Privacy

Short version: I collect what is needed to post you a parcel, and nothing else.

What is collected

When you place an order: your name, email, optionally a phone number, and — if you want it posted rather than picked up — a shipping address. When you send a buylist request: your name, email and the list itself.

That is the complete list. There is no account to create, no password stored, and no payment details collected anywhere on this site, because payment happens by e-transfer outside of it.

What is not collected

No analytics, no advertising pixels, no third-party trackers, no cookie banner — because there are no tracking cookies to consent to. Your cart is kept in your own browser's local storage and is never sent anywhere until you place an order.

Who else sees it

The database and hosting providers that run this site, and the email provider that delivers your confirmation. Card images and prices are fetched from Scryfall, but that is a request from the server for card data — it carries nothing about you.

Your information is never sold, rented, or shared for marketing. There is no mailing list.

How long it is kept

Order records are kept for six years, because Canadian tax rules require business records to be retained that long. Buylist requests that don't turn into a deal are deleted once they are clearly stale.

Your data

Ask and I will tell you exactly what I hold about you, correct it, or delete anything not legally required to keep. It is one person and a database — there is no process to go through.

Contact

Reach me at the address on your order confirmation, or through the buylist form. The Crib operates from Fort Langley, BC, Canada.