Privacy Policy

Who we are

CardGhost is a card collection record-keeping and operations service operated by CardGhost (TODO: insert the legal entity name and registered address). You can reach us about privacy at [email protected].

Information we collect

• Account information: your email address, name if you provide one, and authentication details. Passwords are handled by our authentication provider and are stored only in hashed form.
• Your collection data: the cards you add, including set, year, grade, condition, the price you paid, current values you enter, notes, and any photos you upload. You enter these values. CardGhost does not generate them.
• Billing information: handled by our payment processor (Stripe). We receive a record of your subscription status but we do not store your full card number.
• Usage and device data: basic analytics such as pages viewed, approximate location from your IP address, browser type, and similar technical information, used to keep the service working and to improve it.

How we use your information

• To provide the service: store your collection, calculate your totals, cost basis, and gains, and show your value history.
• To handle billing and your subscription.
• To provide support and respond to your requests.
• To keep the service secure and to prevent abuse.
• To improve the product. We do not sell your personal information, and we do not share your collection data with advertisers.

Your collection data is yours

The records, photos, notes, and values you enter are private to your account. We use them to provide your collection workspace and analytics. We do not publish them, and we do not share them with other users or third parties except the service providers below that are needed to run the product.

Service providers we use

• Stripe for payment processing.
• Cloud hosting and infrastructure providers (such as AWS and Cloudflare) to run and serve the app.
• An email provider for transactional messages such as receipts, password resets, and account notices.

Cookies

We use essential cookies to keep you signed in and to make the app work, and a small amount of analytics to understand general usage. You can control cookies through your browser settings.

Data retention and deletion

We keep your information while your account is active. You can delete your collection data or close your account at any time. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we need to keep limited records for legal or accounting reasons.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To make a request, email [email protected] and we will respond within the time required by applicable law.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

CardGhost is not intended for children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page. If the changes are significant, we will provide a more prominent notice.

Contact

Questions about this policy or your data can be sent to [email protected].