Diamond Cardboard, LLC (“Diamond Cardboard,” “we,” “us”) runs this website to sell sports cards. This policy explains what information we collect when you browse, create an account or buy from us, how we use it, and the choices you have. We keep it short because we collect only what we need to sell you cards and get them to you.
◆Information we collect
When you place an order: your name, email address, shipping address, the cards you bought, and the order totals. Payment is handled by PayPal. We never see or store your card number. PayPal tells us that the payment went through, along with a transaction ID and the email address on your PayPal account.
When you create an account: your name, email address and a password. Your password is stored only in scrambled (hashed) form by our login provider; we can't read it. If you use Continue with Google instead, Google sends us your name, email address and a link to your Google profile picture. We use only your name and email address, and we never see your Google password.
When you message us (the Contact page, “Ask a question” on a card, or your invoice): your name, email address, your messages and our replies, and the card or order it's about. We keep the conversation on our site so you can read it and write back, through your account or a private link we send you that only someone with the link can open.
When you sign up for emails: your email address, and when and where you signed up.
When you browse: the pages and cards you look at on our site, and how you got here (the website that sent you, or the link you clicked in one of our posts or emails). We keep this with a random visitor ID saved in your browser. If you sign in, check out, sign up for emails or send us a message, we connect that browsing to you, including what you looked at before.
Automatically: like most websites, our hosting provider records basic technical information (such as your IP address and browser type) to keep the site running and secure.
◆Cookies and browser storage
- Your cart is saved in your own browser so it's still there if you close the page. It never leaves your device until you check out.
- Sign-in cookies keep you signed in to your account.
- A visitor ID (a random number in your browser's storage) lets us see which pages and cards were viewed from your browser. Clearing this site's data in your browser gives you a new, blank ID. If your browser sends a Global Privacy Control signal, we don't record your browsing at all.
- PayPal sets its own cookies when you pay, under PayPal's privacy statement.
We don't use advertising cookies, and we don't track you across other websites.
◆How we use your information
- To process your order, ship it, and send you your order confirmation and tracking.
- To show your order history, invoices and tracking in your account.
- To answer your questions and handle returns or problems with an order.
- To see which cards our customers are interested in, so we can stock and price the shop better.
- To prevent fraud and keep the site secure.
- To keep the business and tax records the law requires.
We send emails about new cards only if you ask for them: with the “Email me when new cards arrive” box when you create an account or check out, the “also email me” box on a coming-soon card, or the Subscribe box on our site. If you subscribe, we may use what you've bought and looked at to tell you about cards you might like. Every one of these emails has an unsubscribe link, and account holders can also turn them off in My Account.
◆Who we share it with
We don't sell or rent your personal information. We share it only with the companies that help us run the store, and only what each one needs:
- PayPal: payments, and shipping labels with your name and address.
- Supabase: our database and account sign-in.
- Google: only if you use Continue with Google, to confirm who you are when you sign in.
- Netlify: website hosting.
- Resend and Zoho: sending and receiving email.
- USPS and other carriers: delivering your package.
We may also share information if the law requires it, or to protect our rights or prevent fraud. If you buy from us on eBay, eBay's own privacy notice covers that purchase, and we receive only the details eBay provides to sellers to fulfill your order.
◆How long we keep it
We keep order records for as long as we need them for tax and accounting, generally seven years. Account information stays until you ask us to delete your account. Browsing records are deleted after 13 months. Messages are kept as long as needed to help you; ask and we'll delete a conversation.
◆Your choices and rights
- See or update your information: sign in to My Account or email us.
- Delete your account: use Delete my account at the bottom of My Account, or email us and we'll delete it. Order records the law requires us to keep stay, with your name, email and address removed. If we've blocked an account because of fraud or abuse, we keep the details needed to enforce that block after a deletion request.
- Stop new-card emails: use the unsubscribe link in any of them, or the switch in My Account.
- Get a copy of the personal information we hold about you, including your browsing records, or ask us to delete it: email us.
Depending on where you live, you may have additional rights under your state's privacy laws. Contact us and we'll honor them. We won't treat you differently for using them.
◆Security
- Encrypted connection. Every page of our site uses https.
- We never see your card number. All payments go through PayPal, whether you pay with your PayPal account or a debit/credit card.
- Your orders are private. Only you can see your orders and invoices in your account. A guest invoice opens only with the private link we send you.
- You're never charged for a card that's gone. We check that every card is still available right before you pay. If one just sold, you aren't charged for it.
- Prices are set by us, not your browser. Prices, discounts and tax are worked out on our server, so they can't be changed along the way.
- Limited access. Only the people who run the store can see order information.
No system is perfectly secure, but we take reasonable steps to protect your information. If you notice anything that looks wrong, email us at info@DiamondCardboard.com.
◆Children
This site isn't directed to children under 13, and we don't knowingly collect their information. You must be 18 or older, or have a parent or guardian's permission, to buy from us.
◆Changes to this policy
If we change this policy, we'll post the new version here with a new “last updated” date. For significant changes, we'll let account holders know by email.
◆Contact us
Diamond Cardboard, LLC · PO Box 380 · State College, PA 16804
info@DiamondCardboard.com · (724) 840-1449