Privacy policy

Effective October 18, 2026

This policy explains what information Called Up Cardboard (“we”, “us”) collects through calledupcardboard.com and our live card auctions, how we use it, and the choices you have. Questions go to lucaswurst@calledupcardboard.com.

The short version

• The only thing this website asks you for is an email address, and only if you sign up for stream alerts.
• We don’t sell your information, we don’t run ads, and this site has no analytics or tracking cookies.
• Bidding, payment and checkout happen on Whatnot, not here. We never see your card or bank details.

What we collect

Stream alert signups. If you enter your email in the “Stream alerts” form, we receive that email address and the time you signed up.

Messages you send us. If you email or message us, we receive whatever you include, such as your name, email address and your question.

Orders from our Whatnot shows. When you win a card in one of our streams, Whatnot shares what we need to ship it: your Whatnot username, name, shipping address and the items you won. Whatnot handles your payment information; we never receive it. Whatnot’s own privacy policy covers everything you do on Whatnot.

Technical information. Like nearly every website, our hosting provider automatically records basic request data when you visit, such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. The site also loads fonts from Google Fonts and code libraries from jsDelivr, which receive your IP address when your browser requests those files.

Browser storage. The site saves one small setting in your browser’s session storage so the opening animation plays only once per visit. It is not a cookie, it never leaves your device, and it disappears when you close the tab. We do not use advertising or analytics cookies.

How we use it

• To email you about upcoming streams, if you signed up. At most three emails a week.
• To pack and ship the cards you win, and to handle questions, returns or damage claims about an order.
• To answer messages you send us.
• To keep the site running, secure and free of spam signups.
• To meet legal, tax and recordkeeping obligations.

Who we share it with

We share information only with the services that help us run the business, and only what each one needs:

• Netlify hosts this website and stores stream alert signups.
• Google Workspace runs our business email.
• Whatnot runs our auctions, payments and buyer protection.
• Shipping carriers (such as USPS) receive your name and address to deliver your order.
• Any email service we use to send stream alerts receives your email address for that purpose only.

We may also disclose information if the law requires it, or to protect our rights, our customers or the public. If the business is ever sold or transferred, customer information may move with it under this policy. We do not sell personal information, and we do not share it for targeted advertising.

Unsubscribing

Every stream alert email includes a way to unsubscribe. You can also email lucaswurst@calledupcardboard.com with “unsubscribe” and we will remove you.

How long we keep it

We keep stream alert emails until you unsubscribe or ask us to delete them. We keep order and shipping records for as long as needed to handle the order, returns and claims, and for as long as tax and accounting rules require (generally up to seven years). Messages are kept as long as they are useful to answer you and then deleted.

Your choices and rights

You can ask us to tell you what personal information we hold about you, correct it, delete it, or stop emailing you. Email lucaswurst@calledupcardboard.com and we will respond within 30 days. We may need to confirm your identity first, and we may keep records the law requires us to keep. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas or Florida), state law may give you these and other rights, and we honor them for every customer. We will not treat you differently for using them.

Because we do not track visitors across websites, we have nothing to switch off when your browser sends a “Do Not Track” or Global Privacy Control signal.

Children

This site is meant for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13, and Whatnot requires buyers to be at least 18. If you believe a child has given us information, email us and we will delete it.

Security

The site is served only over encrypted HTTPS, and we limit access to customer information to what is needed to run the business. No method of storing or sending information is perfectly secure, but we take reasonable steps to protect what you share with us.

Visitors outside the United States

Called Up Cardboard operates in the United States, and the services above store information in the United States. By using the site you understand your information will be processed there.

Changes to this policy

If we change this policy, we will post the new version here and update the effective date above. If a change is significant, we will tell stream alert subscribers by email.

Contact

Called Up Cardboard · lucaswurst@calledupcardboard.com · or message calledupcardboard on Whatnot.