Privacy Policy
Last updated: July 1, 2026This policy explains what CardResell (cardresell.org, "we") collects, why we collect it, and your rights. We try to collect as little as possible.
1. What we collect
| Data | Why | Retention |
|---|---|---|
| Google account email + name | Sign-in, receipts, Pro subscription state | Until account deletion |
| Credit balances & purchase history | Show remaining lookups, refunds, chargeback defense | 7 years (tax) |
| Card photos you upload for Grade Scan / ID Scan | Run the AI model, return a result. Not used to train models. | 30 days, then deleted |
| Sales Tracker entries (buy/sell prices, dates, platform) | Portfolio & P&L tracking | Until you delete them or your account |
| Anonymized usage analytics (page views, feature clicks) | Product improvement | 13 months |
| IP address + browser (in server logs) | Security, abuse prevention | 90 days |
2. What we don't collect
- We don't ask for your phone number, address, or date of birth.
- We don't sell your data to advertisers or data brokers.
- We don't use your card photos to train third-party AI models.
3. Third-party services
- Google Sign-In — authentication (Google privacy policy)
- Stripe — payments; card details never touch our servers (Stripe privacy policy)
- Vercel — hosting & edge functions (Vercel privacy policy)
- OpenAI / Anthropic — the models that power ID Scan and Grade Scan. Photos are sent for inference only; providers are contractually forbidden from training on our data.
- eBay Partner Network — affiliate tracking on outbound eBay links.
4. Your rights
You can:
- Export your Sales Tracker data from the settings panel any time.
- Delete your account — email legal@cardresell.org and we'll erase everything within 30 days (except records we're legally required to retain, like purchase receipts).
- Access, correct, or restrict processing under GDPR / CCPA — same email.
- Opt out of analytics — use a browser that blocks trackers, or email us.
5. Cookies
We use a session cookie to keep you signed in and a preference cookie to remember your theme and dismissed banners. That's it — no advertising cookies.
6. Children
CardResell is not directed at children under 13. If you believe a child has created an account, email legal@cardresell.org and we'll delete it.
7. Changes
We'll post material changes on this page and email account holders when they affect your rights.
Contact
Privacy questions or data requests — legal@cardresell.org.