Effective date: April 10, 2026

Kovacards ("Kovacards," "we," "us," or "our") operates a Hawaii-first marketplace for buying and selling trading cards (for example Pokémon, Magic: The Gathering, Lorcana, and related collectibles). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website, mobile applications, and related services (together, the "Services").

If you use our Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

What Kovacards is

The Services let you create an account, list items for sale, browse and purchase items, communicate with other users, arrange shipping or local handoff where available, and use in-app wallet features (such as "Kova-Credits" or similar balance features) when we offer them. Features may change over time; this policy describes categories of data we process in connection with marketplace operations.

Information we collect

We collect information you provide, information generated when you use the Services, and limited technical information from your device or browser.

Account and profile

Email address and credentials you use to sign in (for example through our authentication provider).
Profile details you choose to add, such as display name or seller-related information.

Listings and user content

Listing details, descriptions, pricing, inventory-related information, and photos you upload.
Messages and other content you send through marketplace features (for example buyer–seller communication).

Transactions, shipping, and payouts

Order information, including items purchased, amounts, fees, and transaction status.
Shipping and delivery-related information you provide (such as name, address, and postal or ZIP code) and information needed for optional local handoff or partner-location flows where we offer them.
Payout and tax-related information sellers provide so we can facilitate payments and comply with applicable rules (processed in part through our payment partners).

Payments

Payments are processed by third-party payment processors (we use Stripe for card payments and related payment flows). Payment card details are collected directly by the payment processor; we do not store full payment card numbers on Kovacards servers. We may receive limited payment-related information from our payment processors (for example last four digits, brand, charge status, and identifiers needed to link transactions to your account).

Photos, camera, and device permissions

Our mobile apps may request access to your camera and photo library so you can photograph or select images for listings. We use those images only as part of the Services you initiate. Some Android builds may declare microphone-related permissions required by system components for media capture; we do not use your microphone to record audio for unrelated purposes.

Technical and operational data

Device and app information such as device type, operating system version, app version, and diagnostic identifiers needed to operate the Services.
Server logs and security-related information (for example IP address, timestamps, and error logs) to protect accounts, prevent fraud and abuse, and keep the Services reliable.

We do not use third-party advertising or cross-app tracking SDKs in the Services for the purpose of selling your personal information or serving interest-based ads across other companies' apps and websites. If that changes, we will update this policy and, where required, obtain consent (including any consent required by Apple's App Tracking Transparency rules on iOS).

How we use information

Provide, operate, maintain, and improve the Services.
Create and manage accounts, authenticate users, and secure sessions.
Facilitate purchases, sales, payouts, refunds, and dispute handling consistent with our policies.
Communicate with you about transactions, security alerts, support requests, and service notices.
Detect, investigate, and prevent fraud, abuse, and violations of our terms and policies.
Comply with law, respond to lawful requests, and enforce our agreements.

How we share information

We share personal information only as described in this policy or with your direction. We do not sell your personal information. We may share information with:

Service providers who help us run the Services, including hosting, database and authentication (for example Supabase), payment processing (Stripe), email delivery, and operational infrastructure (for example Vercel for our web application). These providers may only use information to perform services for us and are bound by appropriate confidentiality and security obligations.
Other users when needed to complete a transaction (for example sharing shipping details with a seller, or sharing listing information with prospective buyers).
Legal and safety when we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of Kovacards, our users, or the public.
Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

Cookies and similar technologies

Our website may use cookies and similar technologies that are necessary to operate the site, keep you signed in, remember preferences, and protect against abuse. You can control cookies through your browser settings; disabling certain cookies may limit parts of the Services.

Data retention

We retain information for as long as needed to provide the Services, complete transactions, resolve disputes, enforce agreements, meet legal, tax, and accounting requirements, and operate legitimate business needs such as fraud prevention. Retention periods vary depending on the type of information and context.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, and to object to or restrict certain processing. You may also have the right to appeal certain decisions. To exercise these rights, contact us using the information below. We may need to verify your request before responding.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, may provide you with additional rights, including the right to know what personal information we collect, the right to delete personal information subject to exceptions, and the right to opt out of "sale" or certain "sharing" of personal information. Kovacards does not sell personal information as that term is commonly understood, and we do not "sell" personal information of minors under 16. You may designate an authorized agent to make a request on your behalf where permitted by law.

Users in the European Economic Area, UK, and Switzerland

If applicable law provides you rights under the GDPR or similar laws, we will honor those rights where required. Our lawful bases may include performance of a contract, legitimate interests (for example security and fraud prevention), compliance with legal obligations, and consent where required.

International transfers

We operate in the United States and may process and store information in the United States and other countries where we or our service providers operate. Those countries may have different data protection rules than your country. Where required, we use appropriate safeguards for cross-border transfers.

Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us and we will take appropriate steps to delete it.

Apple App Store

If you download Kovacards from Apple's App Store, Apple may collect certain usage and device information in accordance with Apple's privacy practices. Apple is not responsible for our privacy practices. For Apple-specific controls (for example permissions and privacy settings on your device), refer to Apple's support documentation.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date above. If changes are material, we will provide additional notice as appropriate (for example, a notice in the app or by email).

Contact us

Questions about this Privacy Policy or privacy requests: alex@kovacards.com