Privacy Policy

1. About This Policy

This Privacy Policy explains how Card Parcel ("Card Parcel," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website, create an account, subscribe to a Parcel, use our Buyback program, or otherwise interact with our services. It should be read together with our Terms & Conditions, which govern your use of the services themselves.

2. Information You Provide to Us

Account information. When you create an account, we collect your name, email address, and a hashed (never plaintext) version of your password.

Collector Profile. Your favorite Pokémon, preferred eras and languages, card-style preferences, and anything you tell us to avoid sending — used only to guide featured-card selection, as described in our Terms.

Shipping address. The address you provide to receive your Parcels.

Payment information. Subscription payments are processed by Stripe. You enter your card details directly with Stripe on Stripe's own checkout page — Card Parcel does not receive or store your full card number.

Buyback submissions. If you submit cards or a collection through our Buyback program, we collect the card details, photos, and any CSV export you upload.

Communications preferences. Whether you're subscribed to marketing email, and your preferences for specific categories (news & updates, giveaways & promotions, card show announcements, and club perks & offers).

Two-factor authentication. If you enable it, the information needed to verify your login. Your two-factor secret is encrypted at rest and is never stored in plain text.

Anything you send us directly — for example, if you contact us for support.

3. Information Collected Automatically

When you use our website, we (and the analytics provider described in Section 4) automatically collect standard technical information such as your IP address, browser and device type, pages visited, and how you interact with those pages. We use this to understand how the site is used and to keep it secure and working correctly.

4. Cookies & Similar Technologies

Card Parcel's website uses a small number of cookies:

• Session cookies that keep you logged in and remember your session — required for the site to function.
• Analytics cookies from Google Analytics (GA4), which help us understand aggregate traffic and usage patterns. You can opt out using your browser's cookie settings or a browser extension such as Google's Analytics opt-out add-on.

Most browsers let you block or delete cookies. Doing so may affect parts of the site that depend on them, such as staying logged in.

5. How We Use Your Information

We use the information described above to:

• Create and maintain your account, and process your subscription and payments
• Select and fulfill your featured card each month, guided by your Collector Profile
• Evaluate and pay out Buyback submissions
• Ship your Parcel and provide tracking where available
• Send transactional emails (order confirmations, shipping updates, account notices)
• Send marketing email for the categories you've opted into, and honor your preferences when you opt out
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Understand site usage and improve our website and services
• Comply with legal obligations

6. How We Share Your Information

We do not sell your personal information. We share information only as necessary to operate our services:

• Stripe, to process subscription payments and Buyback payouts
• Resend, to deliver marketing email you've opted into
• Shipping carriers, to deliver your Parcel and provide tracking
• Google Analytics (GA4), for aggregate website usage analytics
• Our hosting provider, to run the website and store data securely
• Law enforcement or other parties, where required by law or to protect our rights and safety
• A successor entity, if Card Parcel is involved in a merger, acquisition, or sale of assets

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. If you close your account, we may retain certain records where required by law (for example, tax and payment records).

8. Your Choices & Rights

• Marketing email: update your preferences by category, or unsubscribe entirely, using the link in any marketing email or through your account's communication preferences.
• Access, correction, or deletion: most account information can be updated directly in your account. To request access to, correction of, or deletion of your personal information, contact us using the details in Section 13.
• Cookies: manage or block them through your browser settings, as described in Section 4.

Depending on where you live, you may have additional rights under applicable law. We will respond to verified requests consistent with those laws.

9. Data Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), hashed passwords, encrypted two-factor secrets, and access controls on internal systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Card Parcel's services are intended for users who meet the age-of-majority requirement described in our Terms & Conditions. We do not knowingly collect personal information from children, and if we learn that we have, we will take reasonable steps to delete it.

11. International Users

Card Parcel operates from the United States, and information we collect is processed and stored there. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your home jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where required by applicable law, we will provide notice of material changes. Your continued use of our website or services after an update takes effect constitutes acceptance of the revised policy.

13. Contact Us