Privacy Policy

This Privacy Policy explains how The Card Suite (“The Card Suite,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website and services (the “Service”). By using the Service, you agree to the practices described here.

Who we are

The Card Suite provides inventory management and searchable digital storefronts for trading card, comic, and collectible vendors, and lets collectors browse catalogs, track their collections, and connect with vendors. If you have any questions about this policy, contact us at [email protected].

Information we collect

We collect the following categories of information:

Account information. When you create an account, we collect your name, email address, and a securely hashed password. If you create a vendor booth, we also collect your business or booth name.
Social sign-in information. If you choose “Continue with Google,” “Continue with Facebook,” or “Continue with Discord,” we receive a limited profile from that provider — typically your name, email address, profile picture, and a unique account identifier — which we use to create or sign in to your account. We do not receive your password for that provider. See Signing in with third parties below.
Inventory and business data. Vendors provide the content they choose to manage, such as item details, prices, photos, storage locations, orders, and customer pickup requests.
Collection data. Collectors may record the cards they own and the cards they want.
Payment information. If you subscribe to a paid plan, payments are processed by our payment provider (Stripe). We do not store your full card number; we retain only limited billing details such as your plan and subscription status.
Usage and device information. We automatically collect basic technical data such as your IP address, browser type, pages viewed, and the searches made on a storefront, to operate and improve the Service.
Cookies & analytics. We use essential cookies to keep you signed in and to protect against cross-site request forgery, plus Google Analytics to understand how the Service is used. See Cookies and sessions.

How we use your information

To create and manage your account and authenticate you.
To provide, maintain, and improve the Service and its features.
To process orders, pickup requests, and — for paid plans — subscriptions and billing.
To send transactional messages such as sign-in links, order notifications, and account or security notices.
To respond to your questions and provide support.
To keep the Service secure, prevent abuse, and comply with legal obligations.

We offer optional sign-in through Google, Facebook, and Discord. When you use one of these options, the provider asks for your permission to share a basic profile with us (name, email address, profile image, and a unique identifier). We use this only to create or access your The Card Suite account. We do not post to your social accounts, and we do not access your contacts or friends. You can revoke our access at any time from the provider’s own settings (for example, Google Account permissions, Facebook “Apps and Websites,” or Discord “Authorized Apps”).

How we share information

We do not sell your personal information. We share it only in these limited situations:

Service providers. With vendors that host our infrastructure, process payments (Stripe), send email, provide analytics (Google Analytics), and provide reference-pricing or card-catalog data, strictly to operate and improve the Service on our behalf.
Between vendors and customers. Information you submit as part of an order or pickup request (such as your name and the requested items) is shared with the relevant vendor so they can fulfill it. Storefront listings a vendor publishes are public.
Legal and safety. When required by law, or to protect the rights, safety, and security of our users, the public, or The Card Suite.
Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

Cookies and sessions

We use cookies for two purposes. Essential cookies keep you signed in and protect forms against cross-site request forgery — the Service cannot function without them. Analytics cookies, set by Google Analytics, help us understand how the Service is used (for example, which pages are popular) so we can improve it; they identify a browser rather than you personally, and we do not use them for advertising or to track you across other websites. You can block or delete cookies in your browser settings (though essential cookies are required for the Service to work), and you can opt out of Google Analytics specifically with Google’s browser add-on at tools.google.com/dlpage/gaoptout.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. We retain certain records longer where required for legal, accounting, or security reasons. When information is no longer needed, we delete or anonymize it.

Your rights & deleting your data

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing.

To delete your account and associated personal data, email [email protected] from the address on your account with the subject “Data deletion request,” and we will remove your personal data within 30 days, except where we are required to retain it by law. If you signed up using Google, Facebook, or Discord, revoking our access in that provider’s settings does not automatically delete your The Card Suite account — please also send the deletion request above.

Security

We protect your information using measures such as encrypted (HTTPS) connections, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address issues promptly.

Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

International users

We operate the Service from the United States. If you access it from elsewhere, you understand your information may be processed in the United States, where data-protection laws may differ from those in your country.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes may be communicated through the Service.

Contact us

Questions or requests about this policy or your data? Email [email protected].