Privacy notice

Cardboard Cabal SG · Updated 3 November 2026

Information used for your order

We collect your name, Telegram username or WhatsApp number, selected cards, fulfilment choice and any order notes you provide. We do not ask for your email or collect card payment details on this website. Please do not enter payment credentials or identity documents in order notes.

We use this information to process card requests, communicate with you, confirm payment, fulfil your order and handle order enquiries. If you choose registered mail, we arrange your recipient name and postal address with you directly. Necessary mailing details are shared with the postal provider to fulfil your order.

Storage and service providers

Orders are stored in the shop database, with management restricted to the approved owner account. The website uses OpenAI Sites and Cloudflare hosting and storage services. Hosting providers may process technical request information to operate and protect the service. Reservation rate limiting uses a short-lived hashed network identifier.

Order records and owner-downloaded backups are retained for fulfilment, customer support and business record keeping. Records are not automatically deleted when a request is cancelled. Contact us to ask about your stored information, request a correction or request deletion; we will review what can be removed and explain if records need to be retained.

Your browser and private status link

Your basket, saved cards, saved decklists and recent private order links are stored in your browser. Clearing browser storage removes those local records but does not delete a submitted order. Anyone with a private status link can view that order’s items, status and customer-visible shop notes. Keep the link private. Your name and contact details are not included on the public status page.

Aggregate shop activity

We count daily page loads, deck matches, basket additions and request-form openings to improve the shop. These counters store only the date, action type and count, with no visitor identifier, decklist, contact details or browsing history. Counters are retained for up to 90 days. The site skips these activity events when your browser enables Do Not Track or Global Privacy Control.

Telegram and WhatsApp

After you send a request, the site opens Telegram with an order message prepared for @CardboardCabalSG. You must tap Send to deliver it. The draft contains your order details and private status link. Communications sent through Telegram or WhatsApp are also handled under those services’ own privacy policies.

Contact

For order enquiries and privacy requests, message @CardboardCabalSG on Telegram. Please include your order reference where relevant.