Legal
Privacy Policy
Last updated: 2026-06-19
CouchCardTrading ("we", "us") operates CouchCardTrading. This Privacy Policy explains how we collect, use, and protect personal data when you use our Service, in line with the EU General Data Protection Regulation (GDPR) and Dutch privacy law (AVG).
1. Data controller
Controller: CouchCardTrading, Netherlands.
Privacy contact: privacy@couchcardtrading.com
2. Data we collect
- Account data: email address and Google account identifier from Firebase Authentication.
- Inventory & business data: cards, prices, sales, orders, bulk lots, and settings you enter.
- Technical data: essential cookies/local storage for sign-in and preferences; server logs via our hosting provider.
- Support communications: if you email us.
We do not sell your personal data. We do not use advertising trackers.
3. Purposes & legal bases
- Provide the Service (contract / steps before contract): account, sync, calculators, inventory.
- Security & fraud prevention (legitimate interest): access control, abuse prevention.
- Legal obligations where applicable (e.g. tax records you choose to keep in exports).
- Consent for non-essential cookies if we add analytics later (see cookie banner).
4. Processors & transfers
We use Google Firebase (Authentication, Firestore, Hosting) as our primary processor. Data may be processed in the EU and/or United States under Google's standard contractual clauses. See our Data Processing Agreement for business customers and subprocessors.
5. Retention
We keep your data while your account is active. When you delete your account, we delete associated Firestore data within a reasonable period. Backups may persist briefly per our processor's policies.
6. Your rights (GDPR)
You may:
- Access, rectify, or erase your data
- Export your data (portability) — use Export my data in Settings
- Restrict or object to processing where applicable
- Withdraw consent for optional cookies at any time
- Lodge a complaint with the Dutch Autoriteit Persoonsgegevens (AP) or your local supervisory authority
7. Cookies
We use essential storage for authentication and theme preferences. Optional analytics are not enabled by default. You can manage consent via the cookie banner on first visit.
8. Children
The Service is not directed at children under 16. We do not knowingly collect their data.
9. Changes
We may update this policy. Material changes will be reflected by the "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.