Privacy Policy

Last updated: July 2026

This page explains what information CardCarter collects, why, and how it's handled. CardCarter is a browser extension and companion website that helps collectors add trading card products to their cart faster during restocks. We keep the data we collect to the minimum needed to run your account, process payment, and issue your license key.

Information we collect

We collect and store the following:

• Account information — your email address and account ID, handled by our authentication provider, Clerk, when you sign up or sign in.
• License and subscription status — your license key, plan type (Monthly or Lifetime), and whether your subscription is active, cancelled, or pending cancellation.
• Device and usage signals — a randomly generated device identifier and your IP address, collected each time the extension checks your license. This is used solely to detect and prevent a single license key being used on multiple devices at once, and to let you reset it yourself from your dashboard if you get a new device.
• Payment information — we do not receive or store your card details. Checkout and billing are handled entirely by our payment processor, Lemon Squeezy, which acts as the merchant of record for all purchases. We only receive confirmation that an order or subscription was created, along with an order/subscription ID.
• Support communications — if you email us, we keep that correspondence to help resolve your issue.

Information we don't collect

The CardCarter extension only reads and interacts with product/cart pages to automate adding items to your cart. It does not track your general browsing history, does not read pages unrelated to that function, and does not collect payment card numbers at any point — those are entered directly into Lemon Squeezy's checkout, never through us.

How we use this information

• To verify your identity when you sign in.
• To generate, verify, and manage your license key.
• To process checkout, renewals, and cancellations through Lemon Squeezy.
• To respond to support requests.

We do not sell your information, and we do not use it for advertising or share it with data brokers.

Third-party services we rely on

Because CardCarter is a small, independently-run service, we rely on a few trusted providers to operate:

• Clerk — authentication and account management.
• Lemon Squeezy — payment processing, billing, and tax compliance, as merchant of record.
• Upstash — secure storage of your license and subscription status.
• Cloudflare — hosting for this website and its backend functions.

Each of these providers may process your data under their own privacy policies as part of providing their service to us.

Data retention

We retain your account and license information for as long as your account is active, and for a reasonable period afterward in case you resubscribe or need support. You can request deletion of your account data at any time by contacting us (see below).

Children's privacy

CardCarter is not directed at children, and we do not knowingly collect information from anyone under the age of 13.

Changes to this policy

If this policy changes in a meaningful way, we'll update the "last updated" date at the top of this page.

Contact us