Privacy Policy

Who we are

zip.cards is a pre-launch product for identifying and managing trading card collections. The data controller is the operator of zip.cards; reach us any time at hello@zip.cards.

What we collect when you join the waitlist

• Your email address.
• Optionally, what you collect (sports / TCG / both) — used only to send you relevant launch news.
• Basic abuse signals: a salted, one-way hash of your IP address (we never store the raw IP), your browser's user-agent string, and a traffic-source tag (e.g. a UTM parameter).
• Anonymous, aggregate page events (e.g. “a signup happened”, “a share link was copied”) with country code — no cookies, no cross-site tracking, no profiles.

What we use it for

• Telling you when your early-access spot opens up.
• Occasional launch updates (you can unsubscribe from every email).
• Ordering the waitlist by signup time.
• Keeping bots and abuse off the list.

We don't sell your data, share it with advertisers, or use it for anything unrelated to launching zip.cards.

Who processes it

The site runs entirely on Cloudflare (hosting, database, bot protection via Turnstile, and aggregate analytics). When we begin sending email, a transactional email provider will process your address for delivery — this policy will be updated to name it.

Retention & deletion

We keep waitlist data until launch onboarding completes or you ask us to remove it — whichever comes first. Email hello@zip.cardsfrom the address you signed up with and we'll delete your record, usually within a few days.

Age

The waitlist is intended for people 16 and older. If you believe a younger person has signed up, contact us and we'll remove the entry.

Changes

If this policy changes in a way that matters (like naming an email provider), we'll update this page and note the date above.