Privacy Policy

Last updated: January 2026

1. Introduction

CardLegit ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our website and services.

2. Information We Collect

We may collect information about you in various ways:

  • Personal Data: Name, email address, phone number and other contact information you provide when creating an account or submitting reports.
  • Card Information: Details about trading cards you report or verify, including certification numbers, descriptions and photos.
  • Usage Data: Information about how you access and use our services, including IP address, browser type and pages visited.
  • Cookies: We use cookies and similar tracking technologies to improve your experience.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain and improve our services
  • Process theft reports and enable card verification
  • Send you updates, alerts and promotional communications
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns and trends
  • Protect against fraud and unauthorized access

4. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

  • Public Card Data: Card details from theft reports (not personal contact info) are made publicly searchable to enable verification.
  • Service Providers: We may share data with third-party vendors who assist us in operating our platform.
  • Legal Requirements: We may disclose information when required by law or to protect our rights.
  • Business Transfers: In the event of a merger or acquisition, your information may be transferred.

5. Data Security

We implement industry-standard security measures including AES-256 encryption, secure HTTPS connections and regular security audits. However, no method of transmission over the Internet is 100% secure.

6. Your Rights (GDPR)

If you are a resident of the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, contact us at privacy@cardlegit.com.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Theft reports remain in our database indefinitely to protect the community, but you may request removal of your personal contact information.

8. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us: