Privacy Policy
Last updated: June 24, 2026
The short version: We collect what's needed to run a marketplace. We don't sell your data. We use Stripe for payments (they handle your card info — we never see it). You can delete your account and data at any time.
1. Who We Are
GEMLINE is a trading card exchange platform. When we say "GEMLINE," "we," "us," or "our," we mean the GEMLINE platform and its operators. Contact us at privacy@gemline.auction.
2. What We Collect
Information you give us
| Data | Why we collect it |
|---|
| Email address | Account creation, transaction receipts, important notices |
| Username / handle | Your public identity on the platform |
| Card listings | Player, grade, set, cert number — to list your card for sale |
| Transaction history | Purchases, sales, trades, bids — your record of activity |
| Card photos | Images you upload of your cards for listings |
| PSA / BGS cert numbers | Optional — for verification badges on your listings |
Information collected automatically
- IP address — for fraud prevention and security
- Browser type and device — to optimize the experience
- Pages visited and actions taken — to improve the platform
- Timestamps — for bids, listings, logins
What we do NOT collect
- Payment card numbers, bank details (handled entirely by Stripe — we never see them)
- Government ID or SSN (unless required for large payouts per IRS rules)
- Precise GPS location
3. How We Use Your Data
- Running the marketplace — listing cards, processing transactions, managing escrow
- Account security — detecting fraud, suspicious logins, and shill bidding
- Customer support — resolving disputes, answering questions
- Price data — completed sales (anonymized) contribute to market price calculations
- Communications — transaction confirmations, outbid alerts, support replies
- Legal compliance — tax reporting, responding to lawful requests
We do not use your data to train AI models. We do not sell your data to third parties.
4. Third-Party Services
5. Data Retention
- Account data — kept while your account is active
- Transaction records — kept for 7 years for tax/legal compliance, even after account deletion
- Anonymized price history — kept indefinitely (no personal data, just sale prices)
- Support communications — kept for 2 years
6. Your Rights
- Access — request a copy of all data we hold on you
- Correction — update inaccurate information in your account settings
- Deletion — delete your account at any time from settings. Transaction records required by law are retained but de-identified.
- Portability — request your data in a machine-readable format
- Opt out of marketing — unsubscribe link in any email, or email us
To exercise any of these rights: privacy@gemline.auction
7. Cookies
GEMLINE uses minimal cookies:
- Authentication token — keeps you logged in (stored in localStorage, not a cookie)
- No advertising trackers — we don't use Google Ads, Facebook Pixel, or similar
- No third-party analytics cookies — we use our own anonymized analytics
8. Security
We protect your data with:
- Passwords hashed with industry-standard algorithms — we cannot recover your password
- All traffic encrypted via HTTPS/TLS
- Database access restricted to authenticated services only
- JWT tokens for stateless, secure authentication
No system is 100% secure. If we detect a breach affecting your data, we'll notify you within 72 hours.
9. Children
GEMLINE is not for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we'll delete it.
10. Changes
We'll notify you of material changes to this policy by email or in-app notice at least 14 days before they take effect.
Contact
Privacy questions: privacy@gemline.auction