Privacy Policy

When you create an account and use Cardora, we may collect:

• Account & login data: email, password hash, sign-in provider (Google), session tokens.
• Profile data: display name, username, avatar, bio, location region, contact preferences.
• Marketplace listings: titles, descriptions, prices, condition, category, and metadata you publish.
• Listing photos: images you upload from your camera or gallery for your listings.
• Chat & messages: conversations with other users on the platform.
• Offers & transactions: offers placed, accepted, declined, marked sold, and related history.
• Portfolio & watchlist: cards you track, watchlist items, price alerts, and collection valuations.
• Verification documents: IDs or selfies submitted for seller verification (see below).
• Device & log data: basic browser/device info, IP, app version, and error logs for performance and security.
• Preferences: notification settings, saved searches, followed sellers.

Cardora requests camera and photo gallery access only so you can upload listing photos when selling a card. Photos you select are uploaded to your listing — Cardora does not access your camera or gallery in the background or scan unrelated photos.

You can revoke camera or photo permissions in your device settings at any time.

If you enable notifications, we use a push token from your device to deliver alerts for messages, offers, listing updates, price alerts, and verification status changes. You can disable notifications in your device or account settings at any time.

We collect minimal, aggregated analytics and error logs to keep the platform fast and reliable (for example, anonymous page load metrics and crash reports). We do not sell analytics data.

• Verification documents are stored securely and are never publicly displayed.
• Only authorized Cardora staff and reviewers may access them.
• Other users only see your verification badge and status, never the documents.
• Documents are used solely for identity confirmation and fraud prevention.

• Operate the marketplace — listings, search, messages, offers, transactions.
• Maintain trust & safety — scam prevention, moderation, dispute support.
• Deliver notifications you have opted into.
• Improve performance, fix bugs, and develop new features.
• Comply with legal obligations where required.

Cardora relies on trusted service providers to operate. They process data only on our instructions and are bound by their own privacy and security commitments.

• Backend & database hosting for accounts, listings, messages, and storage.
• Application & edge hosting for serving the website and app.
• Google Sign-In if you choose to sign in with Google (we receive basic profile fields only).
• Push notification delivery through device platform providers.
• Market reference data providers for aftermarket price references shown as "Estimated Market Reference". These references are informational only.

Cardora does not sell your personal data.

Public marketplace activity — listings, public profile info, reviews — is visible to other users as part of normal platform use. Messages, offers, contact details, verification documents, portfolio entries, and watchlists are private to your account.

We keep your data for as long as your account is active or as needed to operate the marketplace. Some records (transactions, moderation actions, fraud signals) may be retained longer when required by law or for legitimate safety and security purposes.

You may:

• Update or delete profile information at any time.
• Request a copy of your data.
• Request account & data deletion — see Data Deletion.

Account deletion removes your personal data from active systems. Limited records may be retained for fraud prevention, legal, or security reasons.

Privacy questions, data requests, or deletion requests:
support@cardora.ph

By using Cardora, you agree to this Privacy Policy. We may update it occasionally — significant changes will be communicated through the platform.