Privacy Policy

Overview

CardShipper is operated by Mecc Products LLC. CardShipper helps TCGplayer sellers create shipping drafts, preview rates, buy labels through their connected shipping account, and manage subscription access. This policy explains what information CardShipper collects, how it is used, and which service providers help operate the product.

Information We Collect

CardShipper collects only the information needed to provide account, billing, shipping, support, security, and diagnostic functionality.

• Account email, authentication identifiers, and session information from Supabase Auth.
• Subscription status, Stripe customer identifiers, checkout identifiers, invoice references, and billing portal access data from Stripe.
• Sender address settings, package preferences, label format preferences, and other setup details you enter.
• Recipient names, shipping addresses, marketplace order identifiers, and order-related details from selected TCGplayer orders or pasted address blocks.
• Shipment metadata such as carrier, service, rate, tracking code, label URL, shipment status, and related operational history.
• Shipping credential metadata such as test or production mode and safe key fingerprints. Full shipping API keys are handled through backend credential flows and should not be returned to the extension after saving.
• Operational logs needed to diagnose failed checkout, rate preview, label purchase, authentication, subscription, or support issues.

How We Use Information

• Authenticate users and keep account access tied to the correct CardShipper account.
• Determine whether paid extension features should be available based on subscription status.
• Create rate previews, shipping labels, tracking records, and shipment history.
• Save user-selected sender and workflow preferences.
• Provide support, troubleshoot failures, improve reliability, and protect against abuse.

Service Providers

CardShipper uses third-party providers only as needed to operate the product.

• Supabase provides authentication, database storage, Edge Functions, and backend infrastructure.
• Stripe provides checkout, subscription billing, invoices, customer portal access, and payment processing. CardShipper does not store full payment card numbers.
• EasyPost provides rate previews, label purchases, carrier label URLs, tracking information, and related shipping services through your connected EasyPost account.

Chrome Extension Data Use

The CardShipper extension reads selected TCGplayer order or address content only when you start a CardShipper workflow, such as grabbing an address or loading selected orders. CardShipper does not sell user data, does not use user data for personalized advertising, and does not transfer user data for unrelated marketing purposes.

Security

CardShipper transmits data over HTTPS. Shipping API keys are handled by backend functions and encrypted backend storage. You are responsible for keeping your account password, EasyPost account, Stripe account access, and Chrome profile secure.

Data Retention and Control

CardShipper keeps account, subscription, setup, shipment, and diagnostic data as long as needed to provide the service, maintain records, comply with obligations, resolve disputes, and protect the product. You can manage billing through the Stripe customer portal. For account or stored data deletion requests, contact support.

Contact

For privacy questions or account data requests, contact support@cardshipper.app.