MyCardBatch

Privacy Policy

Effective date: March 15, 2026 · Last updated: October 11, 2026

This Privacy Policy explains how MyCardBatch ("we", "us") collects, uses, stores, and protects your information when you use our Service at mycardbatch.com.

1. Information We Collect

Account information: When you register, we collect your name, email address, and your password, which we store only in hashed form (never in plain text). We also record how you found us if you arrive through a referral link or tell us at signup, and the account settings you choose (such as your listing preferences, shipping defaults, and email choices).

Your cards and batches: The card details you scan or enter (player, year, set, card number, condition, grading, price, cost, notes, and similar fields), your batches, and the history of what you have listed and sold.

Card images: Photos you upload for scanning.

eBay account data: If you connect your eBay account, eBay gives us access tokens that let us act for you: creating and updating listings, syncing sales, and showing your orders, buyer messages, and offers. We store the access tokens, your listing and item IDs, and sale records for your cards (price, date, and order reference). Order, message, and offer details are read from eBay when you view those pages. You can disconnect eBay at any time in Settings → eBay.

Credits and payments: Your Card Upload balance and transaction history. Payments are processed by Stripe; we never receive or store your card number, expiry date, or security code.

Usage and security data: The date, time, and IP address of each sign-in (used to protect accounts and investigate misuse); when you were last active; scan records (when a scan ran and how much AI processing it used); and in-app activity and error events (for example, that a batch was saved or a listing failed, and whether you were on a phone or a computer) so we can fix problems and improve the Service.

Support conversations: Questions you ask the help chatbot and its answers, messages you send us through the in-app messenger, and feedback you submit.

2. How We Use Your Information

  • To provide the Service: scanning and identifying cards, building listings and CSV files, listing to and syncing with eBay, tracking credits, and keeping your inventory available on any device.
  • To keep accounts secure and the Service reliable, including detecting misuse and diagnosing errors.
  • To send the emails described in section 5.
  • To answer support requests and to contact you about problems with your account or cards.
  • To understand, in aggregate, how the Service is used so we can improve it.

We do not sell your personal information, and we do not use it for advertising.

3. Where Your Data Is Stored and How It Is Protected

  • Cloud storage: Your account, cards, batches, credits, and settings are stored in our cloud database (Cloudflare D1). That is what lets you sign in from any device and see the same inventory. Your browser keeps a temporary copy of some of this data so pages load faster. Clearing your browser does not delete your account or your cards; just sign in again.
  • Images: Card photos are stored in Cloudflare R2 object storage in the United States.
  • Backups: The database is backed up every night, and our database provider can also restore it to any point within the previous 30 days. Card images are not backed up separately.
  • Passwords: Hashed with PBKDF2-HMAC-SHA256, using a unique random salt for each account and 600,000 rounds. We cannot see or recover your password; if you forget it, you can reset it by email.
  • Sessions: When you sign in, your browser stores a signed session token that is valid for 30 days or until you sign out.
  • Encryption in transit: All connections to our servers use HTTPS/TLS.
  • Service providers: Your data is shared only with the service providers in section 4, and only as needed to run the Service.

4. Third-Party Services

We use the following services, each of which has its own privacy policy:

  • Cloudflare: hosting, our database, image storage, server functions, and cookieless web analytics.
  • Anthropic (Claude API): AI analysis. Your card photos are sent to Anthropic to read the card, and help chatbot questions are sent to generate answers.
  • eBay: listing, sales, orders, messages, and offers, only if you connect your eBay account.
  • Stripe: payment processing for Card Upload purchases.
  • Resend: email delivery.

5. Email Communications

Account emails (always sent, because the Service needs them): email verification, password resets, purchase receipts, and important notices about your account or the Service.

Optional emails (you can turn these off at any time in Settings → General → Email Notifications):

  • Weekly digest: a Sunday summary of your listings and sales.
  • Reminders about your cards: a one-time heads-up if you leave scanned cards unsaved or saved cards unlisted, plus occasional feature announcements, such as when eBay listing becomes available in your country.

When we reply to a message you sent us through the in-app messenger and you are offline, we may also send that reply by email.

6. Your Choices, Data Retention, and Deletion

  • Export: You can download your inventory at any time as an eBay CSV or a spreadsheet CSV (including image links) from Batch History and All Inventory.
  • Correction: You can edit any card, batch, or account setting yourself.
  • Retention: We keep your account data while your account is open. Images of sold cards are deleted automatically about 90 days after the sale.
  • Deletion: To delete your account and the data we hold about you, email [email protected] from the address on your account. We will confirm once it is done. Copies in our backups are removed as those backups expire.
  • eBay access: Disconnecting eBay in Settings removes our ability to act on your eBay account. You can also revoke access from your eBay account settings.

7. Cookies and Analytics

We do not use advertising cookies or cross-site tracking. Your sign-in session and display preferences (such as light or dark theme) are kept in your browser's local storage, not in cookies.

We use Cloudflare Web Analytics to measure aggregate site traffic (such as page views, referrers, and country). It does not use cookies and does not fingerprint visitors.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Users

MyCardBatch is operated from the United States, and your data is stored and processed in the United States. If you use the Service from another country, including Canada, the United Kingdom, the European Union, or Australia, your information will be transferred to and processed in the United States. You may ask us at any time for a copy of your data, or to correct or delete it, using the contact details below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "last updated" date, and for significant changes we will also let you know by email or in the app. Continued use of the Service after changes constitutes acceptance.

11. Contact

Questions or requests? Email us at [email protected], or message us from the help button on any page while signed in.


← Back to MyCardBatch