Privacy Policy.
Last updated: May 2026CardPulse does not collect personal data beyond what is necessary for the service to function. We do not sell data to third parties.
1. Who We Are
CardPulse is a service that displays TCGPlayer prices on cardmarket.com. Available at card-pulse.com.
2. Data We Collect
We collect only the following data required to operate the service:
- Email address – to create and manage your account
- Password (hashed) – for secure authentication (never stored in plain text)
- Payment data – processed exclusively by Stripe; we store no credit card data
- Stripe Customer ID – to link your account to your subscription
- Subscription status & period – to verify whether your account has premium access
3. What We Do Not Collect
- We do not track which cards you view on Cardmarket
- We do not store search queries or browsing data
- We do not use third-party advertising trackers or analytics services
- We do not share data with third parties, except Stripe for payment processing
4. How the Browser Extension Works
The CardPulse browser extension:
- Reads the card name and set code from Cardmarket pages to fetch price data
- Sends requests to our API at pokescout.onrender.com
- Stores your authentication token locally in your browser (chrome.storage.local)
- Does not transmit any browsing history or personal data
5. Third-Party Services
Stripe – processes payments. Stripe's privacy policy applies to payment data. We never see or store your full card details.
Neon – hosts our PostgreSQL database in the EU.
Render – hosts our backend server.
Resend – sends transactional emails (password reset, contact forms).
6. Data Storage & Security
Your data is stored in a PostgreSQL database hosted in the EU. Passwords are hashed using bcrypt. We use HTTPS for all connections. We retain your data for as long as your account exists. You can request deletion at any time.
7. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and data
- Object to or restrict processing
- Data portability
To exercise these rights, contact us at info@card-pulse.com.
8. Cookies
We do not use cookies. Authentication uses JWT tokens stored in your browser's local storage, not cookies.
9. Changes to This Policy
We may update this policy occasionally. Changes will be posted on this page with an updated date.
10. Contact
For privacy-related questions: info@card-pulse.com