CARDBRD

Privacy Policy

Effective date: June 17, 2026 · Version 2026-06-17

This Privacy Policy explains how Cardbrd LLC (“Cardbrd,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Cardbrd website and mobile application (the “Service”). By using the Service you agree to this Policy and to our Terms of Service.

1. Information we collect

• Account information — your first and last name, username, and email address, and an optional profile picture you upload.
• Collection data — the cards, collections, sub-collections, sales, trades, shows, play sessions, price overrides, and notes you add to the Service, including any images you upload.
• Transaction & proposal data — sale/trade proposals and messages you exchange with other users through the Service.
• Payment information — if you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not store your full card number; we receive only limited billing data (such as a customer ID and subscription status).
• Usage & device data — basic technical information such as device/browser type, app version, and log data generated when you use the Service.

2. How we use information

• To create and maintain your account and authenticate you.
• To provide, sync, and back up your collection and related features across your devices.
• To process subscriptions and payments and manage referral/comp programs.
• To enable user-to-user proposals and notifications you choose to use.
• To retrieve and display third-party pricing and valuation estimates.
• To maintain security, prevent abuse, debug, and improve the Service.
• To record your acceptance of our Terms of Service (version and timestamp), as evidence of agreement.
• To communicate with you about your account, including service and transactional emails.

3. How we share information

We do not sell your personal information. We share information only as follows:

Recipient	Purpose
Supabase	Cloud database, authentication, and storage that hosts your account and collection data.
Stripe	Payment processing and subscription management.
Pricing-data providers (e.g. TCGplayer, PriceCharting, SportsCardsPro)	Retrieving market-price and valuation estimates.
Apple	App distribution and, where applicable, in-app purchases on iOS.
Email/notification providers	Sending transactional and account emails.
Other users	Limited profile details (such as your username) and the contents of any proposal you send them.

We may also disclose information if required by law, to enforce our Terms, to protect the rights and safety of Cardbrd or others, or in connection with a business transfer (such as a merger or acquisition).

4. Data storage and security

Your data is stored with our cloud providers and protected by access controls, including database row-level security that restricts your records to your own account. While we take reasonable measures to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Cookies and local storage

The Service uses cookies and local storage to keep you signed in, remember preferences, and operate the app. We do not use them for third-party advertising.

6. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from within the app, which permanently removes your collection, sales, trades, and related data. We may retain limited records (such as Terms-acceptance logs and transaction records) where necessary for legal, accounting, or fraud-prevention purposes.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app or by contacting us. Residents of the EU/UK (GDPR) and California (CCPA/CPRA) have specific rights, including the right not to be discriminated against for exercising them; we do not sell personal information.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International users

Cardbrd is operated from the United States, and your information may be processed and stored there or in other countries where our providers operate. By using the Service you consent to this transfer.

10. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the version and effective date above and, where appropriate, notify you within the Service.

11. Contact

Questions about this Policy or your data? Contact us at support@cardbrd.io.

← Back to Cardbrd