Privacy Policy

CardPlay is a TCG marketplace operated by Sanam's Labs. This policy explains what personal data we collect, how we use it, and your rights around it.

Account information

When you create an account, we collect your email address and username. If you choose to add a profile photo or other details, we store those too.

Shipping addresses

Buyers and sellers provide physical addresses for shipping purposes. We store these to pre-fill checkout and to generate shipping labels.

Payment information

We do not store your card number, CVV, or full payment details. Payment processing is handled by Stripe, which stores payment method data securely under their own privacy policy. We receive a payment confirmation and a token reference from Stripe but never the raw card data.

Order and transaction history

We store records of purchases, sales, offers, and disputes associated with your account. This includes item details, prices, timestamps, and communication records related to orders.

Usage data

We may collect standard server logs including IP addresses, browser type, and pages visited. This is used for debugging and platform security, not for advertising.

When you submit a seller application, we collect additional information to evaluate your request:

• Your legal name, used solely for identity verification in the event of a dispute. It is not displayed publicly or shared with buyers.
• The games, languages, and platforms you sell on, and your estimated sales volume — used to understand your experience and match you with the right seller tools.
• A link to an existing seller profile, if provided.
• A short statement about why you want to sell on CardPlay.
• Whether you have opted in to receive seller news and updates from us.

Application data is retained regardless of outcome. If your application is rejected you may email us to request deletion of your application data.

• To process orders, payments, and payouts
• To generate shipping labels and communicate tracking information
• To send transactional emails (order confirmations, dispute updates, notifications)
• To resolve disputes between buyers and sellers
• To detect and prevent fraud or abuse
• To improve the platform based on how it is used

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

CardPlay relies on the following third-party services to operate. Each has its own privacy policy:

• Stripe — payment processing and seller payouts. stripe.com/privacy
• EasyPost — shipping label generation. Shipping addresses are shared with EasyPost to create labels. easypost.com/privacy
• Supabase — database and authentication infrastructure. Your account data, addresses, and order history are stored in Supabase. supabase.com/privacy

We share only the data each service needs to function. We do not share data with these providers for their own marketing purposes.

We retain your account data for as long as your account is active. Order and transaction records are retained for a minimum of 3 years for financial and dispute purposes. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your order history

To exercise any of these rights, email us at support@tcgcardplay.com. We will respond within 30 days.

CardPlay uses session cookies to keep you logged in. We do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser settings, but doing so will prevent you from staying logged in.

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), row-level security on our database, and access controls that limit who can view sensitive data. No system is perfectly secure, and we cannot guarantee absolute security.

We may update this policy as the platform evolves. We will notify you of material changes by email or via an in-app notice. The date at the top of this page reflects the most recent update.

Privacy questions or requests: support@tcgcardplay.com