Privacy Policy

Last updated: May 2026

CardBase TCG ("we," "our," or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Information we collect

We collect information you provide directly when you create an account or use the service:

• Email address and password (encrypted)
• Business data you enter: orders, expenses, inventory, sales records
• Files you upload for import (PDFs and CSVs are processed locally in your browser — we do not store the raw files)

How we use your information

• To provide and maintain the CardBase TCG service
• To authenticate your account and keep your data secure
• To improve the product based on aggregate usage patterns
• To contact you about your account or service updates

Data storage

Your data is stored securely using Supabase, a cloud database provider. Data is encrypted at rest and in transit. We do not sell your data to third parties.

Data isolation

Each user account is fully isolated. You can only access your own data. We use row-level security policies to enforce this at the database level.

PDF and CSV processing

When you import packing slips or order reports, files are parsed entirely within your browser using JavaScript. Raw file contents are never transmitted to our servers — only the extracted order data is saved.

Your rights

• You may request a full export of your data at any time by contacting us
• You may request deletion of your account and all associated data
• You may update or correct your information at any time within the app

Cookies

We use session cookies for authentication only. We do not use tracking cookies or advertising cookies.

Changes to this policy

We may update this policy as the service evolves. We will notify users of material changes via email.

Contact

Questions about this policy? Email us at hello@cardbasetcg.com