Privacy Policy

We collect only the information needed to provide the Services:

• Account information. When you create an account, our authentication provider collects your email address and, if you provide them, your name and sign-in details. We receive a unique account identifier and the display name associated with your account.
• Collection information. The cards you add to your collection or wishlist, along with any quantities, conditions, prices paid, sale prices, dates, notes, or tags you choose to record.
• Technical information. Like most websites, our hosting provider records basic technical data when you visit, such as your IP address, browser type, pages requested, and the time of each request. We use this information to operate, secure, and troubleshoot the Services.

You can browse the card catalog without an account. We do not collect payment information, precise location, contacts, or information from social media accounts.

We use the information we collect to:

• Provide, maintain, and improve the Services, including your collection and wishlist.
• Authenticate you and keep your account secure.
• Respond to your questions and requests.
• Detect, investigate, and prevent abuse, security incidents, and violations of our Terms of Use.
• Create aggregated, de-identified information, as described in section 4.
• Comply with legal obligations.

We do not sell your personal information, share it for targeted advertising, or use it to build advertising profiles. We do not currently use third-party analytics or advertising tools.

Card and set pages in the catalog are public. Your collection, wishlist, prices paid, sale prices, notes, and tags are private to your account, and we never show them to anyone else in a way that identifies you. Cardulate does not offer public profiles.

When you share a link to a card, the link and its preview show only public catalog information, such as the card’s name, set, number, rarity, and a dated market price. Shared links never reveal your collection, your wishlist, or who shared them.

We share personal information only with service providers that help us operate the Services, and only as needed for them to perform that work on our behalf:

• Clerk, for account sign-in and management.
• Neon, for database hosting.
• Vercel, for website hosting and delivery.
• Cloudflare, for storing and delivering card images.

We may also disclose information if required by law, to protect the rights, property, or safety of Benchmarke, our users, or others, or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

Card catalog and price information comes from third-party data sources. We do not send your personal information or collection data to those sources.

Aggregated, de-identified information. We may combine information about the cards and transactions that users record, such as card, finish, condition, price paid, sale price, and date, with the same information from other users, and remove anything that identifies you, such as your name, email address, account identifier, and notes. We may use the resulting aggregated, de-identified information for any lawful purpose, including to show market prices and trends in the Services, to improve the Services, and to publish, share, sell, or license it to third parties, for example through a data product or API. Aggregated, de-identified information is not personal information. We will not attempt to re-identify it, and we will require anyone who receives it from us not to attempt to re-identify it either.

We use cookies that are strictly necessary to keep you signed in and to secure your session. We also store your theme preference in your browser. We do not use advertising or cross-site tracking cookies.

We keep your account and collection information for as long as your account is active. If you delete your account or ask us to delete your information, we will delete or de-identify it within a reasonable time, except where we must keep certain records to comply with law, resolve disputes, or enforce our agreements. Aggregated, de-identified information created before your request may be kept, because it no longer identifies you. Technical logs are kept by our hosting provider for a limited period.

We use industry-standard safeguards to protect your information, including encrypted connections, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate.
• Delete your account and the personal information associated with it.
• Receive a copy of your collection data in a portable format.

You can edit or remove cards from your collection and wishlist at any time, and manage your sign-in details from the account menu. To exercise any other right, email us at support@benchmarke.io. We may need to verify your identity before completing a request. We will not discriminate against you for exercising your rights.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, please contact us and we will delete it.

Benchmarke is based in the United States, and our service providers may process information in the United States and other countries. By using the Services, you understand that your information may be processed outside your country of residence.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and if the changes are significant, we will provide additional notice within the Services. Your continued use of the Services after an update means you accept the revised policy.

If you have questions about this Privacy Policy or our privacy practices, contact Benchmarke LLC at support@benchmarke.io.