Privacy notice

This explains what the CardGremlin hosted service does with data. CardGremlin is a private tool for trading-card sellers who are invited by the site operator.

Who runs it

The site operator (the owner of this CardGremlin deployment) runs the service and is the only person who can see stored data, together with the hosting and storage providers named below.

Contact: not configured. The site operator has not yet published a contact address.

What is collected, and why

• Account: your email address and a salted password hash, to sign you in. Accounts are created by invitation only; there is no public sign-up.
• Sign-in cookie: a session cookie (HttpOnly, Secure) keeps you signed in for up to 8 hours. A second cookie remembers your light or dark theme. No advertising, analytics or third-party tracking scripts are used, and this page contains no scripts.
• Your cards and inventory: card photos you upload, the card details you confirm, storage bin codes, prices and drafts. Photos are stored on the service's private storage volume under your own seller workspace.
• eBay data, only if you connect your own eBay account: after you approve eBay's consent screen the service stores an access token (encrypted with AES-GCM, sealed per seller) and reads your listings, orders, policies and store settings so it can show them to you. Orders can include buyer names, usernames and shipping details. No eBay data is collected about anyone who has not connected their own account.
• Billing, if enabled: your email is passed to Stripe to run subscription checkout. Card numbers are entered on Stripe, not here. The current build supports Stripe test mode only.

Who can see it

Each seller's workspace is kept separate from other sellers'. The site operator can access stored data for support and running the service. Data is not sold and is not shared for advertising.

What leaves the service

• eBay: the service talks to eBay on your behalf. When a listing is checked, its photos are uploaded to eBay's picture hosting, and only if the site operator has switched on live photo upload. The listing itself is published to eBay only after the site owner authorizes that specific card.
• Photo recognition: off unless the operator configures a provider. If an operator turns on the OpenAI provider, each photo you submit for recognition is sent to OpenAI (with image metadata removed where the format allows) to read the card's name and number.
• Backups: the database is backed up on a schedule. Backups, and a journal of eBay account-deletion notices (stored as keyed digests, not raw identifiers), are encrypted before being copied to separate object storage.

eBay account-deletion notices

When eBay notifies this service that an eBay user deleted their account, the service erases that person's data from every seller workspace and, if it was a connected seller's own eBay account, that seller's workspace.

Deleting your data

To ask for your account or data to be deleted, or to ask what is held about you, contact the site operator using the contact above. You can also disconnect eBay from the eBay page after signing in, and revoke the app in your eBay account settings.

What is not defined

This service does not currently state fixed retention periods for your data, and this notice makes no claim of compliance with any specific privacy law. Backup copies can retain data for a period after it is deleted from the live service.