Privacy Policy
Draft v1 — this policy is a working baseline and is pending attorney review.
What we collect
Account data (email, display name, hashed password), addresses you save for shipping, order history, listings, collection/want-list entries, and catalog error reports. Payments are processed by Stripe — card numbers never touch our servers.
How we use it
To run the marketplace: fulfilling orders (your shipping address is shared with the seller of an order), showing your collection and wants, calculating fees, preventing abuse (rate limiting by IP), and improving the catalog. We don't sell personal data and we don't run third-party advertising.
Cookies
A session cookie keeps you signed in; a small preference cookie remembers search settings (like "include cards with no listings"). No cross-site tracking cookies.
Retention & deletion
Order records are kept for bookkeeping and dispute resolution. To delete your account or exercise data rights, use the contact form — we'll respond within 30 days.
Third parties
Stripe (payments) and, when configured, catalog data vendors (for card metadata — never your personal data). Each operates under its own privacy policy.