Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your username, email address, and display name. Your password is securely hashed and never stored in plain text.

Collection Data

We store information about sports cards you add to your collection, including card names, photos, conditions, and values. Photos you upload are stored on our servers.

Usage Data

We collect basic usage information such as pages visited, features used, and device type to improve our service.

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers.

2. How We Use Your Information

• To provide and maintain CardVault services
• To manage your account and collection
• To process transactions via our marketplace
• To send transactional emails (verification, password resets, trade notifications)
• To improve our AI card scanning technology
• To prevent fraud and abuse

3. AI Card Scanning

Our card scanning feature uses Google Cloud Vision API and OpenAI to identify cards from photos you submit. Images are sent to these third-party services for processing. We do not use your card images to train AI models.

4. Information Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Google Cloud Vision / OpenAI — for card scanning (images only)
• Law enforcement — when required by law

Your public profile, if enabled, shows your username, display name, and collection statistics to other users.

5. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), CSRF protection, and rate limiting. However, no method of transmission over the Internet is 100% secure.

6. Your Rights

You may:

• Access and update your account information at any time via Settings
• Export your collection data
• Delete your account by contacting us
• Opt out of marketing emails via notification preferences

7. Cookies

CardVault uses session cookies to keep you logged in. We use Google Analytics and Google Ads cookies for website analytics and advertising. You can control cookies through your browser settings.

8. Children's Privacy

CardVault is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.

10. Contact Us

For privacy questions or data requests, contact us at:

Email: privacy@breaktosurvive.com

Website: breaktosurvive.com