Site under active development. Stock counts may not be accurate yet — please hold off on placing new orders for now. If you have already placed an order, it will be processed and sorted as normal. Thank you for your patience.
Plain words, no boilerplate. Last updated 10 June 2026.
What we collect
Your email address, if you create an account. Sign-in works by emailing you a magic link — there are no passwords here, so we never store one.
Order details: your name, delivery address, and what you bought. We need these to ship cards and to keep honest accounts.
Trade-in details: the cards you submit and the payout we agree. See the trade-in terms for how that works.
Visit statistics, only if you say yes. We use Google Analytics to understand how people use the site — but the script only loads after you accept the cookie banner. Decline (or ignore it) and nothing is sent to Google.
What we don't collect
Card payment details. Payments are processed by Stripe; your card number goes to them, not to us. We see that you paid, not what your card is.
Passwords. None exist — sign-in is by emailed link only.
Marketing or ad-tracking cookies. No third-party ad trackers run here. The one Google Ads tag we use records a purchase conversion after checkout, and like Analytics it only runs if you accepted the banner.
Anything to sell. We do not sell or share your data with anyone for marketing.
Who touches your data
Stripe processes card payments.
Amazon Web Services hosts our database and sends our email (sign-in links, order confirmations) via their SES service.
Google receives analytics data — only after you consent, as above.
Cookies
The complete list of cookies this site sets:
Sign-in session — keeps you logged in to your account.
display-currency — which currency prices are shown in.
text-mode — remembers if you switched to the text-only reading layout.
lang-mode — remembers the language-display toggle in the footer.
analytics-consent— your yes-or-no answer to the analytics banner, kept for one year so we don't ask again.
banner-dev-notice — remembers you dismissed the site notice; gone when you close your browser.
Google Analytics sets its own cookies only after you accept the banner. Everything else above is functional, not tracking.
How long we keep things
Orders and trade-ins: kept for six years, because UK tax and accounting law requires it.
Your account: kept until you ask us to delete it.
Analytics data: held by Google under their retention settings; we keep no copy.
Your rights
Under UK data-protection law you can ask to see what we hold about you, ask us to correct it, or ask us to delete it (we'll keep what tax law obliges us to, and delete the rest). Use the contact page or email [email protected].