Privacy

What we collect when you sign up

• Your name or shop name, and your email address.
• Your billing details — held by Stripe, not by us. We see the last four digits of your card and your billing country, never the full number.
• From each install, once a day with its update check: its web address and the version it runs, and — unless you turn it off under Settings → Updates — a few counts: when someone last signed in, how many cards are in stock, how many were added, scanned, listed and sold this week, and whether eBay and the phone app are connected. Never card, customer or sale details. The counts help us spot a new shop that's stuck and offer help.
• If you join a waitlist: your email and anything you choose to tell us.
• If you send feedback: your message, the page you were on, and your email if you give one.

We use this to issue your license, send updates, take payment, answer support emails, and tell you about changes to your plan. We send product news only if you've asked for it.

Your shop's data

Self-hosted: your inventory, customers and sales stay on your server. We never receive them.

Hosted: we store your shop's data on our servers to run your site — each customer in a separate database — and in encrypted nightly backups. We access it only to keep it running, fix problems you report, or when the law requires. We never sell it, share it, or use it to train anything.

This website

These sales pages and the demo use no advertising networks, pixels or third-party trackers. One cookie of our own holds a random number (kept for a year) so we can count visits: which pages and which demo were opened, how often you came back, and which ad or website link you first arrived from. That tells us which ads are worth paying for. It holds no name, email or address and isn't shared with anyone; if you sign up, it's linked to your license so we know which ad brought you. Pages with a form set one session cookie, which only protects the form from forgery. If you arrive through another customer's referral link, a cookie remembers which customer sent you for 30 days, so they can be thanked if you sign up. Our web server keeps standard logs (address, page, time) for security, for up to 30 days.

Who else handles data

Stripe (payments), our hosting provider, our email provider, Backblaze (encrypted backups, hosted plans), and Google Fonts (the typefaces on these pages load from Google, which sees your browser's address and type, like any website you load something from). Each handles data only to provide that service. Outside services you connect to your own shop — eBay, price services, Square and so on — receive what you send them under their own privacy terms.

Your choices

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it (we keep billing records as long as tax law requires). Email failphaba@gmail.com.

Who we are

Cardboard Connoisseur. Contact: failphaba@gmail.com.