Privacy Policy

1. Who we are

CardboardFever (available at cardboardfever.com) is a hobby reference site for trading-card collectors. We publish checklists, card images, and catalog data for MLB baseball cards, Pokemon, Magic: The Gathering, Yu-Gi-Oh, NBA basketball cards, and NFL football cards. Users can browse checklists without an account; creating a free account unlocks collection tracking, pull logging, and breaker-follow features.

CardboardFever is not affiliated with, endorsed by, or officially connected to Topps, Panini, The Pokemon Company, Wizards of the Coast, Konami, Major League Baseball, the NBA, the NFL, or any other card manufacturer or sports league.

2. Data we collect

Account data (only if you register)

• Email address
• Password (stored as a cryptographic hash - we never store your plain-text password)

User-generated content (only if you use account features)

• Your collection: which cards you have marked as owned or wanted
• Logged pulls: cards you record pulling from packs
• Followed breakers: the breaker accounts you have chosen to follow

Technical data (collected automatically)

• Aggregate, privacy-safe analytics from Vercel Analytics and Speed Insights (no cookies, no cross-site tracking, no personal identifiers). See the Vercel Analytics privacy page for details.
• Standard server logs (IP address, browser type, pages visited) retained in accordance with Vercel's hosting infrastructure policies.

We do not collect payment information directly. We do not buy or receive data from data brokers. We do not collect any information about your trading-card purchases beyond what you voluntarily log on the site.

3. How we use your data

We use the data we collect only to:

• Operate your account and save your collection and pull history
• Send transactional and alert emails you have opted in to (breaker-hit alerts, new-release notifications)
• Understand aggregate site usage so we can improve the catalog and features
• Debug errors and maintain site reliability

We do not sell your personal data. We do not use your data for advertising targeting. We do not share your data with third parties for their own marketing purposes.

4. How and where data is stored

Account data and user-generated content are stored in AWS DynamoDB in the us-east-1 (Northern Virginia) region. Data is encrypted at rest and in transit. We retain your data for as long as your account is active. You may request deletion at any time (see Section 10).

If you are located outside the United States (including in the European Union or Brazil), your data will be transferred to and processed in the United States. By using CardboardFever, you acknowledge this transfer. We rely on the necessity of the transfer to perform our service to you as the legal basis for this transfer.

5. Email communications

We use Resend to send transactional and alert emails. The types of emails we may send include:

• Alerts you have enabled (e.g. breaker-hit notifications)
• New-release notifications for sets you have followed
• Account-related messages (password reset, policy updates)

You can unsubscribe from non-essential emails at any time using the unsubscribe link in any email we send, or by emailing tyler.m.partain@gmail.com. Transactional account messages (such as password-reset emails) are not subject to unsubscribe; they are sent only when you take an action that requires them.

Resend processes your email address on our behalf as a data processor. See Resend's privacy policy for details of their data handling.

6. Affiliate links

Some links on CardboardFever - labeled "Find on eBay" or similar - are affiliate links through the eBay Partner Network (EPN). If you click one of these links and make a qualifying purchase on eBay, CardboardFever may earn a commission at no additional cost to you.

Affiliate links are clearly marked. We do not control eBay's pricing or availability, and clicking affiliate links does not affect the prices you see on eBay. CardboardFever is an independent participant in the eBay Partner Network and is not endorsed by or officially affiliated with eBay Inc.

We do not share your personal data with eBay. Standard eBay cookies may be set when you visit eBay after clicking a link; those are governed by eBay's own privacy policy.

7. Analytics and performance monitoring

CardboardFever uses Vercel Analytics and Vercel Speed Insights for site performance data. These tools collect aggregate, anonymized data about page views and web vitals. They do not use cookies and do not track individual users across sites. No personal identifiers are stored as part of analytics.

We do not use Google Analytics, Meta Pixel, or any other third-party behavioral tracking tools.

8. Third-party services

CardboardFever sources card data and images from publicly available APIs including Scryfall (Magic: The Gathering), TCGdex (Pokemon), YGOPRODeck (Yu-Gi-Oh), and the MLB Stats API (baseball player data). We do not share your data with these services, and we do not receive personal data from them.

Card images served from eBay listings are loaded from eBay's image CDN. eBay may log standard request metadata (such as IP address) when your browser requests those images.

9. Cookies and session storage

CardboardFever sets one first-party cookie: tyde_session, a session cookie used to keep you logged in if you have a registered account. This cookie contains only a session identifier; it does not contain personal data. It expires when you sign out or after a period of inactivity.

The site also uses your browser's localStorage to save your collection state client-side for performance and offline availability. This data stays on your device and is not transmitted to our servers unless you are signed in, in which case it is synced to your account.

We do not use advertising cookies, third-party tracking cookies, or fingerprinting techniques. Vercel Analytics is cookieless by design. If you arrive at cardboardfever.com from an eBay affiliate link you clicked elsewhere, eBay may set its own cookies governed by eBay's policy.

10. Your rights (GDPR, CCPA, and similar laws)

Depending on where you live, you may have the following rights regarding your personal data. We honor all of these requests regardless of your location.

• Access. You can request a copy of the personal data we hold about you.
• Correction. You can ask us to correct inaccurate or incomplete information.
• Deletion. You can ask us to delete your account and all personal data associated with it. We will complete deletion requests within 30 days.
• Portability. You can request your data in a machine-readable format.
• Opt-out of email communications. You can unsubscribe from non-essential emails at any time (see Section 5).
• Non-discrimination (CCPA). We will not discriminate against you for exercising any of these rights.

California residents: we do not sell or share your personal information as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). You have the right to know, delete, correct, and opt out of the sale or sharing of personal information. To exercise any of these rights, contact us at tyler.m.partain@gmail.com.

European Union and UK residents: the legal basis for processing your account data is the performance of a contract (providing the service you signed up for). You also have the right to lodge a complaint with your national data protection authority.

11. Children's privacy (COPPA)

CardboardFever is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at tyler.m.partain@gmail.com and we will promptly delete it.

12. Security

We take reasonable technical measures to protect your data. Passwords are hashed before storage. Data is transmitted over HTTPS. Account data is stored in AWS DynamoDB with encryption at rest.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it to tyler.m.partain@gmail.com and we will respond promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of CardboardFever after a policy update constitutes acceptance of the updated policy. If you have an account, we may also notify you by email when material changes are made.

14. Contact

For any privacy-related question, access request, or deletion request, email:

tyler.m.partain@gmail.com

We aim to respond to all privacy requests within 5 business days.