Privacy Policy

Effective: 9 October 2026

Cardero ("we") is an app that identifies trading cards from photos and estimates their value. It is operated by SubSky, LLC, a Delaware limited liability company. This policy says what we collect, why, who processes it, how long we keep it, and what you can do.

What we collect

Card photos you scan or pick

• We store the photo with your scan.

• We send it to our recognition partners to identify the card and estimate its value.

• Please photograph cards, not people.

Scan results

What we store for each scan:

• the identified card and the alternatives;

• the estimated values;

• the date.

What we store for your collection:

• the cards you add;

• your collection names;

• each card's saved version.

Your onboarding answers

• What you collect: sports, Pokémon, other trading cards, or a mix.

• Your age range: under 18, 18 or older, or "prefer not to say". We never ask for a birth date.

• What they are used for:

  • the default scan mode and theme;

  • deciding whether features meant only for adults may be shown to you.

An anonymous account

• The app signs in anonymously through Google Firebase, with no name, email or password.

• Our database knows the account only by a random internal ID.

Technical data

• Your IP address, in hashed form only. It is a keyed one-way hash; the plain address is never stored. We use it to limit abuse of free scans.

• An app-integrity token from Firebase App Check. It is also stored only in hashed form.

Not collected

• No advertising identifiers.

• No contacts.

• No location.

• No analytics or tracking SDKs.

Why

• To identify cards and estimate their value.

• To keep your history and collections.

• To prevent abuse of the free allowance.

• To keep the service secure and working.

We do not sell your data and do not use it for advertising.

Purchases

• Cardero sells nothing inside the app today.

• If you buy a subscription on our website, we collect what we need to sell and support it: your email address, your purchase and billing records, the card details our payment processor returns (card brand and last four digits), fraud-prevention signals such as IP address and device type, and, if you came from an ad, the campaign details in the link.

• Card payments are processed by Stripe. We never receive your full card number.

Our website

cardero.me uses no advertising or analytics cookies and no tracking tools. Cloudflare, our host, records standard request data (such as IP address and browser type) to keep the site available and to stop abuse, and may set a strictly necessary security cookie.

Who processes it

• Cloudflare hosts our servers, database and photo storage.

• Google (Firebase Authentication, App Check, and the Gemini API) handles anonymous sign-in, app integrity and part of the recognition and value estimates.

• Ximilar handles card recognition.

These providers process data on our behalf, under their own terms. Card photos are not shared with other users.

How long we keep it

• Photos and scan records: kept indefinitely. This includes after you delete your account; see below.

• Backups of our database: kept for up to 12 months.

• Hashed network data: kept so that the free allowance cannot be reset by creating new accounts.

Deleting your account

Settings → Delete account closes your account at once. When you delete it:

• the link between you and your scans is removed;

• your photos and scan records are kept without any link to you;

• your hashed IP address is unlinked from them;

• backups made before the deletion keep the old link until they expire, after up to 12 months.

This app then starts over with a new anonymous account.

Children

• Cardero is not directed to children under 13.

• Users under 18 can scan and keep a collection.

• Features meant only for adults are shown only to users who say they are 18 or older, never to "under 18" or "prefer not to say".

Your choices and rights

• You can delete your account in the app.

• You can change your age range and appearance in Settings.

• Depending on where you live, you may have further rights, such as access or objection. Contact us at support@cardero.me.

Changes

We will post changes here and update the effective date.

Contact

SubSky, LLC · 131 Continental Dr, Suite 305, Newark, DE 19713, United States · support@cardero.me · https://cardero.me/support