancel a paid subscription bought through Apple, Google or the website. Cancel it first from Subscription. Step-by-step instructions, including what to do if you can’t sign in, are on How to delete your account.

Your choices and rights

You can see and change most of your information in the app or on the website, and you can delete your account at any time. Depending on where you live (for example California, the European Economic Area or the United Kingdom), you may have the right to ask for a copy of your information, to correct it, to delete it, to receive it in a portable form, or to object to how we use it. To make a request, email [CONTACT EMAIL] from the address on your account. We will answer within the time the law requires, and we will not treat you differently for making a request.

Children

CardboardTens is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us at [CONTACT EMAIL] and we will delete it.

Security

Information is encrypted in transit (HTTPS). Sign-in tokens are stored only in scrambled (hashed) form, and trade photos are kept in private storage. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your information and will tell you if a breach affects you as the law requires.

Where information is processed

Our service providers may process your information in the United States and other countries, which may have different data protection laws than where you live.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app or on the website before it takes effect.

Contact

[COMPANY NAME]
[ADDRESS]
[CONTACT EMAIL]