Privacy Policy

Last updated: 19 May 2026

This Privacy Policy describes how Cardboard Deals (“we”, “us”, “our”) collects, uses, and protects information when you visit cardboarddeals.com. We're committed to transparency and to your rights under UK data-protection law, including the UK GDPR and the Data Protection Act 2018.

Data controller. Cardboard Deals is the data controller for personal data collected through this site. For any data-protection enquiry, or to exercise any of the rights set out below, contact hello@cardboarddeals.com.

What we collect today

Cardboard Deals is currently a coming-soon landing page. We do not require you to sign up, and we do not collect personal information from page visitors beyond:

• Server logs. Your IP address, browser type, pages visited, and request timestamps are recorded by our hosting provider for security and operational purposes. These logs are retained for up to 30 days.
• Communications. If you email us, we keep your message and email address for as long as is reasonably needed to respond and to keep a record of the exchange.

What we will collect when the service launches

Once user accounts are available, we plan to collect:

• Account information you provide — email address, display name, password hash, and any OAuth provider data if you sign in with Google, Apple, or Discord
• Collection and wishlist data you choose to record
• Click history on affiliate links, used to attribute purchases for commission reconciliation
• Notification preferences and any optional channels you opt into (email, web push, Discord webhook)

Full details and a granular consent flow will be in place before account signups open. This page will be updated when that happens.

Cookies and tracking

This landing page does not set tracking cookies. When the full service launches, we expect to use:

• Strictly necessary cookies (session, CSRF) — required for the service to function
• Affiliate-tracking parameters in outbound links to marketplaces, so commissions can be attributed
• Optional analytics, if implemented, will require your explicit consent via a cookie banner

Affiliate links and the eBay Partner Network

Cardboard Deals participates in the eBay Partner Network and may add other affiliate programmes over time. When you click an affiliate link from our site and complete a qualifying purchase, we may earn a commission at no additional cost to you. Clicks are attributed via a custom tracking parameter on outbound URLs, which is processed by eBay for purchase reconciliation. We do not share personal data with eBay beyond the standard browser-side referrer and that tracking parameter.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct any data that is inaccurate or incomplete
• Request deletion of your data
• Restrict or object to its processing
• Receive a portable copy of your data in a structured format

To exercise any of these rights, email hello@cardboarddeals.com with the subject line “Data request”.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Data security

We take reasonable technical and organisational measures to protect data — including TLS-encrypted transit, encrypted database backups, and access controls. No system is perfectly secure; in the unlikely event of a breach affecting personal data, we will notify affected users and the ICO within 72 hours as required by law.

Third parties

We use the following third parties whose own privacy policies apply:

• Cloudflare — hosting and DNS
• eBay — affiliate programme and marketplace API
• Scryfall — Magic: The Gathering card catalogue

Additional third parties will be added as the service grows; this list will be kept current.

Children

Cardboard Deals is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy as the service evolves. Material changes will be communicated via the site and, where appropriate, by email to registered users. The “last updated” date at the top of this page tracks revisions.

Contact

Privacy questions: hello@cardboarddeals.com