Privacy Policy

• Your account. Email address, name, password (stored only as a hash that cannot be reversed), and optionally a profile picture and home city.
• What you save. Cards you save, your Wishlist, shows you save and vendors you follow.
• How you use the site. Searches you run and cards, vendors and shows you open, so vendors can see what collectors are looking for and we can see what is broken. Vendors see this as counts and demand signals, never as your identity beside a search.
• Vendor accounts. Shop name, description, specialties, links, and inventory. Billing is handled by Stripe — see below.
• Sign-in times. When you last signed in and were last active, so dormant accounts can be identified and support can answer "when was this account last used?"

CardFlock sets two cookies. Both are necessary for the site to work:

• cf_token — keeps you signed in. Cleared when you sign out.
• cf_place — the location you chose, so pages can show what is near you on the first load rather than guessing nationwide and correcting itself.

There are no advertising cookies, no analytics cookies and no third-party trackers, pixels or session-replay scripts anywhere on the site. Nothing follows you to other sites. That is why there is no cookie banner: there is nothing to consent to beyond the two cookies above, which the site cannot function without.

Your browser also stores your theme choice, your chosen location and your sign-in tokens locally. That data stays in your browser.

• Stripe handles vendor payments. Card numbers are entered with Stripe and never reach CardFlock's servers; we store only Stripe's customer and subscription identifiers.
• Microsoft delivers our email — sign-in codes, password resets and notifications.
• OpenStreetMap's Nominatim resolves addresses and city names. When you type into an address or city box, the text you type is sent there to be looked up.
• Vendors see aggregate demand for their own cards — how many collectors saved a listing, for example — not who you are.

We do not sell your data, and we do not share it for advertising.

A collector account is private. A vendor account is a shopfront: shop name, description, specialties, links, inventory and the shows they are attending are visible to anyone.

• Notification emails can be turned off individually in your profile.
• Saved cards, Wishlist entries and follows can be removed at any time.
• You can delete your account yourself from Account settings → Danger Zone → Delete your account. To get a copy of your data, email support@cardflock.com or use support.

Deleting your account permanently deactivates it straight away: you can no longer sign in, and a vendor's shop and listings are removed from public view. Reactivation is only possible by contacting the Admin — there is no self-service way back.

Your personal data is then deleted from the platform in line with our data retention policy, which follows GDPR-style principles: we keep data only for as long as it is needed for the purpose it was collected for, and remove it once that purpose has ended. A small set of records may be kept for longer where there is a legitimate reason to — billing and payment records, and the audit trail of account actions, for example — and only for as long as that reason lasts. A vendor's paid plan is cancelled when the account is deleted.

CardFlock is not intended for children under 13, and accounts are not knowingly created for them.

Email support@cardflock.com.