privacy policy

Last updated: June 2026. CardDropX is a TCG hub for collectors, sellers, and streamers — not a retailer.

What we collect

Account data — email, display name, workspace settings, and authentication credentials (hashed passwords or OAuth identifiers).
Inventory & scans — cards you catalog, photos you upload for scanning, portfolio history, and listing data you choose to publish on Explore.
Seller integrations — Shopify, Stripe Connect, Telegram, and Discord credentials are encrypted at rest when you connect Hub.
Usage — scan counts, refresh requests, billing entitlements, and audit logs for support and security.
Payments — processed by Stripe; we do not store full card numbers.

How we use data

Provide catalog, scan, portfolio, battles (entertainment), Explore browse, and Hub seller tools.
Show price estimates — not buy or sell guarantees.
Route affiliate and marketplace links where your plan allows.
Send transactional email (verification, password reset, order alerts when configured).
Improve reliability and prevent abuse (rate limits, audit logs).

What we do not do

We do not sell your customer email lists from Hub checkout.
We do not operate live auctions or wagering on the platform.
We do not buy or hold your inventory as principal.

Your rights (GDPR)

Workspace owners signed in to the app may request:

Export — GET /privacy/export (authenticated API) returns workspace data in JSON.
Deletion — POST /privacy/delete-request schedules account/workspace deletion per our retention policy.

Email [email protected] for help with export or deletion.

Cookies & analytics

We use essential cookies for sign-in sessions. If analytics is enabled on your deployment, we may use privacy-friendly or standard analytics — see our cookie notice when active. Free-tier product may show Google AdSense with category blocks for sensitive content.

Contact

Data questions: [email protected]