Privacy Policy

1. Who We Are

GrandLine Vault ("we," "our," or "us") operates the website at grandline-vault.vercel.app. We provide a physical One Piece Trading Card Game pack-opening service. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform.

For privacy inquiries, contact us via our Discord server.

2. Information We Collect

Information you provide directly:

• Account information — name, email address, and username collected when you sign up via Clerk authentication
• Shipping address — name, street address, city, state, ZIP code, and country, collected only when you request physical card delivery
• Communications — messages you send us through Discord or support channels

Information collected automatically:

• Account activity — pack openings, credit balance, card collection, marketplace transactions, and order history stored in our database
• Payment data — payment transactions are processed by Stripe and PayPal. We do not store your credit card number, CVV, or full bank account details on our servers
• Usage data — browser type, IP address, and pages visited, collected by our hosting provider (Vercel)

3. How We Use Your Information

• To create and manage your account
• To process credit purchases and marketplace transactions
• To fulfill physical card shipping orders and send tracking information
• To send transactional emails (shipping confirmations, order cancellations, refund notices)
• To detect and prevent fraud, abuse, and violations of our Terms of Service
• To respond to your support requests
• To maintain the security and integrity of our platform

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Service Providers

We share your information with the following trusted service providers only to the extent necessary to operate our service:

5. Cookies and Tracking

GrandLine Vault uses the following types of cookies and local storage:

• Authentication cookies — set by Clerk to keep you signed in (essential; cannot be disabled)
• Local storage — used to cache your card collection, pack preferences, and shipping cart locally in your browser for performance
• Analytics — Vercel may collect anonymized usage data for infrastructure monitoring

We do not use advertising cookies or sell data to ad networks.

6. Data Retention

• Account data is retained for as long as your account is active
• Shipping addresses from completed orders are retained for 3 years for tax and legal compliance
• Payment records are retained by Stripe/PayPal per their own data retention policies
• If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — request your data in a portable format
• Opt-out of sale — we do not sell personal data (California residents: this right is satisfied)
• Withdraw consent — you may close your account at any time

To exercise any of these rights, contact us via Discord. We will respond within 30 days.

8. Children's Privacy

GrandLine Vault is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has provided personal information, we will delete that information and terminate the account promptly. If you believe a minor has used our service, please contact us immediately.

9. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Payment processing via PCI-DSS compliant providers (Stripe, PayPal)
• Authentication managed by Clerk with industry-standard security practices
• Database access restricted via row-level security policies

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Users

GrandLine Vault is operated from the United States. If you are accessing our service from the European Union, United Kingdom, or other regions with data protection laws, please note that your information may be transferred to and processed in the United States. By using GrandLine Vault, you consent to this transfer.

EU/UK Users (GDPR): Our legal basis for processing your data is contract performance (to provide the service you signed up for) and legitimate interests (fraud prevention, security). You have rights under GDPR including those listed in Section 7 above.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of GrandLine Vault after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, data requests, or concerns, please reach out via our Discord server. We aim to respond to all inquiries within 30 days.