Privacy Policy
Last updated 27 September 2026
CardKaki (cardkaki.net) helps you compare Magic: The Gathering card prices across Singapore shops. This policy explains what we collect, why, and how we look after it. “We” and “us” mean CardKaki. Questions? Email cardkakisupport@gmail.com.
At a glance
| What | Why | How long |
|---|---|---|
| The card lists you search, and basic information from your browser such as your IP address | To show you prices, keep the site running well, and learn which cards people want | Your IP address is scrambled after 90 days; the rest is kept for statistics |
| Your Google account ID, email and saved lists — only if you sign in | So your saved lists stay yours and open on any device | Until you delete them or your account, or after 365 days without using it |
| Feedback you send | To reply and make CardKaki better | Until we’ve dealt with it; ask us and we’ll delete it |
| Share links you create | So anyone with the link can see that list | Permanent, so links keep working |
Who we are
CardKaki is an independent website based in Singapore. Email us at cardkakisupport@gmail.com about anything in this policy, including your personal data.
Signing in with Google
Signing in is optional. You only need it to save card lists. This is how we handle your Google information when you do.
What we request
Only your Google account ID and your email address. We do not request your name, profile picture, contacts, or anything else from your Google account.
How we use and store it
Your account ID tells us which saved lists are yours. Your email address is shown in Settings so you can see which account you’re signed in with. We never send you marketing emails.
It’s stored securely on our server in Singapore. When you choose Delete account in Settings, your account and all your saved lists are deleted straight away. An account that hasn’t been used for 365 days is deleted automatically. Backup copies are deleted within 30 days, and a deleted account is never brought back from a backup.
Who we share it with
We don’t share it with anyone. We don’t sell it, use it for advertising, or use it to develop, improve or train artificial intelligence or machine-learning models. Our hosting provider stores it for us, only as part of running the website.
CardKaki’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we collect when you use CardKaki
We collect the card lists you search, the settings you pick, and basic information your browser sends, such as your IP address and browser type. We use it to show you prices, keep CardKaki running safely, improve it, and study how people use it, including which cards and shops are in demand. After 90 days we replace your IP address with a scrambled code.
Saved lists
If you sign in, we keep the lists you save (their names, cards and the last prices you saw) until you delete them or your account, or the account goes unused for 365 days.
Feedback
When you send feedback we receive your message, any contact details you choose to give, and basic information about your browser, such as your IP address. If you tick Include my search, we also receive the card list and settings on your screen. We keep feedback while we act on it, and we’ll delete yours if you ask.
Share links
Pressing Share creates a public link to that card list. Anyone with the link can see it, so treat it as public. Share links contain nothing that identifies you, and they don’t expire.
Cookies and your device
CardKaki has no advertising or tracking cookies and no third-party analytics. If you sign in, we use cookies only to keep you signed in and to keep signing in secure. You stay signed in for up to 90 days, or until you sign out.
Your browser also remembers a few things on your device, such as the list you’re typing and your preferences, so they’re still there when you come back. They stay on your device, except what you send us when you search or save.
Sharing
Companies that help us run CardKaki, such as our hosting provider, use information only to provide their service to us. We may share overall insights that don’t identify anyone, such as which cards are in demand, with partners including local game stores. We may also share information when the law requires it. If we want to share personal information in a new way, we’ll update this policy first and ask for your consent where the law requires it.
Other websites
Card pictures load straight from Scryfall, a card database, so Scryfall sees your IP address, as any website does when it shows you an image. To check prices with shops, we send only card names. Links to shops and other websites are covered by those sites’ own privacy policies.
Security
We use encryption and limit who can access our systems. No website is completely secure, but we work hard to protect your information.
Your choices and rights
Under Singapore’s Personal Data Protection Act you can ask to see or correct your personal data, and you can withdraw your consent to its use (some features, such as saved lists, need it to work). You can delete your account and all your saved lists at any time in Saved lists → Settings → Delete account. For anything else, including deleting feedback you sent, email cardkakisupport@gmail.com. We aim to reply within 30 days.
Children
CardKaki isn’t meant for children under 13, and we don’t knowingly collect their personal data. If you think a child has given us personal data, contact us and we’ll delete it.
Changes to this policy
We may update this policy as CardKaki grows. When we do, we’ll change the date at the top, and for big changes we’ll also post a notice on the site.