Privacy Policy

1. What we collect

• Account: your email address, a username, and your password (stored only as a one-way hash, never in readable form). Optionally your name, profile photo and bio if you add them to your profile. A personal referral code, and who referred you if you joined through a referral link.
• Your tracker data: the flips you log (card names, buy and sell prices, dates, platforms, grades, notes and any card photo you attach), your watchlist, price alerts and settings.
• Searches and use: the card searches you run, the pages you open (page address, referring page, browser type), the campaign tags in the link you arrived through (such as utm_source) and basic usage counts, linked to your account when you are logged in. We use this to run and improve the Service.
• Pages you visit while logged in: we record which pages logged-in users visit to improve the service.
• Payments: Stripe handles payment. We receive your email, subscription status and Stripe reference numbers. We do not receive or store your full card number.
• Optional giveaway details: only if you choose to add them in your Profile: a name for shipping, your mailing address and phone number, and whether you want to be included in future giveaways.
• Card show alerts (optional): if you turn on "Card shows near me" in your Profile or on the Events page, the ZIP code you enter there, your chosen distance and show type. We use the ZIP only to find card shows near you and email you a weekly list, we never use your shipping address for this, and you can turn it off with the one-click unsubscribe link in each email or in your Profile.
• Scanner photos: a card photo you upload to the scanner is sent to an AI service to identify the card.
• Emails: we send account emails such as a welcome message and password resets, and, only if you turn them on, deal alert emails and the weekly card show email.

2. Cookies and similar technology

We use a login cookie (it lasts up to 30 days, or until you log out) and your browser's local storage to keep you signed in and remember simple preferences. Our pages also include the Meta (Facebook) pixel, which lets Meta receive information about visits and sign-ups (for example page views and a "sign-up" or "purchase" event) to measure advertising. You can limit this through your browser settings, ad blockers and your Meta ad settings. We also load fonts and code libraries from Google Fonts and jsDelivr, which means those providers can see your IP address when a page loads.

3. Who else handles your information

We use these companies to run the Service. They receive only what is needed for their job:

• Stripe - payments and subscription billing.
• OpenAI - AI processing: card names and search text, and scanner photos, are sent to produce estimates and identify cards.
• eBay - card searches (search text) to find listings, prices and images.
• PSA - certificate numbers you look up.
• Card-data and price sources (for example CardSight, 130point and image search) - card names used in lookups.
• Postmark or another email provider - delivers our emails to you.
• Render - hosts the website and database.
• Meta - advertising measurement through the pixel described above.

We do not sell your personal information. We may share information if the law requires it, or to protect our rights, or as part of a sale of the business.

4. Giveaways (optional mailing address and phone)

You may add a mailing address and phone number in your Profile for giveaways. Every one of those fields is optional, and so is the "Include me in future giveaways" box, which is unticked unless you tick it. We use this information only to contact winners and ship prizes. We never sell it. Access to it is limited to the site's administrators. You can remove it at any time: open your Profile, clear the fields (and untick the box) and press Save Profile, and it is removed from your account.

5. What other members can see

Community and profile features can show your username, and any name, photo and bio you add, together with tracker totals such as overall profit, to other members. If you do not want that, leave those profile fields empty. Your email address is not shown to other members.

6. How long we keep it, and deleting your data

We keep your account information for as long as your account exists. There is not yet a self-service "delete my account" button: to have your account and personal data deleted, or to get a copy of it, email support@flipdeckcards.com from the address on your account and we will handle it. We may keep limited records where the law requires (for example payment records). Cancelling your subscription does not by itself delete your data.

7. Security

Passwords are stored hashed, and the Service is served over HTTPS. No system is perfectly secure, so we cannot guarantee absolute security. Choose a strong password and keep it private.

8. Children

The Service is not meant for children under 13, and we do not knowingly collect their information.

9. Your rights and contact

Depending on where you live you may have rights to access, correct, delete or object to our use of your information. To use them, or with any privacy question, email support@flipdeckcards.com. We may update this policy; the date at the top shows the latest version.