Privacy Policy

Last updated: May 30, 2025

1. Introduction

Welcome to Card Stash. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website.

2. Information We Collect

2.1 Information You Provide

  • Account information (username, email, password)
  • Profile information (optional: first name, last name, bio)
  • Card collection information (images, descriptions, metadata)

2.2 Information Automatically Collected

  • IP address (for security and fraud prevention)
  • Browser information (user agent)
  • Session data

3. How We Use Cookies

We use cookies to improve your experience on Card Stash:

3.1 Essential Cookies

  • Session cookies: Required for login functionality and maintaining your session
  • Cookie consent: Remembers your cookie preferences

3.2 Functional Cookies

  • Remember me: Keeps you logged in between visits (optional)

3.3 Third-Party Cookies

  • Google reCAPTCHA: Used to prevent spam and abuse on registration and password reset forms

4. How We Use Your Information

We use your information to:

  • Provide and maintain the Card Stash service
  • Manage your account and authenticate you
  • Display your card collection
  • Prevent fraud and abuse
  • Send password reset emails
  • Send email notifications (if you opt-in)

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your consent
  • To comply with legal obligations
  • To protect our rights and prevent fraud

6. Data Security

We implement appropriate security measures to protect your personal information, including:

  • Password hashing using industry-standard algorithms
  • Secure session management
  • HTTPS encryption (when available)
  • Regular security updates

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Control your privacy settings
  • Opt-out of non-essential cookies

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data, except where we need to retain it for legal purposes.

9. Children's Privacy

Card Stash is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us through the Contact page.