Privacy Policy
At CardVex, we value your privacy. This policy outlines what data we collect and how we handle it.
Data Collection
When you sign in with Discord, we collect and store your Discord profile information, including your name, email address, and profile picture. We also store your IP address and browser user agent for session security. Your searches on CardVex are not logged or tracked.
Authentication
We use Better Auth to manage authentication. When you sign in via Discord OAuth, we receive and store OAuth tokens (access tokens and refresh tokens) to maintain your session. These tokens are stored securely and are only used for authentication purposes.
Analytics
We collect basic analytics about how visitors use CardVex, such as page views, referrer information, browser type, device type, and UTM parameters. This helps us understand where traffic comes from and how people discover the site. Links shared by our Discord bot may include UTM parameters, which may contain a Discord server identifier, so we can see which communities are driving visitors to CardVex. Your searches and queries on CardVex are not logged or tracked.
Referral Program
If you participate in our referral program, we create and store a referral code linked to your account and generate a share link (cardvex.app/r/CODE). When someone visits CardVex via your referral link, we capture the referral code from the URL parameter (ref or referral_code), from the x-referral-code header during checkout, and from Stripe checkout metadata. To preserve attribution across sessions, we store the code in your browser's localStorage (cardvex_referral_code) until checkout completes or you clear it. We also record referral relationships (referrer, referred user, status, and timestamps for qualification and reward) and use Stripe customer-balance credits to apply free-month rewards. You can clear the stored code at any time from the pricing page banner or by clearing site data.
Cookies
We use essential cookies to manage your authentication session. These cookies are required for the sign-in functionality and do not track you across the web. If you use a referral link, we also store the referral code in localStorage (cardvex_referral_code) to attribute your eventual Pro subscription to the referrer - you can clear it at any time via the pricing page or your browser's site data settings.
Third-Party Services
We use Discord for authentication. Please review Discord's Privacy Policy to understand how they handle your data. We use Stripe for payments and referral reward credits (customer-balance transactions); please review Stripe's Privacy Policy for their handling of payment data. We also fetch card data and pricing information from third-party sources, which may have their own privacy policies.
Data Retention
Your account information is retained until you delete your account or request its removal. Session data is automatically deleted when you sign out or when the session expires. Referral records (code, referrer/referred link, qualification and reward timestamps) are retained for program integrity and fraud prevention until you delete your account or we discontinue the program.
Contact
If you have any questions about this privacy policy, please reach out via our Discord.
Last updated: August 2026