Privacy Policy
Who processes your data
The controller is IndraCorp s.r.o., Schodová 1288/9, 602 00 Brno, Czech Republic, company ID 19873212, registered with the Regional Court in Brno, section C, file 136337. Contact: info@zardpex.com.
What we collect
- Account: email, password (stored only as a secure hash), nickname and region.
- Profile, optional: first and last name, phone, address and profile photo. Only you can see your name, phone and address.
- Account content: collections including purchase prices of your pieces if you enter them, wishlist, settings (currency, grading costs), users you follow or block, and reports you submit. Only you can see your purchase prices.
- Fresh Cardmarket prices: when you open a product page on Cardmarket inside the app, the app reads its listings and calculates the prices on your phone. We do not automatically send or store the listings or the prices calculated from them. They disappear when you close the panel, and the app also deletes cached copies of the pages on your phone.
- My piece value: we only store a number you confirm for a piece in your collection. The app pre-fills it from the listings shown at that moment; only you can see it and we never use it as a price for other users.
- Older app versions (before 6 November 2026) send the listings they read to our server. The server only calculates the prices, returns them and stores nothing. We will turn this off once the older versions have been replaced.
- Your Cardmarket sign-in and Cardmarket cookies (browser verification) stay on your phone. Your Cardmarket password and credentials are never sent to us.
- PRO subscription: if you buy PRO, the payment is processed by Google Play or the App Store. Your payment details never reach us. The store only sends us purchase details: the product, order or transaction number, start and end of the period, whether it renews and whether it was refunded. We store them with your account so we know you have PRO (performance of a contract).
- Server logs: IP address and request time, for security and troubleshooting.
- Waitlist on zardpex.com: the email you enter there, only to let you know when the app or ZardpexVendor launches (your consent, Art. 6(1)(a) GDPR). The form is protected by Cloudflare Turnstile. We delete the email after launch, or any time on request.
The app has no ads, no analytics and no cross-app tracking, and we do not sell your data.
Why and on what legal basis
- To provide the app to you (performance of a contract, Art. 6(1)(b) GDPR).
- Security, protecting other users and handling reports (legitimate interest, Art. 6(1)(f) GDPR).
Cardmarket sellers
For listings you load in the app you see the seller's username and country, just like on the Cardmarket page. The app shows them only on your phone so you can find the listing on Cardmarket, and sends or stores none of it. The app does not read the seller's number of sales or any other seller data. If you are a seller and have a question, write to info@zardpex.com.
Who can see your data
Other users only see what you make public: your nickname, photo and, depending on your settings, your collection and wishlist. Data is stored on servers of Hetzner Online GmbH in the EU; card and product images are stored with Cloudflare, Inc. Emails (password reset, welcome, confirmations) are sent through Resend, Inc. from its servers in the EU. All of them process data only on our instructions.
How long we keep it
Until you delete your account. You can delete it in the app under Profile › Account and app › Delete account, or without the app on the account deletion page. This deletes all account data, collections including saved piece values, wishlist, photo and follows. Server logs are deleted within 30 days. We keep PRO purchase records for as long as accounting and tax law requires.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data. Write to info@zardpex.com. You can lodge a complaint with your data protection authority; in the Czech Republic that is the Office for Personal Data Protection (uoou.gov.cz).