Privacy policy

Last updated November 4, 2026

This policy explains what KalosMedia LLC ("CardBoardCounter," "we," "us") collects when you use cardboardcounter.com and the CardBoardCounter app, and what we do with it. In short: we collect what we need to keep your inventory in sync and your orders shipped, we don't sell it, and you can ask us to delete it.

What we collect

Account details. Your email address, shop name and password (stored as a one-way hash).
Marketplace and service connections. Credentials you give us to connect your own accounts: your Mana Pool email and API token, your eBay authorization, your EasyPost API key, and related settings such as listing templates and shipping policies.
Your shop data. Cards, quantities, conditions, prices, costs, storage locations, show batches, buy records and sales history.
Order information. When we sync orders from a marketplace, we receive the buyer's name, shipping address and what they bought, so you can fulfill the order and buy a label.
Refund requests. If you use a storefront, refund requests and their status. Payments and refunds are processed by Stripe; we don't store full card numbers.
Usage and technical data. Logs of sync jobs and errors, IP address, browser type and the pages you use, so we can keep the service running and fix problems.
Camera images. The Scan feature uses your device camera to recognize a card. Images are processed in memory to read the card and are never written to disk or stored in our database.

How we use it

To run the service: sync inventory and prices with the marketplaces you connect, pull in orders, print pick lists and buy shipping labels.
To show you insights about your own shop, such as sales velocity, market value and cost basis.
To provide support, send service and billing emails, and keep accounts secure.
To find and fix bugs and improve features.

We do not sell your personal information or your buyers' information, and we don't use it for advertising.

Marketplaces you connect (Mana Pool, eBay, and TCGplayer once available) receive your listings, quantities and prices because that's what syncing means.
EasyPost receives shipping addresses and package details when you buy a label. Labels are billed to your own EasyPost account.
Stripe processes subscription payments and storefront refunds.
Infrastructure providers that host and operate the service for us: Amazon Web Services (hosting), a self-hosted database we operate ourselves, and Google Workspace (order and account emails).
Legal reasons. If the law requires it, or to protect the rights and safety of our users or others.
Business transfers. If CardBoardCounter is sold or merged, your data would move with it under this policy.

Each shop's data and connections are kept separate. Other CardBoardCounter users can't see your inventory, orders or credentials.

Your buyers' information

When you sync orders, we handle your buyers' names and addresses on your behalf, only to help you fulfill those orders. You remain responsible for your obligations to your buyers under the marketplaces' rules and the law. We keep order details for 12 months so your order history stays useful, then anonymize buyer addresses — sooner if you ask us to delete them.

Retention and security

We keep your account and shop data while your account is open. If you close your account, we delete or anonymize it within 30 days, except where we need to keep records for legal, tax or fraud-prevention reasons.

Connection credentials (your Mana Pool, eBay and EasyPost credentials) are encrypted at rest, all traffic to the app uses HTTPS, and access to production data is limited to the people who operate the service. No system is perfectly secure, and we'll notify you as the law requires if a breach affects your data.

Your choices

Clear your stored Mana Pool or EasyPost credentials at any time in Integrations by blanking the field and saving. We stop syncing immediately.
Export your inventory and order history from the app, or ask us for a copy.
Ask us to correct or delete your information by emailing csmith@kalosmedia.com.
Depending on where you live, you may have additional rights under local law. We'll honor requests as the law requires.

Cookies

We use cookies that are needed to keep you signed in, and browser storage to remember settings such as dark mode. We don't use any analytics tools.

Children

CardBoardCounter is a business tool and isn't directed to children under 13. We don't knowingly collect their information.

Changes to this policy

If we make material changes, we'll update the date above and let you know by email or in the app before the changes take effect.

Contact us

KalosMedia LLC
Pelahatchie, MS
csmith@kalosmedia.com