Privacy Policy
Last updated May 31, 2026
CardStonks ("we", "us") is a service operated by CMO Associates LLC, a limited liability company based in the United States. This policy explains, in plain English, what we collect and what we do with it.
What we collect
- Your email address and authentication identifiers (so you can sign in).
- Photos of cards you upload to identify or value.
- The cards, decks, and collection data you save.
- Scan history and quota usage.
- A Stripe customer ID if you subscribe. We never see or store your card number — Stripe handles all payment details.
How we use it
- Run the app and identify the cards you scan.
- Sync and display your collection across devices.
- Process subscription payments and apply your quota.
- Diagnose bugs and improve the service.
Third parties we share data with
- Lovable Cloud — hosting and database.
- Stripe — payments and subscriptions.
- Google — if you use Google Sign-In.
- Google Analytics — anonymous usage analytics (pageviews and product events) so we can improve the app.
- AI providers — uploaded card photos are sent to AI vision models to identify the card.
- Card data sources — Scryfall, pokemontcg.io, YGOPRODeck, and optcgapi.com supply card metadata and prices.
We do not sell your personal data to anyone.
Cookies and storage
We don't use tracking or advertising cookies. Your sign-in session is stored in your browser's local storage so you stay logged in.
Your rights
You can request a copy of your data or ask us to delete your account at any time by emailing the address below.
Children
CardStonks isn't intended for users under 13. If you believe a child has created an account, email us and we'll remove it.
Contact
Questions or requests: admin@cardstonks.app