Privacy Policy

1. Introduction and Scope

MyCardRep ("MyCardRep," "we," "us," or "our") operates mycardrep.com and any related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, store, share, and protect information about you when you use our Service. This policy applies to all users of the Service, including visitors, registered users, and any other individuals who interact with our platform.

By accessing or using the Service, you expressly consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must immediately discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly:

• Account registration information, including email address and password
• Profile information, including username, biography, sport and collectible tags, and links to external accounts
• Profile photographs and images you upload
• Deal logs, including descriptions, approximate values, dates, and parties involved
• Reviews, ratings, responses, and other content you submit
• Reports you file about other users or non-users
• Communications you send to us

2.2 Information Collected Automatically:

• Log data, including IP address, browser type, pages visited, and time spent on pages
• Device information, including device type, operating system, and unique device identifiers
• Usage data, including features used, actions taken, and interactions with other users
• Cookies and similar tracking technologies

2.3 Information from Third Parties:

• If you sign in using Google or Facebook, we receive your name, email address, and profile photo from those services, subject to your privacy settings with those providers
• Publicly available information about external accounts you choose to link to your profile

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Service
• To create and manage your account
• To display your public profile and reputation information to other users and visitors
• To process and display deal logs and reviews
• To send transactional communications, including deal confirmations and invitations
• To detect, investigate, and prevent fraudulent activity, abuse, and violations of our Terms of Service
• To enforce our Terms of Service and other policies
• To comply with applicable laws, regulations, and legal processes
• To respond to your inquiries and requests
• To analyze usage patterns and improve user experience
• In the future, to serve advertisements or offer premium paid features (we will update this policy and notify users before implementing such changes)

4. Public Information

The following information is publicly visible to all visitors, including those who are not logged in, and may be indexed by search engines:

• Your username and profile photograph
• Your biography and sport/collectible tags
• Your linked external accounts (eBay, Reddit, Instagram, etc.)
• Your deal history, including descriptions, approximate values, and dates
• Reviews you have received, including written explanations and responses
• Your reputation tier, statistics, and badges
• Reviews you have left for other users

You understand and agree that any information you add to your public profile or submit as a review or deal log will be publicly visible and may be indexed by search engines. Your email address is never displayed publicly.

Reviews and deal logs may remain publicly visible even after account deletion, as they form part of the community's trust record and the integrity of the reputation system depends on their persistence.

5. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We use Supabase for database hosting, authentication, and file storage. These providers process data on our behalf and are contractually obligated to protect your information.
• Authentication Providers: If you use Google or Facebook sign-in, those services share limited profile information with us pursuant to their own privacy policies.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of MyCardRep, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may retain certain information after account deletion as required by law, for legitimate business purposes, or to maintain the integrity of the reputation system. Reviews and deal logs submitted by or about you may be retained indefinitely as part of the community's trust record.

7. Data Security

We implement industry-standard technical and organizational security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, secure hosting infrastructure, and access controls.

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information. You use the Service at your own risk, and you are responsible for maintaining the confidentiality of your account credentials.

8. Your Rights and Choices

Subject to applicable law, you may have the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate personal information
• The right to request deletion of your personal information, subject to our data retention policy
• The right to opt out of marketing communications

To exercise these rights, contact us through our website. We will respond within 30 days. Please note that certain information may be retained as described in Section 6.

9. Cookies

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and analyze usage. By using the Service, you consent to our use of cookies. You may disable cookies through your browser settings, but doing so may affect the functionality of the Service.

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us immediately through our website.

11. Third-Party Links

The Service may contain links to third-party websites, including external accounts linked on user profiles (eBay, Reddit, Instagram, etc.). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. We will notify users of material changes by posting the updated policy on this page with a revised date. For significant changes, we may also notify you by email or through a prominent notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our website at mycardrep.com.