Privacy.

1. Information we collect

We collect the following categories of information:

• Account information. Your email address, username, and password (stored only as a secure hash). You may also add profile details such as a display name, location region, and the categories you collect or sell.
• Seller identity-verification information.If you become a certified seller, we collect verification information from a government-issued ID — your legal name, date of birth, address, and ID number. We store this information to confirm your identity; we do not retain an image or scan of the ID document itself.
• Wants, listings, and messages. The wants you post, the items you list, and the messages you exchange with other users through the Platform. We process message content to strip contact details and enforce our policies (see our Acceptable Use Policy).
• Transaction and usage data. Records of offers, fulfillments, reputation, and activity on the Platform. When payments are enabled, transaction details are processed by Stripe; we receive limited confirmation and status data, not your full payment card number.
• Device and log data. Your IP address, browser and device type, and basic log information generated when you use the Platform, used for security, fraud prevention, and reliability.

2. How we use information

• To operate the Platform, match wants with sellers, and enable messaging.
• To verify seller identities and maintain trust and reputation.
• To process and support transactions through Stripe.
• To detect, prevent, and respond to fraud, abuse, and policy violations, including off-platform circumvention.
• To communicate with you about your account, transactions, and updates.
• To comply with legal obligations and enforce our Terms.

3. Service providers and sub-processors

We share personal information only with the service providers we rely on to run the Platform, and only as needed for them to provide their services to us:

• Supabase — database and authentication.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Cloudflare R2 — storage for listing images.
• Stripe— payment processing and money transmission (when transactions are live). Stripe handles your payment information under its own privacy policy.

We may also disclose information when required by law, to respond to valid legal process, to protect the rights, safety, and property of users or the public, or in connection with a corporate transaction. We do not sell or share your personal information for cross-context behavioral advertising.

4. Cookies and analytics

We use a small number of essential cookies needed to keep you signed in and to keep the Platform secure. For analytics we use Plausible, a privacy-friendly tool that measures aggregate usage without cookies and without building advertising profiles of individuals. We do not use third-party advertising trackers.

5. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your personal information, and to request details about how we process it. You can update most account and profile information directly in your account settings. To request access, correction, or deletion — including deletion of your account — email privacy@dailycardshow.com and we will respond within the time required by applicable law. We may need to verify your identity before acting on a request. Note that we may retain certain information where we have a legal obligation or a legitimate need to do so (for example, transaction and fraud records).

6. Data retention

We keep personal information only as long as needed for the purposes described in this policy — while your account is active, and afterward as required to comply with legal, tax, accounting, dispute, and fraud-prevention obligations. Seller identity-verification information is retained for as long as you remain a certified seller and for the period required to meet our compliance obligations, then deleted or anonymized. When information is no longer needed, we delete or de-identify it.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Children

The Platform is intended only for adults. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us information, contact us at the address below.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and provide additional notice where appropriate.

10. Contact

Questions about this Privacy Policy or your data can be sent to Must Haves, Inc. at privacy@dailycardshow.com.