Privacy Policy
Processing of personal data under the GDPR (EU 2016/679).
1. Controller
Responsible for the processing of your personal data is Nerd Vault. You can reach us anytime by email at support@nerdvaultcards.com or via the channels listed on the Contact page (Instagram, TikTok, WhatsApp).
2. Scope
This privacy policy applies to the collection and processing of personal data when visiting our website, placing orders, using the AI Scanner / Pre-Grading, the Community and subscribing to the newsletter. Processing carried out by third parties (e.g. payment or shipping providers) is governed by their own privacy policies.
3. Data we collect
- Order and contact data: name, email, shipping and billing address, phone (optional), order and payment data.
- Account: email, password (encrypted), profile settings, order history, wishlist, loyalty points and referral code.
- Scanner / Pre-Grading: uploaded card images and the resulting analysis.
- Community: forum posts, marketplace listings and reviews you actively publish.
- Technical data: IP address, browser, device and connection data necessary for operation and security.
4. Purposes and legal basis
We process your data (a) to perform the purchase contract including payment, shipping and returns (Art. 6(1)(b) GDPR), (b) to meet legal obligations such as invoicing and retention (Art. 6(1)(c)), (c) on the basis of your consent for the newsletter and voluntary scanner features (Art. 6(1)(a)) and (d) on the basis of our legitimate interest in security, troubleshooting and improvement (Art. 6(1)(f)).
5. Sharing and recipients
Your data is only shared with processors necessary for performance: the payment provider (Base44 Payments / Stripe), shipping carriers, hosting and email providers, and, where applicable, the AI analysis provider. All processors are bound under Art. 28 GDPR. We never sell your data to third parties.
6. Payments
Payment is processed by Base44 Payments / Stripe. Payment details (e.g. card information) are entered and processed directly with the payment provider and never stored on our servers. We only receive the order and transaction data needed for fulfilment.
7. Newsletter
When you subscribe to the newsletter, we process your email address on the basis of your explicit consent (double opt-in) to send you news, pre-orders and offers. You can unsubscribe at any time via the link in each email or in your account; the consent lapses for the future.
8. AI Scanner and Pre-Grading
To use the AI Scanner you upload card images, which are processed to generate the analysis and damage report and a value/condition estimate. When you use an account, scans are linked to your profile; you can view and request deletion of scan data.
9. Cookies and web analytics
We use technically necessary cookies for the website to operate and aggregate analytics cookies to improve the service. Marketing cookies are only activated after your consent. You can manage your preferences in your browser at any time.
10. Retention
We retain your data only as long as needed for the purpose. Purchase and invoicing data is kept for the statutory retention periods (generally 10 years). Data processed on the basis of consent is deleted when you withdraw that consent.
11. Your rights
You may access, rectify, erase (‘right to be forgotten’), restrict, object to and port your data, and withdraw consent at any time. To exercise these rights, write to support@nerdvaultcards.com. You also have the right to lodge a complaint with the competent data protection authority.
12. Minors
Our offers are aimed at persons aged 18 or over. Orders and use of the scanner by minors require the consent of their legal representatives.
13. Changes
We reserve the right to update this privacy policy to reflect legal or technical developments. The current version is always published on this page.
Got more questions?
Contact support →Nerd Vault
