Privacy Policy

1. Overview

This Privacy Policy explains what information Coqui Cardboard (the “Service”) collects, how it is used, and the choices you have. Coqui Cardboard is an independent, fan-made tool for tracking trading cards.

2. Information we collect

• Account information — your email address, used to sign you in via a one-time link, and a basic profile (username, display name, optional avatar and bio).
• Collection data you enter — the cards you mark as owned (condition, grade, quantity, purchase price, notes, for-trade status), your want list, and target prices.
• Authentication via a third party — if you sign in with Google, we receive basic profile information (such as your email) from that provider; we do not receive your Google password.
• Usage & technical data — standard server logs and request information needed to operate and secure the Service.

We do not sell your personal information.

3. How we use your information

• to provide the Service — saving your collection, computing values and analytics, and powering your account;
• to display the parts of your collection you choose to make public (for example, a public profile);
• to secure, maintain, debug, and improve the Service;
• to communicate with you about your account when necessary.

4. Cookies & local storage

We use a cookie to keep you signed in (set by our authentication provider). We also store small preferences in your browser’s local storage — such as your light/dark theme and sound setting — which never leave your device.

We use Google Analytics to understand aggregate usage (such as page views, approximate location, and device type). Google may set analytics cookies for this purpose; see Google’s Privacy Policy. You can opt out through your browser settings or Google’s opt-out browser add-on. We do not use third-party advertising trackers.

5. Service providers

We rely on trusted third parties to operate the Service, each acting as a processor of the data needed for their function:

• Supabase — database, authentication, and image storage;
• Vercel — website hosting and delivery;
• Google — optional sign-in and Google Analytics (anonymous usage measurement);
• eBay — public marketplace pricing data and affiliate links.

Your use of these providers is also subject to their own privacy policies.

6. Affiliate links

Some outbound links (for example “find on eBay”) are affiliate links. As a member of the eBay Partner Network, we may earn a commission from qualifying purchases. We do not receive your purchase details; the marketplace handles the transaction under its own policies.

7. Public profiles

If you choose to make your collection or profile public, the information you mark as public (such as owned cards, for-trade flags, and profile details) becomes viewable by anyone with the link. You control what is public and can change it at any time in your settings.

8. Data retention & deletion

We keep your information for as long as your account is active. You can edit or remove your collection data at any time, and you can request deletion of your account and associated data by contacting us. Some records may be retained as required for security or legal reasons.

9. Security

We use reasonable technical measures — including encrypted connections and database access controls — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.

11. Your rights

You may access, correct, export, or delete your personal information. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, contact us using the details below.

12. International users

The Service is operated from the Commonwealth of Puerto Rico (United States). If you access it from elsewhere, your information may be processed in the United States, which may have different data-protection laws than your country.

13. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above.

14. Contact

Questions or requests? Email privacy@coquicardboard.com. See also our Terms of Service.