Skip to main content

Legal

Privacy Policy

How we collect, use, and protect your data on CardHaven.

Last updated: February 23, 2026

This Privacy Policy explains how CardHaven ("we", "our", or "us") handles your information when you use our marketplace.

1. Information we collect

  • Account information: email address, username, password hash, and security settings such as MFA enrollment and trusted-device records.
  • Marketplace information: listings, orders, dispute records, deposits, withdrawals, and related transaction metadata.
  • Security metadata: IP and User-Agent fingerprints for abuse prevention and account protection. These values are stored as keyed hashes (HMAC), not plaintext.
  • Communications: account verification, login security messages, password reset emails, and operational notices.

2. How we use information

  • Provide and operate the marketplace.
  • Authenticate users and protect accounts.
  • Process deposits, withdrawals, and dispute workflows.
  • Detect fraud, abuse, and policy violations.
  • Meet legal, tax, accounting, and audit requirements.

3. Payment and blockchain processing

Crypto payments and blockchain confirmations may involve third-party processor services. We store processor and chain metadata required to track payment status and apply our confirmation policies.

4. How we share information

We do not sell your personal information. We may share data with:

  • Infrastructure and service providers (hosting, database, email, queueing, monitoring).
  • Payment and blockchain processor providers needed to execute transactions.
  • Law enforcement, regulators, or courts when legally required.
  • Successors in a merger, financing, or asset transfer, subject to legal safeguards.

5. Data retention and security

We use technical and organizational safeguards designed for marketplace and financial-style operations, including hashed security metadata, audit logging, and controlled admin access. We retain data for as long as needed to provide the service, resolve disputes, comply with law, and maintain financial records.

6. Your choices

  • You can update account profile and security settings from your dashboard.
  • You can request account closure; closure is implemented as a soft close for record integrity.
  • You can contact support to request data access or correction where applicable.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material updates will be posted on this page with a revised "Last updated" date.

8. Contact

For privacy questions, contact the support channel listed on the CardHaven site.