Preliminary

Privacy Policy

Last updated: July 23, 2026

Cardful is an early-stage, invite-only product. This is a preliminary privacy policy template, not final legal copy — it will be reviewed and updated as the product and its data practices evolve.

1. Information we collect

When you use Cardful, we collect:

  • Account & profile information — your display name, role (collector, vendor, or both), and city, which you provide during onboarding.
  • Google sign-in data — when you sign in with Google, we receive your name, email address, and profile photo from Google via OAuth, as permitted by the scopes you approve.
  • Listing and consignment activity — items you list, offers and terms exchanged between collectors and vendors, and messages sent through the platform.
  • Basic technical data — session and authentication cookies needed to keep you signed in.

2. How we use your information

We use the information above to:

  • Create and maintain your account, and authenticate you via Google OAuth.
  • Match collectors with vendors and facilitate consignment arrangements between them.
  • Display your profile (name, role, city) to other users you interact with on the platform.
  • Operate, secure, and improve Cardful.

3. Information sharing

Cardful is a platform for connecting collectors and vendors — by design, your display name, role, city, and listing activity are visible to other users you transact with. We do not sell your personal information. We share data with the service providers that run Cardful, currently:

  • Supabase, our authentication and database provider.
  • Google, for OAuth sign-in.

4. Data retention

We retain account and profile data for as long as your account is active. If you'd like your account and associated data deleted, contact us and we'll process the request.

5. Your choices

You can update your profile information at any time. You may also request a copy of the data we hold about you, or ask us to delete your account.

6. Cookies

We use cookies strictly necessary to keep you signed in and to maintain your session with our authentication provider. We do not currently use advertising or tracking cookies.

7. Changes to this policy

As Cardful moves out of its early-access phase, this policy will be revised. We'll update the "last updated" date above when that happens.

8. Contact

Questions about this policy can be sent to the Cardful team through the platform.