Privacy Policy

Last updated 21 September 2026

What we collect

We only collect information you choose to give us, through these features:

• Newsletter sign-up — name, date of birth, email, country/state, favourite clubs and player, and budget range.
• Request a Card — email address plus details of the card you're after (player, manufacturer, season, etc.).
• Community account — email and password, or your name, email and profile picture if you sign in with Google.
• Reviews — anything you submit in a review (name, rating, text, and an optional photo) if you choose to leave one.
• Card checkout — your name, email and shipping address, so we can fulfil and ship your order. Your payment card number, expiry and CVC are typed directly into a secure form provided by our payment processor, Square, and never pass through our servers or database.

Your wishlist (hearted cards) is stored only on your own device (browser local storage) — it's never sent to us or seen by anyone else.

We don't run any analytics or advertising trackers on this site.

How we use it

• To let you know about new stock, upcoming shows, or cards matching your request.
• To fulfil a specific card request you've submitted.
• To operate your community account (sign-in, posting reviews, showcasing your collection).
• To display approved reviews on the site.
• To fulfil an order placed through our website checkout, and to send your receipt and shipping updates.

We don't sell your information, and we don't share it with third parties for their own marketing.

Signing in with Google

"Continue with Google" is an optional way to create your Community account, powered by Google's standard OAuth sign-in (via our provider, Supabase). Here's exactly how that works:

• Data accessed — when you choose to sign in with Google, we request only your basic Google profile: your name, email address, and profile photo. We do not request or access your Gmail, contacts, Drive, Calendar, or any other Google data or scope.
• Data usage — that profile information is used solely to create and authenticate your Community account on this site, so you can sign in, post reviews, and showcase your collection under your name and photo. It is never used for advertising, analytics, or any purpose beyond running your account.
• Data sharing — we do not share your Google profile data with any third party. It is not sold, rented, or used for third-party marketing of any kind.
• Data storage & protection — your profile data and account are stored with Supabase, our database and authentication provider, which encrypts data in transit and at rest and restricts access to it. We don't keep a separate copy anywhere else.
• Data retention & deletion — we retain your Google profile data for as long as your Community account is active. You can request deletion of your account and all associated data at any time by emailing info@bodaciouscardz.com — we'll delete it within a few days and confirm once it's done.

See Google's Privacy Policy for how Google handles your data on their end.

Paying by card on our website

When you check out with a card, payment is processed by Square. Here's exactly how that works:

• Data Square handles — your card number, expiry and CVC are entered directly into Square's own secure payment form and sent straight to Square. We never see, receive or store your full card details.
• Data we store — your name, email, shipping address and a Square payment reference ID, so we can fulfil your order, provide a receipt, and process a refund if needed. We don't store your card number.
• Saved addresses — if you're signed in to a Community account, checkout gives you the option to save your shipping address to your profile for next time. This is only ever saved if you tick that box; otherwise nothing is kept between orders.
• See Square's Privacy Policy for how Square handles your payment data on their end.

Where else it's stored

All other site data (form submissions, reviews, other account details, and order/shipping details from website checkout) is likewise stored with Supabase.

Card listings you click through to eBay are hosted and handled entirely by eBay, under their own privacy terms.

Your choices

• You can ask us to see, correct, or delete any information we hold about you at any time, including data from Google sign-in.
• You can delete your community account and its data on request — email info@bodaciouscardz.com.
• Newsletter emails include the option to unsubscribe.

Contact

Questions about this policy or your data? Email info@bodaciouscardz.com.