Who we are
VLTDCRDS is run by VLTDCRDS in the UK. We are the "controller" of your personal data under the UK GDPR and the Data Protection Act 2018. You can contact us about anything on this page at hello@vltdcrds.com.
What we store
| Data | Why |
|---|---|
| Your email address, name, and password (stored encrypted, never visible to us) | To create your account and sign you in |
| If you use Google: your name, email and profile picture from Google | To sign you in with Google |
| Your cards, and anything you enter: price paid, date bought, condition, quantity, notes, PSA cert numbers | To run your vault, binder and profit and loss |
| Your watchlist, price targets and alerts | To track cards and send you alerts |
| Your username and sharing settings | To show your public vault, if you switch it on |
| Basic technical logs (such as IP address and request times) | To keep the service secure, stop abuse and fix problems |
We don't sell your data, show you third-party ads, or use advertising trackers.
Our legal basis
- Contract: to provide the account and features you sign up for.
- Legitimate interests: to keep the service secure, prevent abuse and improve it.
- Consent: for your public vault page, which is off until you switch it on, and which you can switch off at any time.
Your public vault
Your vault is private by default. If you switch on sharing in Settings, anyone with your link can see your username, your cards and (if you choose) their values. What you paid, your notes and your email are never shown. Switch sharing off and the page disappears straight away.
Who helps us run it
We use a few trusted services to run VLTDCRDS. They only process data on our instructions:
- Supabase: our database and sign-in. Data is stored in London (UK).
- Google: only if you choose "Continue with Google".
- Our hosting provider: serves the website. It may process technical data such as IP addresses.
When we look up prices, we send card names and numbers to our price sources (see credits). We never send them your personal details.
If you click an eBay link, you leave VLTDCRDS, and eBay's own privacy policy and cookies apply. These links include an affiliate tag so eBay can credit us with the referral. They don't share your VLTDCRDS account details with eBay.
Cookies
We only use essential cookies. They keep you signed in and keep your session secure. Because they're strictly necessary, we don't need to ask for consent, and you won't see a cookie banner.
We don't use analytics, advertising or tracking cookies. If that ever changes, we'll ask for your permission first and update this page.
How long we keep it
We keep your data while you have an account. When you delete your account, your cards, watchlist, alerts and profile are deleted straight away, and your sign-in details are removed. Backups are overwritten within about 30 days. Anonymous market prices (not linked to you) are kept to build price history.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data
- correct anything that's wrong
- delete your data (you can also delete your account yourself in Settings)
- restrict or object to how we use it
- send your data to another service
Email hello@vltdcrds.com and we'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
VLTDCRDS is for people aged 13 and over. If you're under 18, please check with a parent or guardian before signing up.
Changes
If we change how we use your data, we'll update this page and the date at the top. If a change is significant, we'll tell you by email or in the app.
Questions? Email hello@vltdcrds.com.