Privacy Policy

Last updated: September 30, 2026

CardTracker (“we”, “us”) is a small card shop based in Melancthon, Ontario, Canada. This policy explains what personal information we collect on cardtracker.ca, why we collect it, who we share it with and the choices you have. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for visitors in the European Economic Area, the United Kingdom and Switzerland, the GDPR and its UK and Swiss equivalents.

What we collect

• Your account: your name, email address, username and password (stored encrypted; we can’t read it).
• Your orders: your name, email address, phone number (if you give it), shipping address, the cards you bought, the shipping method and the IP address the order was placed from (to help prevent fraud).
• Payments: payments are handled entirely by Stripe in a secure form on our checkout page. We never see or store your card number; Stripe tells us only whether the payment went through.
• Our newsletter: your email address and name, and a record of your consent: the wording you agreed to, when you signed up and confirmed, and the IP address and browser used. Canada’s Anti-Spam Legislation (CASL) requires us to keep this proof.
• Support requests: your name, email address, your messages and any files you attach.
• Security: IP addresses are held briefly to limit repeated sign-in attempts and form submissions. These records are deleted automatically within a few hours.

The scores and schedules pages use sports data from API-Sports. Nothing about you is sent to them.

How we use it

• To process, ship and support your orders, and to email you about them.
• To run your account and answer your support requests.
• To send the newsletter, only if you asked for it and confirmed your email address. Every newsletter has an unsubscribe link that works immediately.
• To keep the site secure and prevent fraud.
• To show advertising on our content pages (see below), which helps pay for the free scores and schedules.
• To meet our legal obligations, such as keeping sales records for tax purposes.

We don’t sell your personal information.

Who we share it with

• Stripe, to take payments (Stripe’s privacy policy).
• Canada Post, which receives your name, shipping address and, if needed, phone number to deliver your order.
• Google, which provides the ads on our content pages (see below).
• Our web host and email delivery provider, which store the site and send our emails on our behalf.
• Authorities, where the law requires it.

Some of these companies store information outside Canada, including in the United States, where it may be accessible to authorities under local law.

Cookies

Our own cookies make the store work. They don’t track you and don’t need your consent:

• ct_cart: remembers what’s in your cart (30 days).
• ct_ship: remembers the shipping address and rate you picked on the cart page (1 day).
• ct_checkout and ct_receipt: link your browser to your checkout and order receipt (1 day or less).
• ct_notice: shows a one-time message such as “Added to cart” (2 minutes).
• wordpress_*: keep you signed in to your account.

Stripe sets its own cookies on the checkout page to prevent fraud.

Advertising

We show Google AdSense ads on our catalog, card, scores and information pages. We never show ads on the cart, checkout, account or support pages.

• Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website and other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
• You can opt out of personalized advertising in Google’s My Ad Center, or opt out of some other vendors’ personalized ads at aboutads.info (in Canada, youradchoices.ca).
• How Google uses information from sites that use its services.

Visitors in Europe, the UK and Switzerland

If you visit from the European Economic Area, the United Kingdom or Switzerland, Google shows a consent message on your first visit. Ad cookies are set, and ads personalized, only if you agree. You can change your choice at any time with the Privacy & cookie settings link at the bottom of every page.

We rely on these legal bases: performing our contract with you (orders, accounts, support), your consent (newsletter, personalized ads), our legitimate interests (site security and fraud prevention) and legal obligations (tax records). You can ask to see, correct, delete or receive a copy of your information, object to or restrict how we use it, and withdraw consent at any time. You can also complain to your local data protection authority.

Fantasy contests

If you play our free fantasy contests, we keep the nickname you choose, your lineups and your points. Your nickname, lineups and points are shown to other players on the leaderboards once a contest locks; your name and email address never are. Contests are for bragging rights only, with no entry fees or prizes. You can change your nickname at any time, and we may change one that isn’t respectful.

How long we keep it

• Orders: for seven years, as Canadian tax law requires.
• Accounts: until you ask us to close yours.
• Newsletter: until you unsubscribe. We keep the record of your consent and unsubscription as proof, as CASL requires.
• Support requests: for as long as needed to help you and keep a record of what was agreed. You can ask us to delete them.

Your rights and choices

Wherever you live, you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we’re not required to keep it. You can unsubscribe from the newsletter at any time. We’ll reply within 30 days. If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Security

The whole site uses encrypted (HTTPS) connections, passwords are stored hashed, and payment details go straight to Stripe. No system is perfectly secure, but we limit who can access your information and keep only what we need.

Children

The store isn’t aimed at children under 13, and we don’t knowingly collect their information. Purchases must be made by an adult.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. For significant changes, we’ll also let account holders know by email.

Contact us

For privacy questions or requests, email tom@cardtracker.ca or open a support request. Our privacy contact is the owner of CardTracker, Melancthon, Ontario, Canada.