Privacy Policy

Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how Cardverse S.r.l. (“Cardverse”, “we”, “us” or “our”) collects, uses, stores and otherwise processes personal data when you use the Cardverse mobile application, website, web application and related services (collectively, the “Services”).

We are committed to handling personal data responsibly and transparently in accordance with applicable data protection laws.

1. Data Controller

The data controller responsible for the processing of personal data in connection with the Services is:

Cardverse S.r.l.

Via Carducci 407

55100 Lucca (LU)

Italy

VAT / Tax ID: 02758870469

Email: info@cardvrs.com

PEC: cardverse.srl@pec.it

2. About Cardverse

Cardverse is a digital platform designed for the trading card community.

The Services may include community and social features, card and market data tools, user profiles and a marketplace through which users and verified professional sellers may interact, buy, sell or exchange collectible cards.

3. Personal Data We Collect

Depending on how you use Cardverse, we may collect and process the following categories of personal data.

Account and identification information

When you create or manage a Cardverse account, we may process information such as:

  • name and surname;

  • username or account name;

  • email address;

  • profile picture;

  • account credentials and authentication information;

  • account settings and preferences;

  • account status and verification information.

Google Sign-In

If you choose to create or access your Cardverse account using Google Sign-In, we may receive information made available by Google in accordance with the permissions granted by you.

This may include information such as:

  • your Google account identifier;

  • name;

  • email address;

  • profile picture.

Google may independently process personal data in accordance with its own privacy terms and policies.

4. Profile and Social Data

Cardverse includes social and community features.

When you use these features, we may process information that you voluntarily provide or generate, including:

  • profile information;

  • posts;

  • photographs and other uploaded content;

  • comments and interactions;

  • likes or similar interactions;

  • relationships between users, such as follows;

  • content associated with your public profile;

  • reports and moderation-related information.

Certain information and content may be visible to other Cardverse users depending on the nature of the feature and your account settings.

You should avoid publishing personal or confidential information that you do not want other users to see.

5. Messages and Communications

If you use communication or chat features within Cardverse, we may process messages and related information as necessary to provide the communication service.

Information associated with communications may also be processed where reasonably necessary for:

  • platform security;

  • abuse prevention;

  • user reports;

  • investigation of suspected violations;

  • dispute management;

  • compliance with applicable legal obligations;

  • establishment, exercise or defence of legal claims.

Cardverse does not represent that private communications are end-to-end encrypted unless expressly stated within the relevant feature.

6. Marketplace Data

When you use the Cardverse marketplace, we may process information relating to your marketplace activity, including:

  • listings;

  • products offered for sale or exchange;

  • photographs and descriptions;

  • purchases and sales;

  • orders;

  • transaction history;

  • buyer and seller information;

  • shipping information;

  • order status;

  • tracking information, where available;

  • cancellations;

  • disputes;

  • reports;

  • evidence provided in connection with a dispute;

  • information required to manage marketplace activity.

Where necessary to complete a transaction, certain information may be shared between the buyer and seller.

7. Verified Business Accounts

Professional sellers and verified stores may be required to provide additional information for verification and operation of their business account.

This information may include:

  • business or legal name;

  • store name;

  • VAT number or other tax identifier;

  • country;

  • business address;

  • business contact details;

  • representative information;

  • verification status;

  • documentation required to verify the business account.

Additional information may be required depending on the country, applicable legal requirements or the services used by the business account.

8. Payment Information

Where payment functionality is available, payments may be processed through third-party payment service providers.

Cardverse may receive information relating to the transaction, such as:

  • transaction identifiers;

  • payment status;

  • transaction amount;

  • information relating to refunds or payment disputes;

  • information required to associate a payment with an order or account.

Payment card details or other financial credentials may be processed directly by the relevant payment service provider where applicable.

The specific payment provider and related processing arrangements may vary depending on the functionality, country and payment method available.

9. Technical and Device Data

When you access or use Cardverse, we may process technical information necessary for operating, securing and improving the Services.

Depending on the technologies implemented in the application, this may include:

  • IP address;

  • device type;

  • operating system;

  • app version;

  • language settings;

  • technical identifiers;

  • access information;

  • crash and diagnostic information;

  • security logs;

  • application events;

  • information concerning interactions with the Services.

We only process such information to the extent actually collected by Cardverse or the service providers integrated into the Services.

10. How We Use Personal Data

We may process personal data for purposes including:

  • creating and managing Cardverse accounts;

  • authenticating users;

  • providing the Services;

  • providing social and community functionality;

  • enabling communication between users;

  • operating the Cardverse marketplace;

  • managing listings, purchases, sales and exchanges;

  • processing and managing transactions;

  • providing customer support;

  • verifying professional or business users;

  • preventing fraud, abuse and unauthorized activity;

  • securing the platform and user accounts;

  • investigating reports and violations;

  • moderating content;

  • managing disputes and complaints;

  • maintaining transaction and account records;

  • complying with legal, regulatory, tax and accounting obligations;

  • protecting the rights and interests of Cardverse, users and third parties;

  • diagnosing technical problems;

  • maintaining and improving the Services;

  • generating aggregated or anonymised statistics;

  • communicating important information about the Services;

  • sending marketing communications where permitted and, where required, with the user’s consent.

11. Legal Bases for Processing

Depending on the specific processing activity and applicable law, Cardverse may process personal data where the processing is necessary:

  • to provide the Services requested by the user or perform an agreement with the user;

  • to comply with legal obligations;

  • for the legitimate interests of Cardverse or third parties, where such interests are not overridden by the rights and freedoms of the user;

  • on the basis of the user’s consent where consent is required.

Where processing is based on consent, the user may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

12. Public Information

Certain information is intended to be visible to other Cardverse users as part of the functioning of the platform.

Depending on the features available, this may include:

  • username;

  • profile picture;

  • public profile information;

  • public posts;

  • marketplace listings;

  • content voluntarily published by the user;

  • interactions intended to be publicly visible.

Users are responsible for considering what information they choose to make publicly available through Cardverse.

13. Sharing of Personal Data

We may share personal data where necessary with third parties that support the operation of Cardverse.

These may include providers of:

  • cloud infrastructure and hosting;

  • authentication services;

  • payment processing;

  • security and fraud prevention;

  • technical monitoring and diagnostics;

  • communications;

  • customer support;

  • analytics;

  • professional advisory services.

We may also disclose personal data:

  • where required by applicable law;

  • in response to valid requests from competent authorities;

  • where necessary to protect the rights, property or safety of Cardverse, its users or third parties;

  • in connection with legal proceedings or disputes;

  • in connection with a corporate transaction, restructuring, merger, acquisition or transfer of assets, subject to applicable safeguards.

Service providers may process personal data only according to the role, contractual arrangements and applicable legal requirements governing the relevant service.

14. Third-Party Services and SDKs

The Cardverse application may integrate third-party technologies, software development kits, APIs or other services that support specific functionality.

These third parties may process information in accordance with their respective role and privacy documentation.

Cardverse evaluates third-party services used within the platform and seeks to ensure that personal data is processed consistently with applicable legal requirements and the purposes described in this Privacy Policy.

15. International Data Transfers

Some technology providers used by Cardverse may process or store personal data outside the country in which the user is located.

Where personal data is transferred internationally, Cardverse applies or requires appropriate safeguards where required under applicable data protection law.

16. Data Security

Cardverse adopts technical and organisational measures designed to protect personal data against:

  • unauthorized access;

  • unlawful processing;

  • accidental loss;

  • unauthorized disclosure;

  • alteration;

  • destruction.

Such measures may include access controls, authentication mechanisms, encrypted communications, logging, security monitoring and other measures appropriate to the nature of the Services.

However, no digital platform or transmission method can guarantee absolute security.

Users are responsible for keeping their account credentials confidential and should notify Cardverse if they suspect unauthorized access to their account.

17. Data Retention

Cardverse retains personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted under applicable law.

Retention periods may vary depending on the category of information and the purpose of processing.

For example, certain information may need to be retained after account deletion where necessary for:

  • legal or regulatory obligations;

  • tax and accounting requirements;

  • transaction records;

  • prevention and investigation of fraud;

  • platform security;

  • pending or potential disputes;

  • establishment, exercise or defence of legal claims.

Where continued identification of the user is no longer necessary, information may be deleted or anonymised.

Technical logs and backup copies may remain for limited periods in accordance with applicable operational and security procedures before being deleted or overwritten.

18. Account Deletion

Users can request the permanent deletion of their Cardverse account directly from the Cardverse application.

The in-app deletion path is:

Settings → Delete Account

To reduce the risk of accidental or unauthorized deletion, Cardverse uses a confirmation process.

The user is required to confirm the intention to delete the account, enter the relevant Cardverse account name and provide a final confirmation before the deletion process begins.

Users who are unable to access the application may also request account deletion through the dedicated webpage:

https://cardvrs.com/delete-account

Following an account deletion request, personal data associated with the account will be deleted or anonymised, except where specific information must be retained for legitimate purposes, including legal, regulatory, tax or accounting obligations, fraud prevention, security, transaction records, disputes or the establishment, exercise or defence of legal claims.

Suspending, restricting or temporarily deactivating an account is not considered account deletion.

19. User Rights

Subject to applicable law, users may have the right to:

  • obtain information about the processing of their personal data;

  • request access to their personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of personal data;

  • request restriction of processing;

  • object to certain processing activities;

  • request data portability where applicable;

  • withdraw consent where processing is based on consent.

Requests may be sent to:

info@cardvrs.com

Cardverse may request reasonable information to verify the identity of the person submitting the request before acting on it.

Users may also have the right to lodge a complaint with the competent data protection authority.

20. Marketing Communications

Where Cardverse offers newsletters, promotional communications or other marketing communications, such communications will be sent in accordance with applicable law and the preferences expressed by the user.

Where consent is required, marketing communications will only be sent after obtaining the relevant consent.

Users may withdraw their consent or unsubscribe from marketing communications through the mechanisms made available in the relevant communication or through the available account settings.

Service communications necessary for the operation, security or administration of the account are separate from optional marketing communications.

21. Children and Minors

Cardverse takes the protection of younger users seriously.

Access to certain Cardverse features may be subject to age or eligibility requirements.

Where applicable, Cardverse may implement age-related restrictions, additional safeguards or other measures required by applicable law.

Cardverse does not knowingly seek to process personal data relating to children in a manner that is inconsistent with applicable legal requirements.

If Cardverse becomes aware that personal data has been processed in circumstances that do not comply with applicable requirements relating to minors, appropriate measures will be taken.

22. Third-Party Links and Services

Cardverse may contain links to or integrations with third-party websites, applications or services.

Cardverse is not responsible for the independent privacy practices of third parties.

Users should review the privacy information provided by the relevant third party before using its services or providing personal data directly to it.

23. Changes to This Privacy Policy

Cardverse may update this Privacy Policy from time to time to reflect:

  • changes to the Services;

  • new functionality;

  • changes to the technologies or providers used;

  • changes to how personal data is processed;

  • legal or regulatory developments.

The current version will be made available through the Cardverse website and, where appropriate, through the application.

The “Last updated” date at the top of this Privacy Policy indicates when the document was most recently revised.

Where required, users may also be informed of material changes through the application or other appropriate communication channels.

24. Contact Us

For questions concerning this Privacy Policy, personal data or privacy rights, please contact:

Cardverse S.r.l.

Via Carducci 407

55100 Lucca (LU)

Italy

Email: info@cardvrs.com

PEC: cardverse.srl@pec.it