Privacy
Updated 19 September 2026
Controller and purposes
Filipe Lemos is the controller of Cardfolio's personal data. We process email, name, preferences, sessions and public passkey credentials to manage accounts; collection items, costs, notes and wishlists to provide collection services; and minimal technical data to secure and operate the platform.
Legal bases and optional sharing
Account and collection data are processed to provide the service you request. Security and abuse prevention rely on the legitimate interest in protecting users and the platform. Public profiles are optional and can be disabled. Collections are private by default; sharing reveals cards, quantities, languages and progress, but never notes or purchase costs. Estimated value is public only if you separately choose it.
Services used
Infrastructure uses Vultr, Cloudflare R2 and Mailjet for hosting, image/backup storage and transactional email respectively. Support services are not active yet; the provider and necessary data will be identified before activation. Catalogue and price providers do not receive your collection. We do not sell personal data or use behavioural advertising.
Retention and deletion
Account and collection data remain while you keep your account. Deletion removes them from the active database and revokes sessions. Encrypted backups have a 30-day retention period; recovery procedures must respect deletion requests. Technical and administrative logs are limited to what is needed for security and operation.
Your rights
You can request access, rectification, erasure, restriction, portability and, where applicable, object or withdraw consent. Use Account or the contact below; we may need to verify your identity. We respond within applicable deadlines, normally one month. You may complain to Portugal's data protection authority, CNPD (cnpd.pt).
Cookies and device storage
We use technical cookies for sessions, access protection and language, and local storage for theme and presentation preferences. The PWA keeps technical resources; private collection data is not offered as an offline collection. We do not use advertising cookies.
Contact
Filipe Lemos
legal@cardfolio.club