Privacy Policy

This is a development/proof-of-concept platform. This page describes what we collect and why, in plain language.

What we collect

• Name — shown to other users so they know who they're trading with.
• Email address — used to log in and to verify your account. Never shown to other users.
• Phone number — collected at registration; not currently shown to other users or used for anything automated.
• Password — stored only as a one-way cryptographic hash (bcrypt). We cannot see or recover your actual password.
• Collection and trade activity — the cards you add to your collection, prices you set, and trades you propose/accept, so the platform can function.

Why

Solely to operate your account and the trading features of this platform: authentication, showing your collection, and executing trades you agree to.

Who sees it

Your name and trade activity are visible to other users you trade with. Your email, phone number, and password are never shown to other users.

Cookies & local storage

• Session cookie — one cookie (PHPSESSID) that keeps you logged in and protects forms against cross-site request forgery. Strictly necessary for the site to work; there's no tracking or advertising cookie on this site.
• Local storage — your browser's localStorage remembers your light/dark theme choice.
• Session storage — your browser's sessionStorage remembers small "how you left it" preferences, like which collections/sets are expanded on My Collection, which set you last had open, and the sidebar's width. It clears itself when you close your browser.

All three of these stay on your own device. None of it is sent to us beyond the session cookie, shared with anyone, or used to track you across other sites.

Your rights

You can request a copy of your data or ask for your account to be deleted. Self-service tools for this aren't built yet — for now, this is a manual process: contact whoever operates this instance of the platform directly.

Consent

By registering, you consent to this data being collected and used as described above. The time of your consent is recorded with your account.