Privacy Policy
CardFloor ("the app") is operated by CardFloor LLC ("we", "us"). This policy explains what the app collects, who it goes to, and the choices you have. Questions any time: info@cardfloor.app. Your use of CardFloor is also governed by our Terms of Service.
We show no ads. We do not sell your personal information. We do not track you across other apps or websites.
Information we collect
- Account — your email address and display name, and either a password you set or your Google account identity if you sign in with Google. We never see your Google password.
- Your card data — inventory, collections and portfolios, watchlists, price rules, label designs and print jobs, grading submissions, and your saved value history.
- Your business records — shows you create, buy/sell/trade deals, prices paid and received, payment method used, cash balances, and receipts.
- Photos you take — card images used for identification, and photos you attach to a deal or a want-board post. These are stored in our cloud storage under your account.
- Vendor profile — if you set one up: your business name, logo, links and show schedule, plus anything you choose to publish on a public vendor page.
- Approximate location (optional) — only if you grant it, to find card shows near you. Never collected in the background.
- Diagnostics — crash reports, and bug reports you submit. A bug report includes what you typed, the screen you were on, and the app version identifier so we can reproduce it.
- Notifications — a push token for your device, if you enable notifications.
- Beta sign-up — if you request beta access on this website: your email address, and whatever you tell us about your table (vending or business name, Instagram handle, what you sell, and how many people work your booth). We use it to decide who to invite and to get in touch — nothing else, and it is never published or sold.
Card images and who processes them
When you scan a card, the image is sent to automated recognition services to work out which card it is and to read any text on it (including graded-slab labels). Depending on the scan, that may include Ximilar (visual card identification), Google Cloud Vision (text recognition), and Google Gemini (fallback identification). These providers process the image to answer that question and are not permitted to use it for their own purposes.
Point the camera at cards, not at people or documents.
The market index — and how to turn it off
When you complete a sale or purchase, CardFloor may record an anonymous price event: the card, its condition and printing, the price, and the date.
These records contain no identifier of any kind — no name, no account id, no show, no location, no timestamp beyond the date. Nothing links them back to you or your business, by design and in the code that writes them.
We use them so the prices in CardFloor reflect what cards actually trade for at real shows, rather than only what online listings say. You get the benefit of everyone else's contributions in return.
You can turn this off at any time: Settings → Privacy → Contribute to the market index. Turning it off stops future contributions immediately. Records already contributed are anonymous, so they cannot be located or withdrawn afterwards — there is nothing in them to find you by.
Manual entries, sealed products, and trades are never contributed.
What other people can see
- Nothing about your inventory, your prices paid, your cash, or your profit is visible to anyone else unless you deliberately publish it.
- Want-board posts are visible to others at that show. Collector posts appear anonymously — your name and contact details are not shown to vendors.
- If you publish a public vendor page or storefront, you control what appears on it. Cost basis is never published.
- Market-index records are anonymous, as described above.
Service providers
We use these processors to run the app:
- Google Firebase — sign-in, database, file storage, and cloud functions.
- Expo — app updates and push notification delivery.
- Sentry — crash and error reporting.
- Card recognition — Ximilar, Google Cloud Vision, Google Gemini (see above).
- Card catalogue and market data — Scrydex, Card Hedge, PriceCharting, TCG Price Lookup, PSA (certification lookups), and public sales listings. These receive card identifiers, not your personal information.
These providers process data on our behalf under their own security and privacy commitments.
Data retention & deletion
Your data is kept while your account is active. To delete your account and associated personal data, email info@cardfloor.app from your account email and we'll complete the deletion within 30 days. Anonymous market-index records are not part of that deletion, because they contain nothing that identifies you.
Security
Your data is stored with Google Firebase and access is restricted by security rules to your own account. No system is perfectly secure, and CardFloor is beta software — please don't store anything in it that you couldn't tolerate being exposed or lost.
Children
CardFloor is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we'll delete it.
Changes
If this policy changes we'll update this page and the version and date above. If the change is material, we'll ask you to review it in the app.