Privacy Policy

Effective August 11, 2026

This Privacy Policy explains how CardVine ("CardVine," "we," "us," or "our"), a product of StatZhub Consulting LLC, collects, uses, and shares information when you use the CardVine app and website (collectively, the "Service").

1. Information we collect

Account information. When you create an account, we collect your username, email address, and a securely hashed password. If you choose to add a profile photo, we store that image.

Collection data. Information you enter about your cards — names, images, grading company and grade, purchase price, estimated value, quantity, and category — along with your wish list and any items you mark sold.

Social and trading data. Friend connections, community memberships, posts, direct messages, trade proposals, trade items, and trade ratings you send or receive through the Service.

Shipping information. If you use the paid shipping-label feature to complete a trade, we collect the shipping address, package details, and declared value you provide, and share the relevant portions with our shipping partner to generate a label (see Section 3).

Payment information. If you subscribe to CardVine Pro or pay a trade shipment fee, payment is processed by Stripe. CardVine does not receive or store your full card number; see Section 3.

Usage information. We collect basic usage data — such as which features you use and how often — to help us understand how the Service is used and to improve it.

Camera and photos. If you use the card-scanning feature, your device's camera is used to capture and crop a photo of a physical card. Captured images are uploaded to add the card to your collection.

2. How we use your information

• To provide, maintain, and improve the Service
• To let you catalog your collection and see estimated market values
• To connect you with other collectors and enable trading, messaging, and community features
• To process payments and, where applicable, generate shipping labels for trades
• To communicate with you about your account, transactions, or support requests
• To detect, prevent, and address fraud, abuse, or technical issues

3. How we share your information

We do not sell your personal information. We share information only as follows:

• Other users, as directed by you. If you make your collection public, or engage in friending, community posting, messaging, or trading, the relevant information is visible to other users as part of using those features.
• Stripe. Payment processing for subscriptions and trade shipment fees is handled by Stripe, Inc. Stripe receives the payment details necessary to process your transaction. See Stripe's Privacy Policy.
• Shippo. If you pay for a trade shipping label, your shipping address and package details are shared with Popout, Inc. (DBA Shippo) and the carrier fulfilling the shipment, solely to generate and track that label.
• Supabase. Our database, authentication, and file storage are hosted by Supabase, which processes data on our behalf under its own security and privacy commitments.
• Card data providers. When you search for a card, your search query is sent to third-party card databases (such as Scryfall, the Pokémon TCG API, and eBay's Browse API) to return matching results. These providers do not receive your account or personal information as part of a search.
• Legal and safety. We may disclose information if required by law, or if we believe it's necessary to protect the rights, property, or safety of CardVine, our users, or others.

4. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we're required to retain it for legal, tax, or fraud-prevention purposes.

5. Your choices

• You can review and edit most of your account and collection information directly in the app.
• You can control whether your collection is publicly visible in your profile settings.
• You can request access to, correction of, or deletion of your personal information by contacting us at support@cardvine.app.

6. Data security

We use reasonable technical and organizational measures — including row-level access controls on our database — designed to protect your information. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

7. Children's privacy

CardVine is not directed to children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by updating the effective date above and, where appropriate, through the Service.

9. Contact us

Questions about this Privacy Policy? Reach us at support@cardvine.app.