Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how the CardCuteCollect app (“CardCuteCollect,” “we,” “us”) handles information. CardCuteCollect has two parts: a private, account-synced binder and a community feed where collectors share cards with each other.

Your private binder follows your account

The cards you add to your binder — their photos, quantities, details, and binder organization — are stored in private account storage so they can be restored after an app reinstall or when you sign in on another device. The app also keeps an on-device cache for fast loading and offline viewing. Other collectors cannot browse your binder or its private photo storage unless you turn on Public binder, described next.

Public binder — off unless you turn it on

Settings has a Public binder switch. It is off by default. While it is off, nothing changes: your binder and its photos stay private to your account.

If you turn it on, any signed-in collector who taps your handle in the feed can open your binder and see everything in it — not only the cards you chose to post. What they can see is:

• every card photo in your binder,
• the card details you entered — name, set, number, and rarity, and
• the names of your binders, so the page matches the way you organize.

They can also “heart” individual cards. We store which cards a collector hearted and a count per card. Photos they view are fetched for that visit only and are not copied into their own collection.

Turn the switch off and your binder is private again immediately — the page stops opening for everyone else. Collectors you have blocked can never open your binder, and you can never open theirs, in either direction. Cards in a public binder can be reported the same way feed posts can.

Signing in

Signing in is how your binder and your posts stay attached to you, and how you sign back in on a new device. Which sign-in you get depends on your phone, and the two hand us different amounts of information.

• On iPhone and iPad — Sign in with Apple. We request no profile information, so Apple gives us only an anonymous, app-specific user identifier — not your name and not your email address.
• On Android — Sign in with Google. Google does not offer an anonymous equivalent. Signing in returns a token that identifies you, and that token carries the email address on your Google account, whether it is verified, and the basic profile details Google publishes for it — your Google display name and the URL of your Google profile picture. Our authentication provider stores those alongside your account.

The app itself only ever reads the identifier. Your Google name and Google picture are not copied into your CardCuteCollect profile and are never shown to other collectors — the handle, display name, and avatar other people see are the ones you choose yourself. We do not use the email address from Google to send you marketing; that only happens if you separately tick the email-updates box.

You may also give us an email address for a promotion, for support, or for optional updates. On iPhone that is the only way we have one at all.

Your profile

When you set up your profile you choose a handle, a display name, an avatar emoji or profile photo, and a color. These are stored on our servers so that cards you share can show who posted them. Your handle and display name are visible to other users, so please don’t use your real name, photo, or anything personal you don’t want shared.

The community feed — what you share is public

The feed is a single, shared, public space. When you add a card, CardCuteCollect creates its private binder copy and also uploads a public feed copy containing:

• the photo of that card, and
• the card details you added — its name, set, number, and rarity,

together with your profile. Anyone using CardCuteCollect can see and “heart” what you share. Your binder organization, quantities, and private account copy are not shown in the feed. You can remove any public feed post at any time, which removes that public copy while leaving the card in your private binder. (Posting is separate from the Public binder switch above: removing a post does not hide the card from a public binder, and turning the switch off does not remove anything you posted.)

Comments, following, and activity

We store comments you submit, their publication and review status, your comment likes, the collectors you follow, and activity entries for comments and new followers. Approved comments and social counts are visible to other collectors. Unpublished comments are available to their author and moderators, and are excluded from public comment counts. Your activity inbox is visible only to your account. The app also saves unfinished comment drafts on your device; signing out clears those drafts.

Comments publish immediately without automated screening or prior approval. You can delete your own comments and report other collectors’ comments. Post owners can remove comments on their posts, and moderators can remove reported content.

Saved Posts stores private bookmarks to community posts. Only your account can view your saved list. Saving a post does not copy it into your binder or override the post’s visibility; deleted or inaccessible posts are unavailable from Saved Posts.

Sharing a post outside the app

Creating a public link for your post lets anyone with that link view the post’s photo, card details, handle, heart count, and approved comments without signing in. Other collectors can share that link once you enable it. Creating a link does not make your private binder or private Trades conversations public. You can turn off the public link from Share, or delete the post. This stops access through that link but cannot remove copies or screenshots someone has already saved. Blocking an account does not prevent that person from viewing an enabled public link while signed out.

Trading cards with other collectors

CardCuteCollect lets you trade cards with other collectors — one picture for one picture. No physical cards, money, or shipping are involved; a trade swaps the pictures and details inside the app.

Here is exactly what moves, and when:

• Listing a card for trade puts that card’s photo and details into a public trade pool, where any collector can see it — the same visibility as the feed.
• Making an offer stores a copy of the card you offered — its photo and details — on our servers while the offer is pending, so the other collector can see what they’re being offered. Offers you don’t resolve expire after four days.
• A completed trade transfers the two private binder cards between the collectors’ accounts and updates their device caches. We also post a public announcement to the feed showing both collectors’ profiles and both cards.

Please trade thoughtfully: once you trade a card away, the other collector owns that binder card and can cache its photo on their device, and we can’t take it back for you — just as they can’t take back the one they sent you. Deleting your account removes your listings, offers, and trade history from our servers, but it does not reach into another collector’s account.

Invitation-only physical Trades beta

CardCuteCollect is testing a separate physical-card Trades experience with a small group of invited adult collectors. The current beta is a simulation: it cannot charge money, collect a mailing address, buy postage, create a real shipping label, or ship a card.

Inside this beta we store the exact-card front and back photos and details a tester lists, listing-linked chat messages, structured trade offers and acceptances, fictional test-label and parcel states, ratings, review reports, and feedback. Exact-card photos are visible only as needed for beta browsing and the two-person trade. The current build does not collect a package photo or any real shipping information.

Trades also stores its own follows and collection cards, separately from your main binder and community follows. Unlisted cards do not appear in the marketplace. Cards already shared in an offer or conversation remain accessible to its participants as needed for that trade.

Starter Gift promotion and optional emails

If you choose to claim a CardCuteCollect Starter Gift, we use your signed-in account ID and automatically count the cards in your private binder to confirm the stated binder requirement. We also collect the email address you enter, a record that you verified it, your claim number and status, the campaign terms version you accepted, your age-and-U.S.-address confirmation, and the name and U.S. mailing address needed to fulfill an approved claim. We take a snapshot of the qualifying card count, but we do not copy your private card photos or card details into the claim record.

Claim emails — such as the verification code, claim receipt, approval, and shipping notice — are service messages needed to process the request. A separate email-updates checkbox is optional, starts unchecked, and is not required to receive the gift. If you select it, we may send CardCuteCollect news, product updates, and future offers until you unsubscribe.

We plan to delete the full mailing name and address within 90 days after shipment or the campaign’s final fulfillment, whichever is later. We may retain a limited claim record, including an account ID, one-way email fingerprint, consent record, and fulfillment status, for up to 12 months to administer the one-per-person offer, prevent abuse, and resolve questions. An email address on the optional updates list remains there until you unsubscribe or ask us to remove it.

Keeping the feed safe

We have a zero-tolerance policy for objectionable content and abusive behavior. Every collector can report a post, a card in the trade pool, or a card in a public binder, or block another user. Reported content is hidden right away and reviewed, typically within 24 hours, and we remove content and users that break the rules. Blocking someone also stops them from trading with you and closes both of your binders to each other. To keep this system working, we store the reports and blocks you make.

Notifications

The Notifications switch in Settings is a single choice: leave it on and we may send you trade offers and replies, plus an occasional reminder to come back and see what other collectors have shared. Turn it off and we send you nothing — the app removes this device from our notification list, so there is nothing left to send to.

To time those reminders we store, separately from your public profile, when you last opened the app and your device’s UTC time offset (so a reminder arrives during your day rather than in the middle of your night). No other collector can see either one. You can also turn notifications off for CardCuteCollect entirely in your device’s Settings.

Camera and photos

CardCuteCollect asks for camera and photo access so you can capture your cards. A card photo you add is uploaded to your private account-backed binder and a public feed copy is created as described above. You can allow, deny, or revoke this access at any time in your device’s Settings.

Where your data is stored

CardCuteCollect is powered by a few service providers that process data on our behalf, only to run the app:

• Supabase hosts the database and private photo storage behind your binder, plus the community feed — your profile, binder cards, the cards and photos you share, hearts, reports, blocks, your trade listings and offers, your completed-trade history, invitation-beta exact-card photos, and your trade-ticket balance. See supabase.com/privacy.
• Apple provides Sign in with Apple on iPhone and iPad, as described above.
• Google provides Sign in with Google on Android, as described above. See policies.google.com/privacy.
• RevenueCat handles CCC Plus subscriptions and trade-ticket purchases, as described below.
• Resend sends verification, claim, fulfillment, and optional marketing emails and maintains the optional email-updates list. See resend.com/legal/privacy-policy.
• Google Workspace receives and stores messages sent to our CardCuteCollect support address and replies we exchange with you. See policies.google.com/privacy.

Subscriptions and purchases

CardCuteCollect offers two optional purchases: a paid subscription, CCC Plus, and trade tickets. Everyone gets a number of free trades each week; a ticket lets you keep trading once those run out, and is only used if the collector you offered actually accepts. Both are processed by the store your app came from — Apple through your Apple Account on iPhone and iPad, Google Play through your Google Account on Android. Either way we never see or receive your card number or payment details.

To unlock CCC Plus, verify your purchases, add tickets to your balance, and let you restore a subscription on your devices, we use a purchase-management provider, RevenueCat. RevenueCat receives the transaction and subscription status for your purchase, together with an identifier for your CardCuteCollect account. Because tickets have to be added to your balance, this identifier is linked to your account — but it is still not your name or your email address, neither of which we send to RevenueCat, and it is not used to track you across other apps or websites. RevenueCat also gives us aggregate, non-identifying purchase statistics — for example, how many people subscribe — so we can understand and support the app. You can read RevenueCat’s privacy policy at revenuecat.com/privacy.

We keep a record of tickets added to and used from your balance, so that your balance is correct and so we can help if a purchase goes wrong. We use this purchase information only to provide and support these features — for example, to unlock CCC Plus, credit tickets you bought, restore your subscription, and handle billing or refund questions.

No ads or tracking

CardCuteCollect contains no third-party advertising, no ad networks, and no social-media trackers. We don’t track what you do across other apps or websites, and we don’t use the information you share with us for third-party advertising. If you separately opt in, we may use your email to send our own CardCuteCollect updates and offers. Apart from the service providers described above, we don’t share your data with anyone, and we never sell it.

Children’s privacy

CardCuteCollect includes community features with user-generated content and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we’ll remove it.

Deleting your data and your account

You’re always in control of your data:

• Your account, binder, and everything you shared: open You › Delete account in the app. This permanently deletes your profile, account-backed binder, private card photos, every card you posted, the photos you uploaded, your trade listings and pending offers, your completed-trade history, invitation-beta exact-card photos, comments, follow relationships, social activity, public post links, Starter Gift claim and mailing details, and your ticket balance from our servers. It can’t be undone, and any unused tickets are lost.
• Optional email updates: use the unsubscribe link in any marketing email or contact us. Because the updates list is maintained separately from the account you sign in with, deleting your app account does not by itself unsubscribe that email address.
• Cards already traded to someone else: a card you traded away belongs to that collector’s account and is not yours to delete, so it isn’t removed by deleting your account.
• Deleting the app: removes the device cache, but your binder remains in your account and restores when you reinstall and sign in again.

Changes to this policy

If we change how information is handled, we’ll update this policy and the “Last updated” date above, and, where required, ask for your consent in the app before the change takes effect.

Contact

If you have any questions about this Privacy Policy, contact us at hello@cardcutecollect.com.