Privacy Policy
Card-O-Rama · last updated 2026.
Card-O-Rama is for trading card collectors of every age — kids, families, and lifelong hobbyists alike. Whoever's holding the phone, collecting should be fun and safe, so here is exactly what happens with your information, in plain language and kept to a minimum on purpose.
The short version
As little as possible is collected. Your cards, lists, and settings live on your own device, or — if you turn on an account — in your private account so you can see them on your other devices. Your information is never sold, and it's only used to make the app work for you.
What stays on your device or in your account
Your binder, wishlist, trades, settings, and saved card photos are stored on your device. If you create an account to sync across devices, that same information — plus your username, email, and a scrambled (hashed) version of your password — is kept in your private account so you can sign in elsewhere. Passwords are stored scrambled and can't be read back.
What gets sent out to make a card work
- Reading a card: when you scan or describe a card, that photo or text is sent to Google's Gemini AI to identify and price it. It's used to give you a result — not to build a profile of you.
- Looking up prices and news: card values and the morning briefing come from public sources (like eBay, official sports data, and Pokémon card databases). Only the card or search words are sent.
- Email: if you give an email, it's used only to send a welcome message and password-reset codes — nothing else.
Collectors of every age
Card-O-Rama is built to be safe for everyone, including younger collectors and families. It asks for as little personal information as possible, and never asks for a real name, home address, phone number, or location. There are no public posts, comments, or open chat rooms.
There is one place people can talk: trading with friends. You can only add a friend by username and only after both people accept, you can only trade with accepted friends, and messages are private one-to-one notes about a trade — never visible to anyone else and never public. If you'd rather not be contacted at all, Settings → Trade lets you limit who can send you trade requests, and Settings → Privacy & security keeps your binder visible to friends only. Removing a friend ends the ability to message you.
A parent or guardian can review, download, or delete a child's information at any time, directly in Settings.
Your privacy controls
Everything is self-serve in Settings → Privacy & security:
- Who can see your binder — friends only (the default) or any signed-in collector. This is enforced on the server, not just hidden in the app.
- Who can send you trade requests — anyone, friends only, or a list of specific usernames.
- Download my data — a complete copy of your account in one file.
- Sign out everywhere — ends every signed-in session immediately.
Keeping your account safe
Passwords are never stored in readable form — only as a slow, salted hash. Sign-in attempts are rate limited to block guessing, sessions expire when unused, and resetting your password signs out every device.
Ads
If ads are shown, they're family-friendly and served through Google. They are not based on tracking a child's activity across the internet.
What is never done
Your information is never sold or rented, and it's never shared except with the service providers needed to run the app — the AI that reads cards, the price and news sources, and the email and database services that store your account.
Deleting everything
You can delete your account and everything in it instantly from Settings → Delete account. That removes your account, binder, wishlist, settings, friends, offers, and messages from our servers straight away, and it can't be undone. Clearing your browser also removes anything stored on the device. If you'd like a copy first, use Settings → Privacy & security → Download my data.
Questions
Email srivats.j@gmail.com.