Privacy Policy
This policy describes what information Cardboard Terminal ("we", "us") collects when you use cardboardterminal.app and the Cardboard Terminal iPhone app (together, the "Service") and how we use it. We keep this simple because the Service is simple: it is a data tool, not an advertising business.
1. What we collect
- Account information. When you sign in with Google we receive your email address and basic profile name. We do not receive your Google password. In the iPhone app you sign in with your email address and a one-time code we email you; we keep the address and a record of the sign-in.
- Usage information. We log page requests (path, timestamp, IP address, browser user agent) and in-app actions such as which auction listings you click. We use this for security, abuse prevention, and to understand which features are useful.
- Alerts and favorites. If you set up alerts or mark listings as favorites, we store those settings (for example the cards, sets, player names, categories and price rules you chose) so we can match live listings against them and notify you.
1a. The iPhone app
The app collects the same information as the website, with these differences:
- Push notifications. If you allow notifications, Apple gives the app a device token, which we store with your account so we can send you alert notifications. Turning notifications off in iOS Settings, or deleting your account, stops them; tokens Apple reports as invalid are removed.
- Install identifier. The app generates a random identifier on first launch and sends it with its requests in place of the browser visitor cookie described in Section 5. It is not derived from your device's hardware identifiers, is not shared with advertisers, and is used the same way as the cookie: traffic measurement, abuse prevention, and affiliate attribution.
- No tracking. The app contains no advertising or analytics SDKs and does not use Apple's advertising identifier.
2. What we do NOT do
- We do not sell your personal information.
- We do not run third-party advertising on the Service, and we do not sell or share your information with advertisers. The one advertising-related tag we use is X's conversion measurement for our own ads on X, described in Section 5.
- We do not share your personal information except as described below.
3. How we use information
To operate, secure, and improve the Service; to authenticate you; to prevent abuse (for example scraping or account sharing); and to analyze feature usage in aggregate.
4. Sharing
We share information only with service providers needed to run the Service (cloud hosting providers for infrastructure), or if required by law. These providers process data on our behalf under their own security obligations.
Affiliate links. Links from the Service to eBay listings include eBay Partner Network tracking parameters, including a pseudonymous visitor identifier (from the cbt_vid cookie described in Section 5), so that eBay can attribute resulting purchases to Cardboard Terminal. We do not send eBay your name or email address. eBay's use of this data is governed by eBay's own privacy policy.
Ad measurement on X. We advertise the Service on X (formerly Twitter). To understand whether those ads bring people who actually use the Service, the deal finder loads X's conversion tag, which reports to X that a visit happened, that a deal was opened, or that a listing on eBay was clicked, together with the listing price. X may use this to show our ads to people who have visited the Service. We do not send X your name, email address or the cbt_vid identifier. X's use of this data is governed by X's privacy policy, and you can limit it in your X privacy and ads settings.
5. Cookies
We use a session cookie to keep you signed in, and a first-party visitor identifier cookie ("cbt_vid", kept for up to one year) that helps us measure traffic, prevent abuse, and attribute affiliate activity as described in Section 4. X's conversion tag (Section 4) may set or read X's own cookies when you visit the deal finder. We use no other third-party advertising cookies or ad trackers.
6. Retention
Account information, alerts, favorites and device tokens are kept while your account exists. Server logs are kept for a limited operational period. You may request deletion of your account and associated personal information at any time (see Section 7); in the iPhone app, Account → Delete account removes your account, alerts, favorites, device tokens and click history immediately.
7. Your rights
You may request access to, correction of, or deletion of your personal information by emailing support@cardboardterminal.app from your account email. California residents may exercise rights under the CCPA (access, deletion, non-discrimination) the same way. We do not sell personal information, so there is nothing to opt out of selling.
8. Children
The Service is for adults 18 and older. We do not knowingly collect information from children.
9. Changes
We may update this policy; the current version with its effective date will always be at this page. Material changes will be reflected here.