Privacy Policy
CardMeet connects collectors, vendors and show promoters. This notice explains how PACK FEVER LLC handles information through the CardMeet website and beta app. Public app downloads are not yet available.
Information you provide
We process account email, sign-in information, display name, optional profile photo, selected interests and account role. We store a self-declared age range, its declaration date and policy version. Professional verification may include a verified phone number, business name, experience, public business links and information you submit for review.
Features you use may store your wishlist, active hunts, attendance choices, vendor applications, inventory, asking prices, sales records, booth information, floor plans, event details, safety reports and support correspondence. We use this information to operate those features, provide support, review professional access and prevent abuse.
What other people can see
Published shows, floor plans, approved vendor booths, selected event inventory and public business links can be visible to other users. Promoters can review applications for their own shows. Your exact wishlist and active hunts are private. Vendors receive anonymous interest bands for eligible collectors at their shows, not a list of those collectors or their complete wishlists. Teen hunts do not contribute to those vendor signals.
Camera, location and notifications
If you choose card scanning, your selected photo is sent for recognition using Google Cloud Vision and relevant card-catalog lookups. CardMeet does not intentionally save scanner photos to its cloud photo storage. An optional profile photo is stored until you replace or delete it or delete your account. You can decline camera and photo permissions.
Adults can choose device location or enter a ZIP code to find nearby shows. You can decline location permission and use the ZIP-code option. Directions open your selected mapping service, which receives the destination. If you enable notifications, we store a device delivery token and send brief alerts through Expo and the Apple or Google push service. You can turn notifications off in your device settings.
Service providers and technical information
Google/Firebase provides authentication, database and file storage, security checks, server processing and card-photo recognition. Expo supports app distribution and notification delivery. The public website uses OpenAI Sites hosting infrastructure. When you search cards or load their artwork, enabled catalog providers receive the request and may receive ordinary connection information, such as your IP address. Providers may include TCGdex, Pokémon TCG API, Scryfall, YGOPRODeck, Lorcast, OPTCG API, Heroi and GCG API, depending on which catalogs are available in your build. We do not send your complete wishlist or inventory to catalog providers.
Authentication, hosting and security providers process technical connection and abuse-prevention information. Website verification uses Google reCAPTCHA where enabled; Google's Privacy Policy and Terms of Service apply. Opening another website, a vendor link or a maps app is subject to that service's policies.
Analytics and advertising
CardMeet uses daily aggregate counters for broad workflow outcomes, workspace roles and failure categories. Our product-metric and operational-diagnostic payloads exclude names, email addresses, account identifiers, searches, card identifiers, wishlist and inventory contents, photos, precise location and free-form error messages. Separate server and provider security logs may contain technical request information. CardMeet does not sell personal information or share it for third-party targeted advertising.
Teen accounts
CardMeet accounts are for people aged 13 or older. Our age-range declaration is not independent age verification. Users declaring ages 13–17 receive a collector-only experience. Their profile, wishlist and attendance are private. Precise-location discovery, vendor and promoter tools, direct messaging and external booth links are unavailable. Private matches to approved booth inventory remain available.
If an age range is incorrect, or you believe a child under 13 has an account, contact cardmeetsupport@gmail.com so we can review it and take appropriate action. Please do not email identity documents unless support has arranged an appropriate verification process.
Retention and account deletion
We retain account and feature records while needed to provide your account and requested features. In-app alerts stop appearing after 30 days; this display period does not mean every underlying operational record is deleted on that date. Security, support and moderation records may be retained where needed to investigate abuse, meet legal obligations or resolve disputes.
You can request deletion in the app under Profile & Roles (Profile & privacy for teens), or use our account-deletion instructions. The process removes your sign-in account, private account records and profile photo, removes associated public vendor information, and cancels and anonymizes shows you organized. Non-identifying event and cancellation information may remain for affected attendees. Anonymous aggregate counters cannot be linked back to an account and are not removed with it.
If a deletion request does not complete, contact support so we can resolve it. If records must be retained for a legal obligation or an active safety investigation, we will explain the applicable exception when responding where permitted. Recovery copies, if used, must be restricted and must not be used to reactivate deleted accounts.
Your choices and contact
You can edit profile details, change device permissions, remove wishlist items and contact us about access, correction or deletion of your information. We may verify account ownership before responding. We never ask for your password or one-time sign-in code.
Privacy contact: cardmeetsupport@gmail.com
Operator: PACK FEVER LLC
We will update this notice when our practices change and provide additional notice where required.