MembershipPrivacy Policy
Last updated: October 29, 2026
This policy covers thecardwall.com, including the collector site (memberships, the Crane, the Alley, the Binders, Rain) and the TheCardWall Shop at thecardwall.com/shop. The site is operated by Point One Five Consulting, LLC, doing business as TheCardWall. It is written to be read. If anything is unclear, email support@thecardwall.com.
The short version
The collector site has no accounts and asks for no email. It reads public blockchain data for the wallet you connect. The Shop collects what is needed to charge your card and ship a box to you, shares it only with the companies that process the payment, hold and ship the card, and send the emails, and does not sell it to anyone.
Collector site: what we collect
Wallet address and on-chain activity. When you connect a wallet, we read its public address and the public blockchain records tied to it (memberships, cards, token balances, pulls, rain drops) in order to show you your wall, binder and history. This data is public on Robinhood Chain by design; connecting does not create an account with us and we do not learn your name or email from it.
Preferences on your device. Settings such as sound and music volume, delivery wallet choice and display options are stored in your browser's local storage under keys that begin with tcw. They never leave your device and you can clear them in your browser at any time.
Aggregate analytics. We use Vercel Analytics to count page views and measure performance. It is cookieless and reports aggregates (pages, countries, device types); it does not identify you.
Server logs. Our hosting providers keep standard request logs (IP address, user agent, time, path) for security and rate limiting. They are retained for a short period and not used to profile you.
Shop: what we collect
At checkout. Payment is handled by Stripe on a Stripe-hosted page. Stripe collects your email address, name, shipping address, phone number and card details. Your card number never reaches our servers; we receive a confirmation from Stripe with your email, name, shipping address, the amount paid and a payment reference. If you add a gift note, we receive that too.
Order record. We keep the order: your email, the recipient name and address, the boxes bought, amounts, the status of fulfilment and shipping, tracking numbers, and the emails we sent you. The order page at thecardwall.com/shop/order is reachable by anyone who has its link; the link is in your receipt email and is not listed anywhere.
Shop access cookie. While the Shop is in preview, a cookie named tcw-shop remembers that you entered the access code. It holds no personal data and expires after 30 days.
Cart. Your cart is stored in your browser's local storage until you check out or clear it.
Who we share it with
Stripe (payment processing, receipts, fraud prevention, refunds). Stripe is the merchant processor and keeps payment data under its own privacy policy.
Collector Crypt (the vault that holds, insures and ships the cards). To deliver a box we pass the recipient name, shipping address, the phone number collected at checkout, and the buyer email for carrier notifications.
Shipping carriers (USPS, UPS, FedEx or the carrier the vault selects) receive the recipient name, address and phone needed to deliver and track the package.
Resend (transactional email). We use it to send shipping, delivery and refund notices to the email on your order.
Hosting. The site runs on Vercel; the fulfilment service runs on Railway; images are served from Cloudflare R2. Each processes data only to run the service for us.
We do not sell personal information, we do not share it with advertisers, and we do not use it for advertising. We will disclose information if the law requires it or to respond to a payment dispute, in which case we share what is needed to show the order and its delivery.
Why we process it
To fulfil the order you placed (contract), to meet accounting, tax and payment-network obligations (legal obligation), to prevent fraud and handle disputes (legitimate interest), and to show you your own on-chain holdings when you connect a wallet (your request).
How long we keep it
Order records are kept for as long as needed for accounting, tax and payment-dispute obligations, after which they are deleted or reduced to figures that no longer identify you. Analytics are aggregate from the start. Browser storage and the access cookie are under your control.
Your choices and rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it, subject to records we must keep for tax and dispute purposes. Email support@thecardwall.com from the address on your order. Residents of states with consumer privacy laws (including California) have the rights those laws provide, and we honour them on request; we do not sell or share personal information for cross-context advertising, so there is nothing to opt out of on that front.
Security
Card data is handled entirely by Stripe (PCI DSS Level 1). Our services talk to Stripe, the vault and the email provider over TLS with signed requests; order data is stored on access-controlled infrastructure; staff access is limited to what fulfilment requires. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Children
The site and the Shop are for adults. We do not knowingly collect information from anyone under 18; if you believe a minor has placed an order, contact us and we will cancel it and delete the record.
Changes
When this policy changes, the date at the top changes with it. Material changes to how Shop data is used will also be sent to the email on any open order.
Contact
Point One Five Consulting, LLC, doing business as TheCardWall, 54 State Street, Ste 804 #15725, Albany, NY 12207. support@thecardwall.com. Shop purchase terms are at thecardwall.com/shop/terms; site terms are at thecardwall.com/terms.