Privacy Policy
Last updated: July 2026
This policy explains what data banlisto ("we", "us") collects and how we use it when you use banlisto.com (the "Service").
1. Data we collect
- Account data: when you sign in with Google, we receive your email address, a Google account identifier, and your name.
- Collection data: the cards, quantities, prices paid, wishlist, and profile details (handle, display name, bio) you add.
- Payment data: handled entirely by our payment provider, Polar. We never receive or store your full card number; we store only a customer identifier and subscription status.
- Technical data: basic request logs and a language preference, used to run and secure the Service.
2. How we use your data
To provide the Service: to run your collection and portfolio, calculate value over time, send price-alert and account emails you have set up, process your subscription, and keep the Service secure. We do not sell your personal data.
3. Public profile
If you enable a public profile, the display name, bio, and collection you choose to show become visible to anyone with the link and may be indexed by search engines. You can make it private again at any time in Settings.
4. Who we share data with
We use trusted processors to run the Service: Google (sign-in), Polar (payments), Resend (transactional email), Cloudflare (hosting and database), and Google Analytics (privacy-friendly, aggregate usage analytics with IP anonymization). These parties process data only to provide their function. We do not sell data or use it for third-party advertising.
5. Cookies
We use essential cookies (a signed session cookie to keep you logged in, a language cookie, and a view-preference cookie) and privacy-friendly Google Analytics cookies to measure aggregate usage with IP anonymization. We do not use third-party advertising cookies, and you can block analytics at any time with your browser settings or a content blocker.
6. Data retention
We keep your data while your account is active. If you delete your account, we remove your personal and collection data, except records we must keep for legal or accounting reasons (e.g. payment records).
7. Your rights
You can access, correct, export, or delete your data. To exercise these rights, contact us at support@banlisto.com. Depending on your location (e.g. the EU/EEA), you may also have the right to object to processing or lodge a complaint with your data protection authority.
8. Security
We use industry-standard measures including encrypted transport (HTTPS), signed session tokens, and a strict content-security policy. No method is 100% secure, but we work to protect your data.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
10. International transfers
Our providers may process data in countries outside your own. We rely on those providers' safeguards for such transfers.
11. Changes
We may update this policy; the "last updated" date above reflects the latest version.
12. Contact
Privacy questions: support@banlisto.com