Privacy Policy
Last updated: September 16, 2026
This Privacy Policy explains how Cartuna collects, uses, shares and protects your personal information, and the choices and rights you have, including under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state privacy laws.
1. Who is responsible for your data
The Platform is operated by Cartuna TCG (“Cartuna”, “we”, “us”). Privacy contact: [email protected].
Cartuna is operated from Brazil and serves customers in the United States. Your information is processed in the United States and in Brazil, and may be processed by our service providers in other countries, with appropriate safeguards.
2. Information we collect
Account information: first and last name, email address, phone number and login credentials (managed by our identity provider).
Shipping information: full address (street, unit/apartment, city, state, ZIP code).
Transaction information: MonDollar purchases, summons, cards obtained and shipping requests. Payment details (e.g., card number) are handled directly by our payment processor; we do not store your full card details.
Device and usage information: IP address, device identifiers, pages visited, date/time, and information collected through cookies and similar technologies, including advertising pixels.
3. How we collect it
We collect information: (i) that you provide (registration, address, contact); (ii) generated by your use of the Platform (transactions, browsing); and (iii) from service providers acting on our behalf (e.g., authentication, payment, shipping).
4. How we use it
To provide the service: create and manage your account, process MonDollar purchases, perform summons, record your cards and ship them to you.
To comply with the law: tax and accounting records, record-keeping obligations and responding to lawful requests from authorities.
To protect the Platform: security, fraud prevention, troubleshooting and improving how the Platform works.
To communicate with you: transactional emails about your orders and, unless you opt out, reminders and marketing emails. Every marketing email includes an unsubscribe link, and we honor opt-outs as required by the CAN-SPAM Act.
To measure and advertise: with your device information and cookies, to measure the performance of the Platform and of our advertising (for example, through the Meta Pixel).
5. Who we share it with
We share information only as needed, with service providers and partners who process it on our behalf, such as:
- Payment processor (e.g., Stripe): to process purchases;
- Authentication provider (e.g., Clerk): for login and account security;
- Infrastructure and hosting (e.g., Vercel; Neon database): to run the Platform;
- Email delivery (e.g., Resend): to send transactional and marketing emails;
- Shipping and carriers (e.g., USPS and our shipping-label provider): to deliver your cards;
- Advertising and analytics (e.g., Meta): to measure and improve our advertising, which may qualify as “sharing” for cross-context behavioral advertising under California law;
- Public authorities: when required by law, subpoena or court order.
We do not sell your personal information for money. You can opt out of the sharing described above as explained in section 10.
6. Cookies and similar technologies
We use cookies and similar technologies for authentication, security, operation and, where applicable, measurement and advertising. You can manage cookies in your browser settings; some are essential and disabling them may affect functionality. We currently do not respond to browser “Do Not Track” signals, but we honor Global Privacy Control (GPC) signals as an opt-out of sharing where required by law.
7. International processing
Because Cartuna is operated from Brazil, your information will be transferred to and processed in Brazil as well as in the United States. We apply contractual and technical safeguards to protect it wherever it is processed.
8. Security
We use technical and organizational measures to protect your information against unauthorized access and accidental or unlawful destruction, loss, alteration or disclosure. No system is completely secure; if a security incident affects your information, we will notify you and the relevant authorities as required by applicable law.
9. How long we keep it
We keep information for as long as needed for the purposes in this Policy and to meet legal obligations (for example, tax and record-keeping periods). When it is no longer needed, we delete or anonymize it, except where retention is permitted or required by law.
10. Your privacy rights
Depending on where you live, you may have the right to:
- know what personal information we collect, use and share, and access a copy of it;
- correct inaccurate personal information;
- delete your personal information, subject to legal exceptions;
- opt out of the sale or sharing of your personal information for targeted advertising;
- not be discriminated against for exercising your rights.
To exercise these rights, email [email protected] with the subject “Privacy request”. We may ask for information to verify your identity before responding, and we will respond within the time required by law. You may designate an authorized agent to make a request on your behalf. We do not knowingly sell or share the personal information of consumers under 16.
11. Marketing emails
You can stop reminder and marketing emails at any time using the unsubscribe link in any such email. Transactional emails about your orders will continue while you have an account.
12. Children
The Platform is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18 (and never from children under 13, in accordance with COPPA). If we learn that we have, we will delete it.
13. Changes to this Policy
This Policy may be updated. The current version is the one published on this page, with its effective date. Material changes may be communicated through the Platform's channels.