Privacy policy

Updated September 11, 2026

Cardboard Pilot is run by TyTy Sports Cards. This page says what we keep, why, and how to get rid of it.

What we store

Your account: email, username, password (hashed), profile details you add, and the cards, photos, and messages you create on the site.
Payments: handled by Stripe. We keep your Stripe customer and subscription IDs, never card numbers.
AI identification: the card photos you upload are sent to eBay's image search and Google's Gemini to name the card. They are not used to train anything on our side.
Live comps (Chrome extension and Mac app): when you press Capture, the part of the stream you boxed is sent to cardboardpilot.com to name the card (eBay image search and Google's Gemini, as above), then deleted. Sold prices are read from eBay pages — including eBay's Terapeak research — inside your own eBay session, on your device; your eBay login never reaches us. The extension only runs on cardboardpilot.com, ebay.com and whatnot.com, keeps its settings (box shape, price spot, Autofind) in Chrome's local storage, and does not track browsing, collect analytics, or sell or share any data.

Connecting uses eBay's own sign-in. We never see your eBay password.
We store the access token eBay gives us (encrypted), your eBay username, your business-policy choices, and the listings you create through Cardboard Pilot, so we can post them and keep their status in sync.
We only read and write listings, orders, and account settings needed for that. Nothing is shared with anyone else.
Disconnect any time from Settings → Selling; that deletes the token. Revoking access from your eBay account does the same. When eBay tells us a member has asked for their data to be deleted, we delete everything tied to that eBay account.

One session cookie keeps you signed in. No ad tracking.

Email hello@cardboardpilot.com from your account email and we remove the account, its cards, photos, messages, and any connected eBay data.