Privacy Policy
1. What we collect
When you sign in through Privy using email or another available sign-in method, we receive your account identifier, email address where provided, and the public addresses of connected wallets. We collect the display name and other profile information you provide. For delivery, we collect the recipient's name, phone number, and shipping address. We do not collect your wallet private keys.
In Account, you can show your full collection, show only listed cards, or keep your profile private. A visible profile shows your public identity, verified social links, follower and following counts, accessible connection lists, livestreams, eligible cards and an estimated value for the cards visible on that profile. Full collection includes eligible unlisted cards and supported cards in currently linked wallets. Active sale listings remain visible in Market even if your profile is private. Cost basis, wallet balances, payment, payout, gifting and shipping details remain available only to you. Blocking and account deletion further limit what other people can view.
We record bids, purchases, sales, listings, payments, payouts, card ownership and delivery activity, and, where available, vault openings and deposits. We also record age, region, and terms confirmations. We store live-chat messages, reports, and card details and photos you submit. When you choose to broadcast a show, your camera video and microphone audio are transmitted to viewers. Payment details are collected by payment providers; CARDOS receives payment references, status, and limited payment-method details, but does not receive full card numbers from Stripe-hosted payment fields.
When notifications are enabled, we store a device push token and notification preferences. We process technical information needed to operate the service, including IP address, browser or device information, error reports, and performance diagnostics.
If you allow usage analytics, we record page visits, interactions with supported controls, product exposure, search usage (query length and result count, not search text), campaign tags and ad click identifiers when present, the approximate country observed by our hosting provider, journey outcomes and performance observations. When you sign in, we can connect consenting sessions to your account and purchase history. We record field identifiers and error categories rather than what you type into forms. We do not use social engagement to identify individual CARDOS customers.
Masked session replay requires a separate choice and is sampled. Text, inputs and media are masked or blocked, and private authentication, payment and address screens are excluded. No replay is buffered before that choice.
2. How we use it
We use this information to sign you in, operate live shows and chat, process bids and payments, maintain your orders and card ownership records, verify cards entering the vault, arrange delivery, and send order or show notifications. Where available, we also use it to operate wallet funding and vault-opening features. We use reports and technical information to prevent fraud and abuse, enforce age and regional availability, investigate problems, and maintain and improve the service. We may infer approximate location from your IP address or country to enforce regional availability. Your display name, live-chat messages, and broadcasts are visible to other participants when you use those features.
3. On-chain data
Blockchain transactions are public and permanent by design. Wallet addresses and on-chain settlement are visible on the Solana network and are outside our control once broadcast.
4. Third parties
We use providers including Privy for authentication and wallet services; Stripe for payments and seller payouts; Meld and its payment partners for supported wallet funding, with a separate link to Meld’s hosted Sell service; Amazon Interactive Video Service (IVS) for live video and audio; Vercel for hosting and delivery; Supabase for database and storage; Sentry for error and performance diagnostics; and Apple's push notification service for iOS notifications. We also use delivery partners, blockchain RPC providers, and pricing data sources where relevant to the service you use.
These providers receive information needed for their functions, such as payment information for payment processing, video and audio for broadcasting, or recipient contact details for delivery. Payment and funding providers may request additional identity or payment information directly through their own services. Their privacy notices describe their processing. We do not sell your personal information.
Anthropic processes your agent's requests if you turn on your CARDOS agent: your instructions, your collection details and what your agent looks up for you. Our Terms (section 2c) say what it keeps and when it is deleted.
We require service providers that receive personal data from us to protect it to the same or an equivalent standard as this Privacy Policy.
5. Retention
We retain account and service records while your account is active and retain records needed for transaction history, ownership, security, disputes, and legal or audit obligations. Deleting an account removes or anonymizes its profile and sign-in links and removes saved delivery addresses, notification tokens, and saved payment-profile links held by CARDOS. Purchase, sale, payout, and card ownership records remain; transaction and moderation records may also remain where needed for those purposes. Deletion does not erase public blockchain records. Providers may retain records under their own applicable obligations and policies.
Optional usage events are scheduled for deletion after 90 days. Identifiable analytical context is retained for up to 13 months and de-identified daily aggregates for up to 24 months. Anonymous analytics identifiers expire within 90 days, and activity sessions expire after 30 minutes of inactivity. These periods do not replace the retention of service and transaction records described above.
6. Your choices
You can allow or reject optional usage analytics and separately choose masked session replay. Changing your choice stops future optional collection on this browser; it does not delete earlier records automatically. You can change these choices here or in Account settings.
You can request account deletion from the profile menu → Settings → Delete account in the app. Cards still held for you, open bids, unsettled orders, or other outstanding obligations may need to be resolved first; the app identifies what is blocking deletion. For help with deletion or a request to access, correct, or obtain your information, contact privacy@cardos.gg. Depending on your region, you may also have rights to object to processing or request portability.
You can turn off notifications and camera or microphone access in your device or browser settings, stop a broadcast, and disconnect connected wallets. Contact privacy@cardos.gg to withdraw consent for other processing based on consent. Withdrawing permission may prevent the corresponding feature from working and does not remove records we need to retain or public blockchain records.
7. Cookies and local storage
We use essential browser storage to keep you signed in and remember session state and privacy choices. With your permission, we also store optional first-party analytics identifiers and campaign context. We do not embed advertising trackers through this measurement system.
8. Children
CARDOS is not directed to anyone under 18. We do not knowingly collect data from minors; if we learn we have, we delete it.
9. Changes and contact
We may update this policy and will note the version above. Questions or data requests: privacy@cardos.gg. See also our Terms of Service.