Privacy policy

Shared catalogue contributions

Submitting a catalogue contribution is optional and separate from saving private scans. With your permission, we store a cropped copy, the card identity and finish, your account identifier, review status and contribution credit. Administrators review submissions before publishing them as shared card references. These images can be shown to other users and used to improve matching. A public collector name is shown on the leaderboard only if you opt in; your email is not shown. Withdraw a contribution from Catalogue quest to remove its shared image and credit. Rejected submissions remain private for review; withdrawal removes the stored image, while limited review records may remain for abuse prevention and support.

Optional email newsletters

If you opt in, we use your email to send Card Desk news, feature updates and Collector Vault trading-card offers. Newsletter consent is optional and separate from creating an account, purchasing, trading or receiving essential service messages. We record the email address, account identifier, time, source and wording of your choice. Change it in email preferences or use the unsubscribe link provided in a marketing email. We retain limited consent and suppression records to respect withdrawals and avoid sending marketing to people who have opted out.

Seller buylists and business records

When you submit cards to a seller’s buylist, your name, email, notes, requested cards and valuations are shared privately with that seller. Your tracking link contains a private access token; keep it private. Wanted card lists are public only when the seller publishes them. Customer requests, final valuations, settlement references, profit records and business presets are not included in the public wanted list. The buylist request limiter stores a keyed hash for request limits rather than storing your raw IP address in that limiter. Cash payments, store credit and delivery are arranged directly with the seller; Card Desk records the workflow and does not transfer money or issue credit.

Trade and cash buying enquiries

When you request a trade or offer items for cash, we store your account identifier where applicable, name, email, item descriptions, quantities, quotes and review history to handle your enquiry. Trade offers are visible to the person who submitted them and authorised shop administrators. Stock listings and photos are public only when the shop owner publishes them. This service does not process trade payments or issue an account credit balance; delivery and any payment are arranged directly with the shop owner.

Who is responsible for your information

Card Desk is responsible for the personal information used to run this service. For privacy questions or requests, email support@carddesk.net.

Information we use

• Your account: your email address, account identifier, protected password credentials, sign-in sessions and password-reset records.
• Your cards: uploaded scans and photos, card descriptions, quantities, prices, storage locations, collections, folders, binders and listing settings you save.
• Subscriptions and referrals: payment-provider customer and subscription identifiers, payment status, referral links, visits, signup attribution, qualifying-payment reward records, refund/dispute adjustments and manual payout records. Optional referral bank details are encrypted and shared only with authorised payout administrators. Stripe handles payment-card details; Card Desk does not store your full payment-card number.
• Support and service operation: messages you send us and technical information such as request times, network addresses, browser information and errors needed to operate and protect the service.
• Connected eBay accounts: authorisation tokens, an identifier used to process eBay account-deletion notices, connection status and image-upload records.

Why we use it

We use account and card information to provide the service you request: saving collections, identifying scanned cards, preparing exports, managing subscriptions and connecting your chosen marketplace account. The basis for this use is providing our contract with you.

We use limited technical and support information for our legitimate interests in keeping Card Desk secure, resolving problems and preventing misuse. We retain information when needed to meet legal obligations, including payment record requirements. Where an optional use requires consent, you can withdraw that consent by contacting us.

Card identification suggests matches for you to review. It does not automatically make legal or similarly significant decisions about you.

Scans, showcases and catalogue images

Your saved collection and scans are account information. When you choose to publish a collection in Showcase, its shared card details and selected images become visible to other visitors. You can remove the collection from Showcase. People who have already viewed it may have saved a copy.

Uploading a scan does not, by itself, grant permission to publish it as a shared catalogue reference. Any separate contribution feature must explain what will be shared and ask for permission before publication.

Quick photo lookup sends your photo for card identification without adding a saved scan batch or inventory record. CardDesk caches the recognised identifiers privately in your account so repeat lookups can reuse the reading; it does not save the lookup photo itself.

If AI card reading is used, the card image is sent to OpenAI to read its visible identifiers. Avoid including faces, addresses or other personal information in card photos. The request disables storage of the response in the API; that setting does not mean the provider has no security or abuse-monitoring retention.

Your eBay connection

You authorise Card Desk on eBay's own sign-in page. Card Desk does not receive your eBay password. We store encrypted access and refresh tokens so the requested connection can work.

The connection can read your business policies, upload listing images and publish listings that you explicitly review and confirm in Card Desk. We store policy names and identifiers, reviewed listing details, fees and published item numbers to support these actions. Order and stock syncing is not enabled. We request permissions for these functions, including inventory access and read access to account settings.

You can disconnect eBay in Card Desk or revoke access through eBay. Disconnecting removes the saved connection tokens and its cached image-upload records. When eBay sends a verified account-deletion notice, we remove matching eBay connection data. Your independently created Card Desk collection remains unless you also request its deletion.

Your Shopify connection

You authorise Card Desk on Shopify’s sign-in page. We do not receive your Shopify password. We store your shop identity, currency, active stock locations, chosen stock location and encrypted authorisation token. This lets Card Desk read your store settings. CSV exports use product details and quantities you select; importing a CSV in Shopify sends those details and any linked product photos to Shopify. Direct publishing and automatic order/stock syncing are not enabled yet.

Disconnecting removes Card Desk’s saved store authorisation. Verified Shopify uninstall and store-redaction notifications remove the matching connection data. Your Card Desk collections and scans remain private unless you separately share or delete them. The current Shopify connection does not store shopper details or order records.

Personal storefront drafts

When you use storefront setup, we save your shop name, reserved shop address, branding, stock selection, seller contact details, delivery and returns information, and domain preference to your account. Drafts and their previews are private. Selecting inventory does not make its photos or stock public. Publishing a seller storefront makes its reviewed branding, allocated product photos, prices, stock availability, seller contact details and policies public. Allocation copies the selected photos into storefront storage and moves the allocated quantity out of general inventory. We keep seller orders, delivery details, tracking references, refund and payment references for fulfilment and financial records. Sellers can access only their own orders; a customer’s private receipt token grants access to that order. We store the receipt secret encrypted and do not store payment-card or bank-login details. Stripe handles seller identity checks, bank details and buyer payment details. Saving a domain preference does not register a domain or verify ownership. Seller payment onboarding is a separate, explicit Stripe Connect action. We store its account reference, readiness and commission acceptance, not identity-verification documents or bank credentials. Domain connections store ownership proof and hosting DNS records; DNS ownership checks use Cloudflare DNS. Domain purchases open at GoDaddy, which handles its own registration, billing and renewal terms.

Services that receive information

We use OpenAI Sites and Cloudflare for website hosting, database and image storage; OpenAI for AI card reading when used; Resend for account-recovery emails; Stripe for subscriptions and tips; eBay when you connect your account or upload images there, and Shopify when you connect your store or import product files. Each receives the information needed for that function. Opening an external marketplace link also takes you to a service with its own privacy policy.

These providers may process information outside the UK. Their processing locations and transfer arrangements depend on the service used. Contact us for information about the arrangements relevant to your data. We may also disclose information when legally required or necessary to investigate misuse. We do not sell your personal information.

Automated help assistant

When you send a help question, the question and recent messages from this chat are sent to OpenAI to generate a reply from CardDesk’s product help guide. The assistant does not have access to your account, orders, payment details, private files or development conversations. Do not include passwords, bank/card details or private access links. CardDesk keeps chat text only in the open page’s memory, not in a server chat-history database. Requests disable API response storage; OpenAI may still retain information for security or abuse prevention under its policies. Short-lived keyed network identifiers and request counts protect the assistant from abuse and limit usage; they are separate from visitor statistics. You can choose human support and optionally include chat text in an email draft. No email is sent until you send it in your email app.

Visitor statistics

To improve CardDesk, we count estimated daily visitors, public-page views, entry pages, referring domains and campaign labels. We do not use an analytics tracking cookie, record full referring URLs or query strings, or provide individual browsing histories. A network address and browser user-agent are used in memory to create a keyed counting identifier that changes each UK day; the raw address and user-agent are not stored in the statistics tables. These identifiers are not linked to accounts or payments and are removed on the next statistics update after the day ends. Only aggregate totals are retained for up to 90 days. Shared networks, privacy tools and missing referrers affect accuracy.

Use Visitor statistics in the footer to turn this off. Your choice is saved in a preference cookie for up to a year. Do Not Track and Global Privacy Control signals also disable collection. Signed-in administrators, private pages, overlays and known bots are excluded. These statistics are for improving CardDesk, not personalised advertising, and are processed on our existing hosting infrastructure.

Cookies and browser storage

Sign-in and connection cookies keep sessions secure. Browser storage remembers settings such as your theme, binder sounds and workspace preferences. If you open a referral link, a referral cookie records attribution for up to 30 days; it is cleared when attribution is applied. Clearing browser data removes local preferences and may sign you out.

How long we keep information

Saved account, collection and scan information is kept while it is needed to provide your account and the content you choose to retain. You can remove content through the available controls or ask us to delete your account and associated information.

Short-lived sign-in and recovery records expire according to their security purpose. The referral signup window lasts up to 30 days; linked signup, reward and payout records remain while needed to run the referral programme and keep payment records. Payment and support records may need to remain after account closure where needed for accounting, an unresolved dispute or a legal obligation. Backup or service-log copies may remain until the relevant provider's retention cycle expires. Contact us if you need details for a particular record.

Your choices and rights

You can ask to access, correct or delete your personal information, receive a portable copy where applicable, restrict its use, or object to processing based on legitimate interests. These rights depend on the circumstances and any legal requirements to retain information. Email support@carddesk.net from your account email; we may need to verify your identity before acting.

If you are unhappy with how we handle your information, you can contact us and you can complain to the UK's Information Commissioner's Office.

Changes to this policy

We will update this page when the service or its data use changes, and tell account holders about material changes. The date above identifies the latest version.