Privacy Policy — Card Vault Consign

By PrimeD. Covers the Card Vault Consign app on Android and Windows, for shops and players. Last updated November 4, 2026.

1. Information we collect

Card Vault Consign collects what is needed to run a card shop's register, track consignments and run player rewards:

• Shop data: business name, email, address and location, and staff profiles including PINs and roles.
• Customer and player data: names, phone numbers and email addresses entered into a shop's customer list, and a player's own account details, collection, decks and reward standings.
• Financial data: transaction ledgers, consignment payout balances, store credit and subscription status. Card Vault Consign never stores full card numbers: payments are handled by Stripe and Google Play Billing.
• Sign in with Google: if you sign in with a Google account we receive your email address and name from Google and nothing else. We never see your Google password.
• Device and usage data: app version, device type and error logs when you send a bug report, and time spent in the app for support purposes.

2. How we use it

• Processing retail and consignment sales, payouts and store credit.
• Keeping a shop's register, cloud backup and other signed-in devices in step.
• Running reward boards, prizes and loyalty credit for players at the shops they visit.
• Showing players the shops near them on the map, and showing shops the players who have chosen to appear on their boards.
• Support, bug fixing and keeping the service secure.

3. Sharing

We do not sell personal or shop data. It is shared only with the providers the app needs to work:

• Stripe and RevenueCat — subscriptions and payment processing.
• Google — Google Play Billing, Play Integrity, and Sign in with Google when you choose it.
• Scryfall and other card-price services — public card data only; no personal data is sent.
• Railway — the cloud hosting our server runs on.
• The shops you deal with — a shop sees the name, contact details and purchase history on its own customer card for you, and your drop-offs and reward standings there.

4. Security

Data travels over encrypted connections and is protected by signed sign-in tokens; passwords are stored hashed, never in plain text. A shop's register database lives on the shop's own device. You are responsible for keeping your password and staff PINs private.

5. Deleting your data

You can delete your account in the app (Profile → Delete my account) or by email. What is deleted and what is kept is spelled out on its own page.

6. Contact

Questions about this policy, or a data request: cheyennetoews@gmail.com.

By using Card Vault Consign you acknowledge this policy. Changes are posted on this page with a new date.