1. Overview
CardStrata maintains transparent protocols regarding how long data is stored, how backup cycles operate, and how information is permanently erased when an account is closed or deleted.
2. Active Account Data Lifecycle
As long as your CardStrata account remains active, we store and maintain your collection records, custom tags, binder priorities, and preference settings in our primary PostgreSQL database. This ensures continuous access to your historical collection tracking and portfolio valuation charts.
3. Account Deletion & Purging Protocols
If you choose to delete your CardStrata account, the following purging timelines apply:
- Immediate Account Revocation: Your login credentials, API session tokens, and active refresh tokens are immediately invalidated.
- Primary Storage Erasure: Within 30 days of account deletion confirmation, all associated user binder records, custom tags, tagged card variants, and account settings are permanently removed from primary database tables.
- Backup Purge Cycle: Database snapshots taken for disaster recovery are retained in encrypted, access-restricted storage for up to 90 days before automated overwrite cycles permanently purge snapshot blocks.
4. Non-Personal & Reference Data
System reference data—such as public card expansion catalogs, species dex indexes, illustrator listings, and historical market price snapshots—are aggregated and non-personal. This reference data is retained indefinitely as part of the core CardStrata index.
5. Security & Access Safeguards
We implement administrative and technical security measures to prevent unauthorized data access or loss:
- Strict principle of least privilege access for internal systems.
- Automated vulnerability scanning and code linting pipelines.
- Encrypted backup storage and rate-limited API endpoints.
6. Inquiries
For inquiries regarding data retention schedules or to submit an account erasure request, please contact our team at:
Email: support@cardstrata.com