Privacy Policy

This Privacy Policy explains how Cardrine (“Cardrine”, “we”, “us”) collects, uses, and shares information about you when you use our website, our waitlist, and our gift card trading services, including early-access experiences (collectively, the “Service”).

We aim to collect only the information needed to operate the Service and to keep trades on the platform safe and verifiable.

We may collect the following categories of information:

• Account information. Email address, name, password credentials, authentication factors, and waitlist preferences when you sign up or request access.
• Trade information. Gift card brand, denomination, card details submitted for verification, trade selections, and order history.
• Payout information. Limited details required to send a payout to you, depending on the payout method available in your region.
• Device and usage data. Browser type, device identifiers, IP address, and pages visited, used to operate and secure the Service.
• Communications. Support requests, feedback, and messages you send to us.

We use information to:

• Provide, operate, and improve the Service.
• Verify gift card submissions and review trades for accuracy and risk.
• Detect, investigate, and prevent fraud, abuse, and policy violations.
• Communicate with you about your account, trades, payouts, and product updates.
• Meet legal, regulatory, accounting, or reporting obligations that apply to us.

We do not sell personal information. We share information only in the following limited situations:

• Service providers. Vendors that help us operate the Service, such as hosting, analytics, email delivery, fraud prevention, and payout processing, under appropriate contractual protections.
• Legal and safety. When required by law, valid legal process, or to protect the rights, property, or safety of Cardrine, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, with notice where required.

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the reason it was collected.

Cardrine is designed to support encryption in transit and at rest, two-factor authentication, and device and session controls. We use modern, well-tested security practices to protect account and trade data.

No system can be guaranteed fully secure. You can help by enabling 2FA, using a strong unique password, and reviewing active sessions in your account.

Depending on your location, you may have the right to:

• Access, correct, or delete personal information we hold.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@cardrine.com.

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; some features of the Service may not work without them.

Information we collect may be processed in countries other than the one in which you are located. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses.

Cardrine is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate.

Questions about this policy? Email privacy@cardrine.com.