Privacy Policy

Information we collect

When you create or use a member account, CardViper may collect your email address, password hash, assigned or chosen username, account status, saved players, teams, prospects, Pokémon, searches, pages, lists, folders, Viper Points activity, reward selections, feedback, and other information you choose to submit.

We may also process IP addresses, browser and device information, timestamps, session identifiers, login and registration attempts, click activity, and basic analytics for security, fraud prevention, performance, and site administration.

How we use information

We use information to create and secure accounts, provide saved member features, personalize dashboards, operate Viper Points and rewards, send account and password-reset messages, respond to requests, prevent abuse, diagnose errors, measure site usage, and improve CardViper.

Public and private information

Your email address and password are not displayed publicly. Your collector username, public lists, list descriptions, leaderboard activity, shared creations, and information you deliberately publish may be visible to other people and indexed or reshared. Review a list before making it public.

Cookies and sessions

CardViper uses cookies and similar local-storage technologies for authentication, security, preferences, saved state, analytics, and essential site operation. Blocking essential cookies may prevent member features from working.

Service providers and third parties

We may use hosting, email, analytics, security, AI, marketplace, and affiliate service providers that process limited information to perform services for CardViper. Marketplace and affiliate links, including eBay and other external services, are governed by those companies’ policies. CardViper may earn a commission from qualifying activity.

We do not sell or rent member email addresses or account information. We may disclose information when reasonably necessary to comply with law, protect users or the service, investigate abuse, or complete a business transfer.

AI-assisted features

Some CardViper features may use third-party AI services to generate, classify, summarize, or improve content. Do not submit confidential or sensitive personal information to AI-assisted fields. AI output may be inaccurate and may be reviewed, corrected, or removed.

Data security

We use reasonable administrative and technical safeguards, including password hashing, access controls, CSRF protection, and rate limiting. No website, database, transmission, or storage system can be guaranteed completely secure. You are responsible for protecting your password and notifying us of suspected unauthorized access.

Retention and deletion

We retain account information while an account is active and as reasonably necessary for security, fraud prevention, legal compliance, backups, dispute resolution, and operation of the service. You may request account access, correction, or deletion through the contact page. Some security logs, anonymized records, backups, or records required by law may remain for a limited period.

Children

CardViper membership is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account or submitted personal information, contact us so we can investigate and delete it where appropriate.

Policy changes and contact

We may update this policy as CardViper changes. Material changes will be posted on this page and may also be presented to members. Questions or privacy requests can be submitted through the CardViper contact page.