privacy policy
Last updated: June 2026. CardDropX is a TCG hub for collectors, sellers, and streamers — not a retailer.
What we collect
- Account data — email, display name, workspace settings, and authentication credentials (hashed passwords or OAuth identifiers).
- Inventory & scans — cards you catalog, photos you upload for scanning, portfolio history, and listing data you choose to publish on Explore.
- Seller integrations — Shopify, Stripe Connect, Telegram, and Discord credentials are encrypted at rest when you connect Hub.
- Usage — scan counts, refresh requests, billing entitlements, and audit logs for support and security.
- Payments — processed by Stripe; we do not store full card numbers.
How we use data
- Provide catalog, scan, portfolio, battles (entertainment), Explore browse, and Hub seller tools.
- Show price estimates — not buy or sell guarantees.
- Route affiliate and marketplace links where your plan allows.
- Send transactional email (verification, password reset, order alerts when configured).
- Improve reliability and prevent abuse (rate limits, audit logs).
What we do not do
- We do not sell your customer email lists from Hub checkout.
- We do not operate live auctions or wagering on the platform.
- We do not buy or hold your inventory as principal.
Your rights (GDPR)
Workspace owners signed in to the app may request:
- Export —
GET /privacy/export(authenticated API) returns workspace data in JSON. - Deletion —
POST /privacy/delete-requestschedules account/workspace deletion per our retention policy.
Email [email protected] for help with export or deletion.
Cookies & analytics
We use essential cookies for sign-in sessions. If analytics is enabled on your deployment, we may use privacy-friendly or standard analytics — see our cookie notice when active. Free-tier product may show Google AdSense with category blocks for sensitive content.
Contact
Data questions: [email protected]
Terms of use · Pricing · Home