Privacy Policy
Draft updated 2026-10-18 · Not yet in effect
1. Operator
CardPorter is operated by 株式会社A. Representative Director: 深澤雄太. Address: 7F N&E.BLD, 1-12-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan. This policy covers information handled through browsing, registration, listings and purchase requests. Privacy inquiries: +81-90-8210-7377. Email: [email protected].
2. Information we collect
We collect account and authentication information, any registered email address, listing details and photos, certificate numbers, approval records, orders, transaction messages and inquiry details. This may include contact or delivery details you provide. Our infrastructure also processes IP addresses and browser/access information. Passwords are stored as hashes, not plain text.
3. How we use information
We use information to authenticate users, approve listing access, publish and manage products, handle purchase requests and transactions, respond to inquiries, prevent misuse, investigate disputes and failures, and meet legal obligations. Any use beyond this scope will follow applicable law.
4. Public information and sharing
Listings, photos, certificate numbers and listing-manager usernames are public. Order details and messages are accessible only to the buyer, relevant sales manager and authorized administrators. Do not include unnecessary personal information in public listings. We do not sell personal information. Other third-party disclosures require consent or another basis permitted by law.
5. Service providers and external images
We use Google Cloud for hosting and Cloudflare for delivery and security, and oversee providers as required for the handling entrusted to them. Loading external card images sends access information to their providers. External services and linked sites have their own privacy policies. Provider arrangements and any required overseas-transfer disclosures remain subject to confirmation before formal adoption.
6. Cookies and photo search
A login cookie lasts up to seven days and is revoked on sign-out. Language and currency preferences stay in browser storage until cleared; a currency cookie is also shared across the shop and admin sites for up to one year. You can clear these in browser settings. Photo text recognition runs in your browser, but extracted search terms are sent to CardPorter for card searches. Photos are uploaded when a listing is published.
7. Security and retention
We protect information through encrypted communication, access restrictions and hashed passwords. Records and backups are retained as needed for transactions, inquiries and legal obligations. Withdrawing a listing does not delete its photos. A fixed retention schedule and backup-deletion process are still being finalized; deletion requests are reviewed individually.
8. Your requests and policy changes
You may request access, correction, deletion, suspension of use or third-party disclosure, and access to disclosure records, as provided by law. We verify identity and explain any legal reason a request cannot be fulfilled. For requests, email [email protected] or call +81-90-8210-7377. Material policy changes will be announced, and consent obtained where required.