Privacy

VNDR is a tool for card-show vendors: it takes stock in, prices it, prints a label, and records what sold. This page says what it stores to do that, who else can see it, and how to remove it.

There is no analytics, no advertising and no tracking of any kind in this product. Nothing about your browsing is sold or shared, because nothing about it is collected.

What is stored

• Your account. Email address and password, held by our authentication provider. Shop name, handle, bio, links and the images you upload for your storefront and labels.
• Your stock. Each card or sealed product you take in: its condition, your asking price, what you paid for it, where it is kept, and the short code printed on its label.
• Your sales and trades. What left, what came in, the amounts and the dates — plus the shows you record them against, and a daily snapshot of what your case is worth so the dashboard can draw a line.
• Billing. If you subscribe, Stripe holds your card details and we hold only the customer and subscription identifiers it gives us. Card numbers never reach our servers.
• A hashed IP address, briefly, to rate-limit abuse of public pages. It is stored as a hash rather than an address and is deleted within a day. Hashing an IP is not anonymisation and we do not claim it is; it means a copy of that table is not a list of addresses.

What other people can see

Two parts of VNDR are public on purpose, and both are things a customer standing at your table can already see.

• Your storefront at vndr.gg/your-handle, if you leave it switched on in Settings: your shop name, bio, links, and the cards you have in stock with their asking prices. Turning it off makes the page disappear entirely.
• The page behind a label’s QR code: the card, its condition, the asking price, and whose table it is on. Never your cost, your margin, or anything else about your business. These pages are not indexed by search engines.

Images you upload are stored on public URLs so they can load quickly. Anyone with the link can view them; nothing links to them except your own pages.

Who else processes it

• Vercel — hosting, and storage for uploaded images.
• Neon — the database, and the accounts and sessions behind signing in.
• Stripe — subscription billing.

VNDR also reads card and price data from TCGdex, TCGplayer, PKMNPrices, PSA and eBay. Those are outbound lookups about cards — a set code, a card name, a certificate number. No information about you or your business is sent to them.

Cookies

One cookie, which keeps you signed in. There are no advertising or analytics cookies. The sell screen also keeps a draft of an unfinished sale in your own browser for twelve hours so a closed tab does not lose it; that never leaves your device.

Deleting your account

Settings has a “Close this account” option. It deletes your shop, your stock, your sales history, your shows and your uploaded images, and cancels any active subscription. It is immediate and cannot be undone.

Two things deliberately survive it. The catalogue — cards, sets and market prices — belongs to the platform and is shared by every shop. And the short codes your labels were printed with are kept, as codes and nothing else, so that a sticker already in a customer’s binder can never be reissued to point at somebody else’s card.

Your rights

You can see and correct everything about your shop from within the app, and delete all of it as described above. If you are in the UK, EU, California or anywhere with similar law, those rights — access, correction, erasure, portability, objection — apply, and the deletion above is the erasure one. For anything you cannot do from the app, email jonvthann@gmail.com.

Children

VNDR is a tool for running a business and is not intended for anyone under 13. We do not knowingly collect anything from children.

Changes

If this changes, the date at the top changes with it. Anything that materially affects what is stored or who sees it will be told to you directly rather than left here to be noticed.

Terms of service