Privacy

Who is responsible

CardPodium (cardpodium.com) is responsible for the data described here. For anything on this page — questions, requests, complaints — write to hello@cardpodium.com.

What we store, and why

• Browsing — we count page views two ways. Umami runs on our own servers, sets no cookies and keeps no personal data: page views only, anonymised. Google Analytics sets two cookies on cardpodium.com (_ga and _ga_ZH7QF0JCME, kept for up to two years) and sends each page view, with the page, the time, your approximate location and your device and browser, to Google under its own privacy policy; it does not store your IP address. Google's opt-out browser add-on, or blocking its cookies, keeps it from running. Legal basis: our legitimate interest in knowing how the site is used.
• Your account — your email address and a hashed password, or your Google or Apple identity if you sign in that way (we receive your name and email address from them, never your password), your display name, and your two-factor settings if you turn them on. We send account mail only — confirmations, sign-in codes, password resets and security notices — and keep a record of each one, which also notes whether it was opened and which of its links were followed. A tiny image in the mail tells us it was opened; with images turned off in your mail app, it never loads. Legal basis: providing the service you asked for; for the open and click record, our legitimate interest in knowing that our mail arrives and is read.
• Your collection and wishlist — signed out, your Have and Want ticks stay in your browser, and we keep no copy. When you sign in, they are merged into your account, and from then on your lists are stored with it on our servers, private to it. You can export them as CSV at any time. Legal basis: providing the service you asked for.
• News and videos — when you open an article or play a video, we count it: the item, the time, the page it was on, and your account if you are signed in. Signed out, the count carries no name, only an opaque key that lets us count a visitor once.
• Security and errors — signed in, the requests your browser makes to our servers are logged with the time, your IP address and your browser, to keep accounts secure and to look into abuse. Error reports go to Sentry, our error-reporting service; they can include an IP address and browser details, and are kept for 90 days. Legal basis: our legitimate interest in running a secure service.

Cookies and browser storage

None of it is used for advertising, or to follow you across other sites; the two analytics cookies count visits to this site.

• The session cookie, which keeps you signed in, and the CSRF cookie, a security token that protects forms.
• cp_game, the game you browsed last, so the site opens on it next time. Kept for a year.
• cp_currency, the currency you chose. Kept for a year.
• cp_market, the market you buy in, Europe or the United States, which chooses the shops a card links to. Kept for a year.
• NEXT_LOCALE, the language you chose, when it differs from your browser's. Kept until you close the browser.
• In your browser's local storage rather than in cookies: theme (light or dark), cp_news_view (the news as a grid or a list), cp_share_handle (the name you last typed on a share image) and, while you are signed out, cp_owned and cp_wanted, your Have and Want ticks.
• _ga and _ga_ZH7QF0JCME, set by Google Analytics to tell one visitor's page views from another's. Kept for up to two years.

Today

True now; if this changes, we update this page first and ask for consent where the law requires it:

• No advertising cookies and no ad-tech on the site.
• Two analytics tools and nothing else: Umami on our own servers, and Google Analytics, described above.
• We do not sell your data, or share it for advertising.
• Your collection and wishlist are private: no one else sees them unless you share an image of them yourself.
• No profiling: nothing you do changes what anyone else sees.

Where the data lives

Our servers run in the European Union (Hetzner, Germany). Images are delivered through Amazon CloudFront; account mail goes through Amazon SES, our email delivery provider; error reports go to Sentry; page views go to Google Analytics (Google Ireland Limited). Signing in with Google or Apple involves those providers under their own privacy policies.

Some pictures load straight from elsewhere: an article's picture from its publisher, a video's thumbnail from YouTube. A video plays in YouTube's privacy-enhanced player, which connects to YouTube only once you press play, under YouTube's own privacy policy. A link to a marketplace opens its own site, under its own policy; an affiliate link also tells the marketplace that you came from CardPodium.

Your rights

Under the GDPR you can ask for access to your data, its correction or erasure, the restriction of its processing, and a copy to take elsewhere; you can object to processing based on our legitimate interest, and withdraw a consent you gave. One email to hello@cardpodium.com is enough for any of it.

You can export your lists as CSV yourself at any time, and delete your account yourself in your settings, under Delete account (how it works, and how to ask for it by email). When an account is deleted, its lists go with it; the news counts keep their totals but are no longer tied to you.

If you think we handle your data wrongly, you can complain to a supervisory authority: in Malta, the Information and Data Protection Commissioner (IDPC), or the authority of the country you live in.