Privacy Policy

Last updated: March 5, 2026

1. Information We Collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.

We also store data you create on CardJones, including your card wishlist, owned cards, collection items, trade history, forum posts, and chat messages.

If you use CardJones without signing in, your wishlist and owned card selections are stored locally in your browser (localStorage) and are not transmitted to our servers.

2. How We Use Your Information

  • To authenticate your identity and maintain your session
  • To save and sync your collection, wishlist, and preferences
  • To facilitate trades and communication with other users
  • To display your public profile to other collectors

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored on secure servers. We use HTTPS encryption for all data in transit. Authentication is handled through Google OAuth 2.0, an industry-standard protocol.

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

4. Cookies and Local Storage

We use a session cookie to keep you signed in. We use browser localStorage to store your card preferences (wishlist/owned) for users who are not signed in. We do not use tracking or advertising cookies.

5. Third-Party Services

We use the following third-party services:

  • Google OAuth — for authentication
  • TCGdex API — for Pokemon card data
  • PokeAPI — for Pokemon data

These services have their own privacy policies. We encourage you to review them.

6. Children's Privacy

CardJones is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Revoke Google sign-in access at any time via your Google Account settings

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

9. Contact

If you have questions about this Privacy Policy, contact us at josh@cardjones.com.