Privacy policy

Last updated October 16, 2026

Card Radar is run by Ready Development, Toronto ("we", "us"). This policy explains what personal information we collect, why, who we share it with, and the choices you have. We follow Canada's privacy law (PIPEDA). In short: we collect as little as we can, we don't sell it, and there are no ads or tracking.

Who to contact

The person responsible for privacy at Card Radar is the owner of Ready Development. For any question or request about your information, email support@cardradar.ca.

What we collect

• Your account: your email address, the display name you choose (optional), and your password, stored only in scrambled (hashed) form. We never see it.
• What you save: your decks, watchlists, price alerts, collections and email settings.
• Premium: payments are handled by Stripe. We keep the Stripe customer and subscription IDs and your plan's status (monthly or yearly, renewal date). Your card number goes straight to Stripe; we never see or store it.
• Messages you send us: a "wrong match" report you file on a card page (linked to your account if you're signed in), a store's "get listed" request (the name, email and store details entered), and anything you email us.
• Technical information: your IP address is used briefly to stop abuse (for example, limiting sign-up, sign-in and password-reset attempts) and is kept for at most a day for that purpose. Our servers also keep standard access and error logs for a short time.
• Searches: we count how often each search term is used, to show "Popular searches". These counts don't record who searched.

Cookies and storage in your browser

We use a sign-in cookie (so you stay signed in) and a security cookie (which protects forms from forgery), and your browser remembers your light or dark theme and your recent searches. That's all: no advertising cookies, no analytics or tracking cookies, and no third-party trackers. Stripe sets its own cookies on its checkout and billing pages to process payments and prevent fraud.

How we use it

• To run your account and the features you use: pricing decks, watchlists, collections and alerts.
• To send the emails you need or ask for: confirming your email address, password resets, and (on Premium) price alerts and the watchlist digest. Stripe sends payment receipts. You can turn off alerts and digests at any time from the link in each email or in your account settings.
• To take payment for Premium and keep the records the law requires.
• To keep Card Radar secure and working, and to answer you when you contact us.

We don't sell or rent your information, we don't show ads, and we don't use your information for anything you wouldn't expect from the list above.

Who we share it with

Only with the service providers that help run Card Radar, and only what each one needs:

• Stripe: payments and subscriptions.
• Resend: delivering our emails.
• Our hosting provider: the servers Card Radar and its database run on.

Stripe and Resend may store and process information in the United States and other countries, where it may be accessible to authorities under those countries' laws. We may also disclose information if the law requires it.

Card Radar links to stores' websites. When you follow a link to buy a card, what you do there is covered by that store's own privacy policy.

How long we keep it

• Your account and everything you've saved are kept until you delete your account.
• When you delete your account, it is removed from Card Radar straight away. Copies in our backups are overwritten within 30 days.
• An account whose email address was never confirmed and has nothing saved is deleted automatically after 30 days.
• Payment records are kept by Stripe, and by us as the tax laws require, even after an account is deleted.

Your choices and rights

• See or correct your information: most of it is on your account page. For a copy of everything we hold about you, email us.
• Delete your account: use "Delete account" on your account page, or email us.
• Stop emails: use the link at the bottom of any alert or digest, or your account settings.
• Complain: if you're not happy with how we've handled your information, email us first and we'll try to put it right. You can also contact the Office of the Privacy Commissioner of Canada.

We answer requests within 30 days.

Security

Card Radar is served only over encrypted connections (HTTPS), passwords are hashed, payment details stay with Stripe, and access to our servers and database is restricted. No system is perfectly secure; if a breach ever put your information at real risk, we would tell you and the Privacy Commissioner as the law requires.

Children

Card Radar isn't meant for children under 13, and we don't knowingly collect their information. Anyone under the age of majority needs a parent's or guardian's permission to buy Premium.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell signed-up users by email before it takes effect.