Privacy

What is kept with an account

• Your cards, binders and the photos you add, kept privately on this server for your account only.
• How you sign in: your email address and a scrambled (hashed) password; or the account number Google or Facebook gives Card Cabinet for you.
• Sign-in records so you stay signed in: browser sessions (with the browser’s IP address and name) and phone sign-in tokens. They expire, and signing out ends them.
• Short-lived records of password-reset and sign-in links while they are being used.

Without an account, the browser or phone keeps your cards on that device only; nothing is sent here.

Google and Facebook sign-in

Google: Card Cabinet asks only for your basic sign-in identity and email address. It keeps Google’s account number for you and, for a new account, your verified email address.

Facebook: Card Cabinet asks only for your public profile and keeps just the Facebook account number for this app. It does not ask Facebook for your email, friends, photos or posts, and does not post anything.

Card Cabinet does not keep Google or Facebook passwords or access tokens, and does not use these sign-ins for advertising.

What it does not do

The website has no adverts, analytics or tracking scripts, and loads nothing from other websites. Card Cabinet does not identify, grade or value your cards.

Deleting your data

You can delete your account and everything in it at any time from the cabinet. How to delete your data.