Privacy Policy
Effective June 25, 2026
Overview
Marion Bins LLC (“CodeCard,” “we,” “us”) provides a service that lets card and collectible sellers generate QR labels that resolve to live market pricing. This policy explains what we collect, how we use it, who we share it with, and the choices you have. We are a U.S.-based service and process data in the United States. Questions: our support page.
Who this policy covers
It covers everyone who interacts with CodeCard: sellers (and their invited staff) who hold an account, and buyers and visitors who scan a code, browse a storefront, or send a seller an offer — including buyers who do so without signing in.
Information we collect
- Account & identity (sellers) — when you sign up we receive your name and email from our authentication provider (Clerk). If you sign in with Google or Apple, we receive the basic profile and email those providers return.
- Seller & listing data — your shop/storefront details, branding (display name, logo, accent color), and the items you list (card identity, condition, pricing settings, and your private cost, which is never shown to buyers).
- Photos — images you upload for AI pre-grading or storefront branding, stored in our object storage.
- Offers & buyer contact details — when anyone sends an offer (signed in or not) we collect the name and phone number they provide — these are required so the seller can reach them — plus any optional email and message. Offers settle off-app, so this contact information is shared with the receiving seller.
- Buyer activity (signed-in buyers) — saved items, want lists, and offers you send, tied to your account.
- Support communications — if you email or use our support form, we keep your message, email address, and our replies so we can help and follow up.
- Payments — subscriptions are processed by Stripe. We do not receive or store full card numbers; we store a Stripe customer reference and your plan/subscription status.
- Usage, device & security data — standard server logs, authentication cookies needed to keep you signed in, and IP addresses (used transiently for rate-limiting and abuse prevention).
How we use it
To operate the service (resolve scans to live prices, run AI pre-grades, route offers to sellers, manage subscriptions), to communicate with you (transactional, support, and offer-notification email), to secure the service and prevent abuse, and to comply with law. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
Service providers (subprocessors)
We share data only with vendors that process it on our behalf to run the service:
- Clerk — account authentication and session management.
- Stripe — subscription payments and billing.
- Neon — database hosting (your account, listing, and offer data).
- Railway — application hosting.
- Cloudflare — content delivery / network, and R2 object storage for uploaded images.
- Upstash — a key-value store used for caching and rate-limiting (processes IP-derived keys).
- Resend — sending and receiving email (transactional, offer, and support messages).
- Ximilar — AI grading of the photos you submit for a pre-grade.
We retrieve card market data from third parties such as JustTCG and PriceCharting, and we query/link out to eBay for sold-listing comps and product images. We do not send these market-data sources your personal information.
AI pre-grading
Photos you submit for grading are sent to Ximilar to produce an estimate. Grades are informational only and are not affiliated with or endorsed by PSA, BGS, CGC, SGC, or any grading company.
Retention
We keep your data while your account is active and as needed for legal, accounting, and operational reasons. Deleting your account removes your listings and uploaded photos. Some records are retained in de-identified or limited form where we have a legal or operational need — for example, billing/usage history and support correspondence — and residual copies may persist briefly in backups before they age out. Offers you sent to a seller remain available to that seller as part of their records.
Your privacy rights
Depending on where you live (for example, California and other U.S. states with privacy laws), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of any “sale” or “sharing” of it — though, as noted above, we do not sell or share your personal information for advertising. To exercise any of these rights — including if you are a buyer who sent an offer and want your contact details removed — reach us through our support page and we will respond as required by law. We will not discriminate against you for exercising these rights.
Security
We use reputable infrastructure providers, encrypt traffic in transit (HTTPS/HSTS), verify payment webhooks by signature, restrict access to your data, and rate-limit sensitive endpoints. No system is perfectly secure, but we take reasonable measures to protect your information. To report a security issue, see our security contact.
Children
CodeCard is not directed to children under 13 and we do not knowingly collect their information. If you believe a child has provided us personal information, contact us through our support page and we will delete it.
Changes
We may update this policy; material changes will be reflected by a new effective date here.
Contact
our support page · See also our Terms of Service.