How we handle your information.
Sawtooth Consignment — Nampa, Idaho ·
[email protected]
Effective July 2, 2026 · Version 1.2
Sawtooth Consignment ("we," "us," or "our") operates a trading card consignment service — sports cards, Pokémon, and other trading card games — based in Nampa, Idaho. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
By creating an account or using our Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your name and email address. Account creation and authentication are handled by Clerk, a third-party identity provider. Clerk manages your password securely — we never receive, see, or store your raw password. We receive from Clerk only a user identifier and your basic profile fields (name and email).
1.2 Consignment Information
When you consign cards with us, we collect and record:
- The cards you send us (descriptions, quantities, and any notes you provide).
- Photographs we take of your cards during intake and listing.
- Metadata associated with those photos (card condition notes, listing details, sale prices).
- Communications related to your submission, such as messages about your batch.
- If you purchase a shipping label through the Service, the shipment details needed to generate it (such as your name, the ship-from address, and package weight and dimensions).
1.3 Payout Information
To pay you, we collect and store your payout destination — for example, the email address or handle associated with your PayPal or Venmo account. Payouts are executed through third-party payment platforms (currently PayPal, including payouts to Venmo). We do not collect or store your bank account numbers, card numbers, or tax identification numbers — where those are needed, you provide them directly to the payment platform under its own privacy policy. We receive from the platform only confirmation data about each payout (such as status and a transaction identifier).
1.4 Payment Information (Purchases from Us)
If you pay us for anything (for example, an inbound shipping label), the payment is processed by PayPal. Your card or account details go directly to PayPal — we never see or store them. We receive and retain only the order confirmation (amount, status, and a PayPal transaction identifier).
1.5 Communications
If you email or message us, we retain those communications to respond to your inquiry and for our records.
1.6 Usage Data
Our servers automatically collect standard technical logs when you visit our website, including your IP address, browser type, pages accessed, and timestamps. We use this solely for security monitoring and debugging. We do not use it for advertising or behavioral profiling.
2. How We Use Your Information
We use the information we collect only for the following purposes:
- To process your consignment — list your cards on eBay, handle buyer communication, ship sold cards, and pay you your share.
- To authenticate you when you sign in to your account portal (via Clerk).
- To send you transactional emails — batch received, card listed, sale completed, payout initiated.
- To generate listing copy — card photos are sent to Anthropic's Claude API to produce eBay listing descriptions. No personal information beyond the card image is included.
- To generate shipping labels and track inbound shipments, if you use those features.
- To meet our legal and tax obligations, including facilitating any tax reporting required by law.
- To detect fraud and protect the integrity of our service.
We do not use your information for advertising, behavioral tracking, or any purpose not listed above.
3. Third Parties We Share Information With
We share information only as necessary to operate the Service, and only with the providers listed below. We do not sell your information to anyone.
| Provider | Purpose | Their Privacy Policy |
|---|---|---|
| Clerk | Authentication & account management (sign-up, sign-in, password hashing). We never receive your raw password. | clerk.com/privacy |
| PayPal | Consignor payouts (including to Venmo) and payments you make to us (such as shipping labels). Your banking and card details go directly to PayPal. | paypal.com/privacy |
| eBay | Your cards are listed on eBay. The buyer transaction flows through eBay's platform and their terms apply to buyers. | ebay.com/privacycenter |
| Anthropic | Card photos are processed by the Claude API to draft listing titles and descriptions. No account or personal data is sent with the images. | anthropic.com/legal/privacy |
| Render | Application hosting — our website and services run on Render's infrastructure. | render.com/privacy |
| Supabase | Managed database hosting — account and consignment records are stored in Supabase-hosted Postgres. | supabase.com/privacy |
| Cloudflare | Card image storage and delivery (Cloudflare R2). | cloudflare.com/privacypolicy |
| Sentry | Error monitoring — when something breaks, Sentry receives technical error context, which can include your IP address and the request that failed. | sentry.io/privacy |
| Google Fonts | Font delivery — loading our web fonts discloses your IP address to Google, as with any content delivery network. | policies.google.com/privacy |
| EasyPost (when label purchase launches) | Shipping label generation and package tracking for inbound shipments you choose to purchase through us. | easypost.com/privacy |
All providers listed above are contractually required to handle your information in accordance with applicable privacy law and their own published privacy policies.
4. Cookies and Similar Technologies
We keep this minimal:
- Authentication cookies (set by Clerk) — such as
__session— keep you signed in to your account. These areHttpOnly,SameSite=Lax, andSecureover HTTPS. - Flask session cookie — stores lightweight site state. Also
HttpOnlyandSameSite=Lax. - Browser local storage — remembers device-level preferences like your theme choice. This data never leaves your browser.
We do not use advertising cookies, cross-site tracking cookies, or any third-party analytics cookies. You can block or delete cookies via your browser settings, though doing so may prevent you from staying signed in.
5. Data Retention
We retain your information only as long as necessary for the purpose it was collected or as required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account info (name, email) | Duration of account + 7 years after closure | IRS / consignment record-keeping |
| Payout records & payout destination | 7 years after most recent payout | Tax and audit compliance |
| Payment / label purchase records | 7 years | Tax, audit, and dispute resolution |
| Card photos & listing data | Indefinitely | Sales history; listing-quality improvement (no personal data in photos) |
| Server logs (IP, browser, page) | 90 days, then deleted | Security monitoring & debugging |
| Legal-acceptance audit trail | Life of account + 7 years | Compliance & dispute resolution |
You may request deletion of any personal information not subject to a legal retention requirement — see Section 6 (Your Rights) below.
6. Your Rights
Regardless of your state of residence, we extend the following rights to all users:
| Your Right | What It Means |
|---|---|
| Access | Request a copy of the personal information we hold about you. |
| Correct | Ask us to fix inaccurate or incomplete information. |
| Delete | Ask us to delete personal information we are not required by law to retain. |
| Port | Receive your account and sales data in a portable, machine-readable format (your portal offers CSV exports directly). |
| Opt Out of Sale | N/A — we do not sell or share your information for advertising purposes. |
| Non-Discrimination | We will not deny service or change your pricing because you exercise any of these rights. |
To exercise any of these rights, email us at [email protected]. We will acknowledge your request within 5 business days and fulfill it within 30 days where the law permits. You can also update your email address or close your account directly from your account settings page.
Idaho does not yet have a comprehensive consumer privacy law as of this writing. However, we honor the rights above for all users regardless of location. If you are a California resident, additional rights may apply under the CCPA/CPRA. Contact us for more information.
7. Security
- Passwords are hashed and managed entirely by Clerk. We never see them.
- Authentication cookies are
HttpOnly,SameSite=Lax, andSecureover HTTPS. - Card images and database backups are stored on access-controlled infrastructure (Cloudflare R2, Render, Supabase).
- All data transmitted between your browser, our servers, and our providers uses TLS encryption.
- Payment and payout requests are transmitted over encrypted connections; your card and banking details are held by the payment platform, not by us.
No system is 100% secure. While we take reasonable precautions, we cannot guarantee the absolute security of your information.
8. Data Breach Notification
If we discover a security breach that involves your personal information, we will notify affected users by email promptly and without unreasonable delay, consistent with applicable state data breach notification laws. Notification will describe the nature of the breach, the information affected, and steps you can take to protect yourself.
9. Children
Our Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately at [email protected] and we will delete the account and associated information promptly.
10. Third-Party Links
Our website or communications may contain links to third-party websites such as eBay. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing them any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document. For material changes — those that meaningfully affect how we handle your information — we will:
- Prompt you to review and re-accept the updated policy the next time you sign in, and
- Send an email notification to all active account holders.
Your continued use of the Service after a material change takes effect constitutes your acceptance of the updated policy.
12. Contact Us
For privacy questions, rights requests, or concerns:
[email protected]
Sawtooth Consignment · Nampa, Idaho
Effective July 2, 2026 · Version 1.2