Privacy Policy

Working document — reviewed for EU consumer and data-protection law patterns, but have counsel confirm before relying on it in a dispute.

Controller

The company named in the footer is the data controller. Privacy requests: [email protected].

What we collect, why, and on which legal basis

Account data (name, email, date of birth, language, chosen handle) — to run your account and verify you are 18+ · contract & legal obligation.
Transaction records (top-ups, refunds, pack openings with their draw certificates, sell-backs, trades, coupons) — to perform the service, prove the draws were fair and meet bookkeeping law · contract & legal obligation.
Shipping addresses — only when you request delivery, shared with the carrier for that parcel · contract.
Identity documents — only when the law requires an identity check, stored on a private disk, never public · legal obligation.
Technical logs (IP, user agent, security events) — abuse prevention and fairness audits, kept max 12 months · legitimate interest.
Analytics — only after you accept the cookie banner; IP-anonymised · consent, withdrawable any time.

The public verification log

So that our records of who owns what cannot be quietly rewritten, we keep a public, append-only log of what happens to each card: it was drawn from a pack, sold back, traded, shipped. Each entry carries the fingerprint of the one before it, so an entry cannot be changed or back-dated without breaking every entry after it. Entries identify you only by your public handle — never your name, email or address — and they cannot be edited or deleted, which is the entire point of them. Choose a handle accordingly; you can change it, and past entries keep the handle that was current when they were written.

Processors and recipients

Stripe (payments), Sendcloud and the carriers it books (shipping), our card-sourcing partners (only the card, never your identity), our hosting provider, and Cloudflare (CDN/security). Each receives only what its service needs, under data-processing agreements. Transfers outside the EEA (e.g. Stripe, Cloudflare) rely on EU Standard Contractual Clauses. We never sell personal data.

Retention

Account data: life of the account. Transaction and bookkeeping records: 7 years (Dutch fiscal law). Draw certificates: kept for as long as the card exists, so a result stays checkable. Technical logs: max 12 months. Identity documents: as the law prescribes.

Your rights

Access, correction, export (your GDPR export is available on request as a machine-readable file), restriction, objection and erasure. Erasure anonymizes everything not under legal retention; entries in the public verification log and 7-year bookkeeping data remain, detached from your identity. We answer within 30 days. You may complain to your supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.

Marketing email

If you opt in, we send campaign email about new packs, events and your collection. The legal basis is your consent, and every message carries a one-click unsubscribe — withdrawing costs you nothing else and changes nothing about your account. Transactional mail (receipts, shipping, security, refunds) is not marketing and is sent on the basis of our contract with you; it cannot be switched off while the account is open.

Community chat and public activity

The community chat is public inside the shop. Your handle, your messages, and the pack buys and pulls posted under your handle are visible to every signed-in collector — choose a handle accordingly. Moderation actions (hiding a message, a ban and its reason) are kept as long as the account exists so decisions can be reviewed. You can ask us to remove your messages; the underlying transaction records stay, because they are bookkeeping.

Automated decisions

Some limits are applied automatically: deposit caps and the 24-hour delay on raising one, per-week pack caps, the option to close your account for good, and automated fraud and abuse checks that can pause a refund or an account pending review. These protect you and the shop, they never profile you for advertising, and none of them is a final decision made purely by machine — a human reviews any suspension or refused refund, and you can contest it by replying to support.

AI processing

We use Anthropic’s Claude to draft blog articles and translate site and campaign copy. It receives shop content — pack names, card names, prices, the text being translated — and no customer personal data; it is not used to make any decision about you, and it never sees your account, balance or purchases.

Cookies

Strictly necessary cookies (session, security) always run. Analytics loads only after opt-in and can be declined or withdrawn with no loss of function.