This is a plain-language draft, not final legal text. A reviewed privacy policy will replace it before public launch. Questions? Email hello@cardrelay.app.
Collectors use CardRelay through an anonymous session — a nickname and, optionally, the details of the cards you’re looking for. We do not require an email or phone number to join a show.
Vendors see the card requests sent to a show they participate in — never your contact information. Organizers see aggregate, anonymized demand for their own show, not individual collectors’ personal data.
Aggregate demand and missed-opportunity trends are internal, per-show reporting. They are never published, never sold, and never shared between shows.
Vendors and organizers sign in with an email and password (Supabase Auth). We store your email to operate your account and verify it before granting access.
If you fill in an interest or contact form, we keep what you submit so we can reply. We don’t add you to marketing lists.
We enforce row-level security, session expiration and revocation, rate limiting, and audit logging throughout the platform.