Private means private.

1. Information we collect

We may collect an account identifier, verified email address, full name, public screen name, optional profile text, preferred contact method, cellphone number, mailing address, card photographs, listing details, private trade messages, trade status, shipping details, reports, moderation records, and beta feedback. Payment status from an older enrollment may remain in operating records, but the current beta does not initiate payment.

Our authentication, hosting, storage, email, and security providers may process standard technical data such as IP address, device and browser type, requested page, timestamps, cookie identifiers, and security events.

2. What is public

Only an approved screen name, approved profile information, card listing details, and card photographs are intended to appear publicly. Full names, email addresses, cellphone numbers, mailing addresses, authentication identifiers, private messages, and moderation records are not public profile information.

3. Mailing information

A mailing address is intended to unlock only after both collectors accept the same trade. It is then visible only to those two collectors and authorized administrators who need it for safety, support, or dispute review. Never place an address in a public listing, screen name, bio, or ordinary message.

4. How information is used

• Authenticate approved beta testers and operate account access.
• Create listings, match cards, deliver messages, and document trades.
• Release shipping information after mutual acceptance.
• Investigate safety concerns, enforce rules, prevent fraud, and preserve audit records.
• Provide support, measure beta performance, and improve the product.
• Meet legal, security, accounting, and recordkeeping obligations.

5. When information is shared

Information may be processed by service providers that support authentication, hosting, data storage, file storage, security, communications, and prior payment records. We may also disclose information when required by law, to protect a person or the service, to investigate suspected fraud or abuse, or as part of a lawful business transfer. We do not sell personal information.

6. Cookies

The Card Exchange uses essential cookies for authentication, session security, and requested functionality. The beta does not use advertising cookies. If analytics or optional cookies are added later, this notice and any required consent controls will be updated first.

7. Retention and deletion

Active account and trade information is kept while needed to operate the beta. Some security, moderation, transaction, and dispute records may be retained after account closure when reasonably necessary to prevent abuse, resolve an open matter, or meet legal obligations. Card images and profile content should be removed or de-identified when no longer operationally needed, subject to those exceptions.

To request access, correction, export, or deletion, use the Duke2 Innovations contact form and choose a privacy or data request. Provide the email used for Card Exchange. We will verify identity before acting and explain any information that must be retained.

8. Age restriction

The current beta is limited to adults age 18 or older. Minors may not create an account, exchange addresses, or participate in private trade messages. If information from a minor is discovered, access will be suspended and the information reviewed for deletion and appropriate safety action.

9. Security and changes

We use access controls, authentication, restricted administrative access, and service-provider security measures. No online system can guarantee absolute security. Material policy changes will be dated and presented to beta participants before continued participation is required.