Privacy Policy

1. Information we collect

• Identifiers you provide. When you run a scan, we process the card name and condition text you submit.
• Anonymous device / browser id. We store a random identifier (for example in a first-party cookie and browser storage) to enforce free-tier limits, associate saved scans with your browser, and reduce abuse. This is not the same as logging in with email; clearing cookies may reset your identifier.
• Scan and usage records. We store scan outputs and related metadata needed to show results and operate the product.
• Payment information. Paid plans are processed by Stripe. We do not receive your full card number on our servers; Stripe handles payment data under its own terms and privacy policy.
• Technical and log data. Our hosting and infrastructure providers may log IP address, user agent, timestamps, and similar data for security, reliability, and abuse prevention.

2. How we use information

We use information to:

• Provide, maintain, and improve the Service (including AI-assisted estimates).
• Enforce plan limits, process subscriptions, and prevent fraud or abuse.
• Communicate with you when you contact us or when required for the Service.
• Comply with law and respond to lawful requests.

3. Legal bases (where applicable)

If the GDPR or similar laws apply, we rely on appropriate bases such as performance of a contract (providing the Service), legitimate interests (security and product improvement), and consent where required (for example non-essential cookies or marketing, if we add them and ask).

4. Sharing and subprocessors

We share information with service providers who help us run CardSnap (including hosting, database, analytics as configured, email, AI APIs, and payments). Those parties process data under contractual safeguards and their own policies. We do not sell your personal information for money.

5. Retention

We retain information for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods may vary by data type; we may delete or anonymize data when no longer needed.

6. Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is 100% secure.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also clear cookies to reset anonymous identifiers (which may limit continuity of free tier or saved history). To exercise rights or ask questions, contact us via Contact. We may need to verify your request.

8. International transfers

We may process and store information in the United States and other countries where we or our providers operate. By using the Service, you understand that your information may be transferred to jurisdictions with different data protection rules.

9. Children

The Service is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date when changes are material. Continued use after changes means you accept the updated policy, except where applicable law requires additional steps.

11. Contact

Questions about this Privacy Policy: Contact CardSnap.