1. Information We Collect
We collect the minimum information necessary to provide and improve the Service:
- Account information: email address and display name when you sign up. We support social sign-in (Google, GitHub), in which case we receive only your name, email, and profile image from the provider.
- Portfolio and collection data: card holdings, purchase prices, and watchlist selections you voluntarily add.
- Usage data: pages viewed, features used, browser type, and device information — collected automatically via server logs and analytics tools.
- Payment information: paid subscriptions are not active yet, so we do not currently collect payment card or bank details.
2. How We Use Your Information
- Provide personalized features (portfolio, watchlist, price alerts)
- Manage premium subscription access when paid plans become available
- Analyze usage patterns to improve the Service
- Send transactional emails (account verification, password reset)
- Enforce our Terms of Service and prevent abuse
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Third-Party Services
We use the following third-party services:
- NextAuth.js — authentication (Google, GitHub OAuth)
- Vercel Analytics — anonymous usage analytics
Each service has its own privacy policy, and we encourage you to review them.
4. Cookies
We use essential cookies for authentication and session management. We may also use analytics cookies to understand how visitors interact with the Service. You can control cookie preferences through your browser settings.
5. Data Storage and Security
Your data is stored on secured servers within the European Union. We use industry-standard practices including encrypted connections (TLS), hashed passwords, and regular security updates to protect your information. However, no system is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction (EU/EEA under GDPR, California under CCPA), you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your data in a portable format
- Opt out of non-essential cookies and analytics
To exercise any of these rights, email [email protected].
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).
8. Children's Privacy
CardIntel is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service. Continued use after changes constitutes acceptance.
10. Contact
For privacy-related inquiries, contact [email protected].