Last updated: September 2026 · Plain-language summary — not a substitute for formal legal review.
When you create an account, we store your email address and a username/display name you choose. As you use the app, we store the cards, folders, decks, and sales records you create. If you buy or sell on the Card Bazaar, we store transaction records and shipping addresses needed to fulfill orders.
Your data powers the features you use — collection tracking, set completion, deck building, marketplace listings, and order fulfillment. We use your email to send account-related messages (password resets, order receipts) and, if you're a Pro member, subscription notices. We don't sell your personal data.
When you create an account, we ask for your date of birth. You must be at least 13 years old to register. Buying and selling on the Card Bazaar requires you to be 18 or older; we use your date of birth to enforce this. We don't knowingly collect data from children under 13 — if you believe a child has registered, contact us so we can remove the account.
The card scanner feature uses your device's camera to identify cards in your collection. The camera is active only while you're on the scanner screen, and we process the captured image to recognize the card — we never record, save, or transmit video. No camera data leaves your device except the single still image used to identify the card.
We use Stripe to process payments — Stripe handles your card details; we never store full card numbers. We fetch card data and prices from Scryfall, TCGplayer, and Card Kingdom. Each service has its own privacy policy. We only share data with them as needed to provide the feature (for example, looking up a card price).
Your collection is private by default. If you share a folder with another user, they can see the cards in it according to the permission you set. Card Bazaar listings you create are visible to other users. Your shipping address is shared with the seller of an order so they can ship your purchase.
We restrict access to your data to you and authorized platform operators. Payments are processed by Stripe under their security standards. While we work to protect your data, no online service can guarantee perfect security.
We keep your collection and account data for as long as your account is active. You can export your collection via CSV Export at any time.
You can delete your account at any time from Profile → Delete my account. Deletion starts a 7-day grace period — if you log in during that window, the deletion is automatically cancelled. After the grace period ends, we permanently delete your cards, folders, decks, listings, sales records, and profile. Some records (like completed order histories for other parties' fulfillment) may be retained as required by law or for fraud prevention.
You can edit your profile, change your price source, turn tips on or off, and control sharing permissions. You can cancel a Pro subscription at any time. You can export your data and request deletion of your account.
The app isn't directed at children under 13, and we don't knowingly collect data from them. If you believe a child has registered, contact us so we can remove the account.
We may update this policy as the app evolves. We'll notify users of significant changes in-app or by email. Continued use after changes take effect means you accept the updated policy.
Privacy questions? Use Help → Report an Issue in the app and choose 'Account' as the category.
This is a plain-language summary provided for readability. We recommend having a legal professional review and customize this policy before relying on it for commercial use.