Privacy Notice

Who is responsible

Controller: Enis Çiçek. For privacy questions or requests, email cardevion.app@gmail.com.

Information we process

• Account information: your Google account identifier, name, email address, and profile image when you sign in.
• Cards and selling information: photos you upload, recognition results, collection entries and copy details, and any Cardmarket sale drafts you prepare.
• Scan diagnostics: original and processed scan images, recognition candidates, extracted card details, timing and error information, and any feedback you provide. These records help us diagnose and improve recognition.
• Technical information: information needed to operate and protect the service, such as browser session data, extension pairing records, and server logs that may contain an IP address and browser details. Essential browser storage also holds your session and may temporarily hold unsaved cards.
• Chrome extension information: the extension stores a revocable Cardevion connection token and your selling preference in Chrome. When you use it, the extension accesses your prepared sale details and an eligible card photo from Cardevion, and interacts with the relevant Cardmarket listing page.

Why we use it

We use account, card, photo, and sale information to provide the features you request: Google sign-in, card recognition, your private collection, Cardmarket sale preparation, and extension connection. Our legal basis for this processing is providing the service you request. We use diagnostic and technical information to maintain security, fix errors, and improve recognition, based on our legitimate interests in operating and improving Cardevion.

Cardevion does not publish a Cardmarket listing when you upload a photo or save a draft. You choose when to list a card; if you enable the extension’s optional auto-list setting, it can submit a listing after you choose List card or List all.

Information received through Chrome APIs is used only to provide the extension’s Cardmarket selling assistance and related security and reliability functions. Our use of that information follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Service providers and Cardmarket

Google provides sign-in. Supabase provides authentication and collection data storage. Railway hosts Cardevion and its recognition service. Cloudflare stores private card photos and diagnostic data. These providers process information to help us deliver Cardevion.

When you choose to use the Cardevion extension to prepare a Cardmarket listing, it sends the relevant card and sale details to Cardmarket and may attach your photo for a single-copy listing. Cardmarket handles information under its own privacy terms. Some of our service providers may process information outside the European Economic Area; contact us for information about the safeguards applicable to your data.

How long we keep it

We keep saved account and collection information and private scan diagnostics until you ask us to delete them, unless a longer period is required by law. You can remove individual cards from your collection. Temporary authentication and extension connection records expire according to their technical settings.

Your choices and rights

Email cardevion.app@gmail.com to request access, correction, export, or deletion of your personal information, or to object to or request restriction of processing where applicable. We will handle requests under applicable data protection law. You may also complain to your local data protection authority.

Changes

We may update this notice as Cardevion changes. The date at the top shows when it was last updated.