Privacy Policy
Last updated: March 17, 2026
1. Information We Collect
Account Information: When you create an account, we collect your email address and username. If you subscribe to a paid plan, we collect your name and billing details through our payment processor (Stripe).
Seller Information: If you use the Seller subscription, we collect your eBay Seller ID to import and display your listings.
Usage Data: We automatically collect information about how you interact with the Service, including pages visited, searches performed, listings viewed, and features used.
Device Information: We collect browser type, operating system, IP address, and device identifiers for security, analytics, and rate limiting purposes.
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process subscription payments and manage your account
- Import and display your eBay listings (Seller subscribers)
- Track listing views and clicks for seller analytics
- Send transactional emails (account verification, billing receipts)
- Send marketing communications (only with your opt-in consent)
- Monitor and prevent abuse, fraud, and security threats
- Analyze usage patterns to improve features and performance
3. Third-Party Services
We share data with the following third-party services, each with their own privacy policies:
- Supabase — Database hosting and authentication
- Stripe — Payment processing. Stripe collects and processes payment information directly. We never store your credit card details. See Stripe's Privacy Policy.
- Vercel — Website hosting and serverless infrastructure
- Sentry — Error monitoring and performance tracking
- Upstash — Rate limiting (processes anonymized IP hashes)
- eBay — Listing data sourced via the eBay Browse API
4. Cookies and Tracking
CardSpotter uses essential cookies to maintain your session and authentication state. We also use analytics tools to understand how visitors use the Service. We use affiliate tracking links (eBay Partner Network) which may set cookies on the destination marketplace to attribute purchases.
5. Data Retention
We retain your account information for as long as your account is active. Listing analytics data (views, clicks) is retained for up to 12 months. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, billing records).
6. Data Security
We implement industry-standard security measures to protect your data, including encrypted connections (TLS/HTTPS), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing emails at any time
To exercise any of these rights, contact us at support@cardspotter.com. We will respond within 30 days.
8. California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of your personal information. We do not sell your personal information to third parties. To submit a CCPA request, email support@cardspotter.com.
9. Children's Privacy
CardSpotter is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact
Questions about this Privacy Policy or your data can be directed to support@cardspotter.com.