Introduction
Cardlist ("we," "our," or "us") operates the Cardlist website and service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
By using Cardlist, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (encrypted)
- Username
- Display name (optional)
- Profile picture, if you upload one
- Bio, if you write one
Collection and Profile Data
When you use our service, we store:
- Cards you add to your collection
- Quantities, conditions, and notes
- Showcases, wishlists, and decks you create
- Set completion progress
- Accounts you follow and accounts that follow you
- Posts and comments in the activity feed
- Listing details and templates
- Pricing information you set
Much of this is visible to other people by default. See Public Content below for what is public and how to change it.
eBay Integration Data
When you connect your eBay account, we access:
- Your eBay seller profile information
- Active and sold listings
- Order details and buyer information
- Shipping and tracking information
We use OAuth to connect to eBay. We never see or store your eBay password.
Payment Information
Payment processing is handled by Stripe. We do not store your credit card numbers or banking details. Stripe may collect information as described in their privacy policy.
Moderation Reports
When someone reports content, we store the report, the reason given, and the decision we made. You do not need an account to file a report. If you are signed out, we ask for your email address so we can tell you what we decided, and we keep that address with the report.
Usage Data
We automatically collect:
- Browser type and version
- Pages visited and features used
- Time and date of visits
- General location (country/region)
Public Content
Cardlist has a public side. Unless you change your settings, your profile page and the content on it - your collection, showcases, wishlists, decks, set completion progress, follows, and activity feed posts - can be seen by anyone, including people who are not signed in, and can be indexed by search engines.
You control this from your profile settings. You can make your account private, which hides your profile and everything on it from other people. You can also keep your profile public while hiding your collection's total value, and hide the graph of how that value has changed over time.
We never show your email address on your public profile.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve Cardlist
- Sync your collection with eBay
- Create and manage listings on your behalf
- Track orders and sales performance
- Process subscription payments
- Send service-related communications
- Respond to support requests
- Detect and prevent fraud or abuse
Data Sharing
We do not sell your personal information. We share data only with:
Service Providers
- eBay - To sync listings and orders per your authorization
- Stripe - To process subscription payments
- Google - For analytics (Google Analytics 4), subject to your consent
- Discord - To identify your Discord account when you choose to connect it
- Cloud hosting providers - To store and serve application data
Legal Requirements
We may disclose information if required by law, court order, or government request, or to protect our rights and safety.
Data Security
We implement industry-standard security measures including:
- HTTPS encryption for all data transmission
- Encrypted password storage
- Secure OAuth tokens for third-party integrations
- Regular security reviews
While we strive to protect your information, no method of transmission or storage is 100% secure.
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.
Your Rights
You have the right to:
- Access and export your data
- Correct inaccurate information
- Delete your account and data
- Disconnect third-party integrations
- Opt out of non-essential communications
- Manage cookie preferences via the consent banner
To exercise these rights, contact us at the email below.
Cookies & Analytics
Essential Cookies
We use cookies to maintain your session and remember your preferences. These are essential for the service to function and cannot be disabled.
Analytics Cookies
We use Google Analytics 4 to understand how visitors use Cardlist and to improve our service. Analytics cookies are only set if you accept them via the consent banner shown on your first visit.
If you decline analytics cookies, Google Analytics will still send anonymous, cookieless pings that provide aggregate page view counts. These pings do not identify you or store any data on your device.
You can change your cookie preference at any time by clearing your browser's local storage for this site, which will cause the consent banner to appear again.
Children's Privacy
You must be at least 13 years old to create an account. We ask for your date of birth at sign-up to check this. We do not store your date of birth; we only record that you passed the check.
Cardlist is not directed at children under 13, and we do not knowingly collect personal information from them. If we find a credible signal that an account holder is under 13, we suspend and delete the account.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: [email protected]