CARDFLIP PRIVACY POLICY
cardflipapp.com · listtoflip.com Operated by Linden & Coolidge LLC Effective Date: May 16, 2026
Last Updated: May 16, 2026
CardFlip (“CardFlip,” “we,” “us,” or “our”) is operated by Linden & Coolidge LLC, a Massachusetts limited liability company. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at cardflipapp.com, our web application, and any related services (collectively, the “Service”). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Account Information: When you create a CardFlip account, we collect your email address, and optionally your name.
Payment Information: When you subscribe to a paid plan, your payment is processed by Stripe, Inc. CardFlip does not receive, store, or have access to your full credit card number, CVV, or banking information. Stripe provides us with a tokenized reference to your payment method and basic billing information such as the last four digits of your card and billing address.
eBay Account Connection: When you connect your eBay account to CardFlip, we receive and store an encrypted OAuth 2.0 access token and refresh token issued by eBay. This allows CardFlip to create and manage listings on your behalf. We do not receive or store your eBay password at any time.
Item Photos: When you upload photographs of items for listing, those images are transmitted to our servers and to the Anthropic Claude AI service for identification and pricing analysis. Photos are processed in real time and are not permanently stored on our servers unless you explicitly save an item to your Collection.
Listing Data: We store the listing data generated for your items, including titles, descriptions, prices, condition notes, and marketplace posting status, associated with your account.
Communications: If you contact us at support@cardflipapp.com, we retain the content of your messages and your email address to respond to your inquiry.
1.2 Information Collected Automatically
Usage Data: We collect information about how you interact with the Service, including which features you use, scan counts, listing history, and timestamps of activity.
Device and Browser Information: We collect your IP address, device type, browser type and version, operating system, and referring URLs.
Cookies and Local Storage: We use browser cookies and localStorage to maintain your login session (stored as “cf_token”), remember your preferences, and collect analytics data. See Section 6 for full details.
2. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
• To create and maintain your CardFlip account
• To authenticate your identity and authorize access to the Service
• To process your subscription payments through Stripe
• To connect to your eBay account and create, manage, and post listings on your behalf
• To transmit item photos to the Anthropic Claude AI service for item identification and pricing analysis
• To send you transactional emails including account confirmation, scan usage alerts, listing notifications, and trial status updates
• To send you product update emails and announcements (you may unsubscribe at any time) • To enforce our Terms of Service and Acceptable Use Policy
• To analyze usage patterns and improve the Service
• To respond to your support requests and communications
• To comply with legal obligations
3. HOW WE SHARE YOUR INFORMATION
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
We share your information only with the following categories of service providers, and only as necessary to operate the Service:
Anthropic, Inc. (Claude AI): Item photos and listing prompts are transmitted to Anthropic’s API for AI-powered item identification and description generation. Anthropic does not retain your photos or use them to train their AI models. See Anthropic’s Privacy Policy at anthropic.com/legal/privacy.
eBay Inc.: When you connect your eBay account and post listings, we transmit your listing data and photos to eBay via their Trading API. Your eBay OAuth tokens are stored encrypted in our database. eBay’s Privacy Policy applies to data eBay receives.
Stripe, Inc.: Payment processing is handled entirely by Stripe. We transmit your email address and subscription tier to Stripe for billing purposes. Stripe’s Privacy Policy applies at stripe.com/privacy.
Render, Inc.: Our server infrastructure and database are hosted on Render’s cloud platform. Your account data and listing history are stored on Render’s servers in the United States.
Google LLC / Gmail: Transactional and marketing emails are sent via Gmail’s SMTP service. Email addresses are transmitted to Google for delivery purposes.
TCGPlayer (part of eBay Inc.): For trading card listings, we may query TCGPlayer’s pricing API to retrieve market prices for specific card products.
PostHog (when active): We use PostHog for product analytics to understand how users interact with CardFlip. PostHog may receive anonymized usage events.
We may also disclose your information: (a) if required by law or legal process; (b) to enforce our Terms of Service; (c) to protect the rights, property, or safety of CardFlip, our users, or the public; or (d) in connection with a merger, acquisition, or sale of all or substantially all of our assets, with prior notice to users.
4. DATA RETENTION
We retain your personal information for as long as your account is active. If you close your account, we will delete your personal information within 30 days of your request, except where we are required to retain it for legal or compliance purposes. Anonymized, aggregated usage statistics may be retained indefinitely. Listing data and scan history may be retained in anonymized form for market analytics.
5. YOUR RIGHTS AND CHOICES
Depending on your location, you may have the following rights regarding your personal information:
Access: You may request a copy of the personal information we hold about you by emailing support@cardflipapp.com.
Correction: You may update your account information directly within the CardFlip app or by contacting us. Deletion: You may request deletion of your account and all associated personal information by emailing
support@cardflipapp.com with the subject line “Delete My Account.” We will process your request within 30 days. Portability: You may request an export of your listing data in a machine-readable format.
Opt-Out of Marketing Emails: You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any such email or by emailing support@cardflipapp.com.
eBay Account Disconnection: You may revoke CardFlip’s access to your eBay account at any time from your eBay account settings under Connected Applications. This will prevent CardFlip from posting new listings on your behalf.
California Residents (CCPA/CPRA): California residents have additional rights including the right to know what personal information is collected, the right to delete, the right to opt-out of sale (we do not sell data), and the right to non-discrimination for exercising privacy rights.
EU/UK Residents (GDPR): If you are located in the European Union or United Kingdom, you have rights under GDPR including the right to access, rectify, erase, restrict processing, data portability, and to object to processing. Contact us at support@cardflipapp.com to exercise these rights.
6. COOKIES AND TRACKING TECHNOLOGIES
CardFlip uses the following types of cookies and browser storage:
Authentication Cookie (“cf_token”): Essential. Stores your login session token. Required for the Service to function. Cannot be disabled without logging you out.
Preference Storage: Functional. Stores your in-app preferences such as selected item type and shipping defaults using browser localStorage.
Analytics (PostHog): Analytics. When active, PostHog uses cookies to collect anonymized usage data such as which features are used and session duration. This data does not identify you personally.
Google Analytics: Analytics. We may use Google Analytics on our WordPress landing page to understand website traffic. Google Analytics sets cookies to track sessions and page views.
You may disable cookies in your browser settings. Disabling essential cookies will prevent you from logging in. Disabling analytics cookies will not affect your ability to use the Service.
7. DATA SECURITY
We implement industry-standard security measures to protect your information, including: HTTPS encryption for all data in transit, encrypted storage of eBay OAuth tokens in our database, JWT-based authentication with secure token generation, and access controls limiting database access to authorized systems only. No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
8. CHILDREN’S PRIVACY
The CardFlip Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@cardflipapp.com and we will promptly delete it.
9. THIRD-PARTY LINKS
The Service may contain links to third-party websites including eBay, Etsy, Whatnot, and other marketplace platforms. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. INTERNATIONAL DATA TRANSFERS
CardFlip is operated in the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection regardless of where it is processed.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice in the app. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
12. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
CardFlip — Linden & Coolidge LLC
Email: support@cardflipapp.com
Website: cardflipapp.com
Subject line for deletion requests: “Delete My Account” Subject line for data access requests: “Data Access Request”
CardFlip · Privacy Policy · Linden & Coolidge LLC · cardflipapp.com · May 16, 2026