Cookie Policy

Version 2026-10-12 · updated October 12, 2026

This page explains which cookies and what data we store in your browser when you use CardPlaza, under Art. 122 of the Italian Privacy Code, Directive 2002/58/EC and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools (10 June 2021).

We use technical and preference tools, necessary to provide the service you request, which do not require your consent. We also use Google Analytics for usage statistics, but only if you press “Accept” in the banner: until you choose, Google's script is not loaded and no analytics cookie is installed. We do not use profiling cookies or show advertising.

1. What cookies and similar tools are

Cookies are small text files that the site stores in your browser; similar tools are the browser's Local Storage and Session Storage. They help remember information between pages or between visits, for example that you have signed in.

2. What we store in your browser

NameTypePurposeDurationCategory
better-auth.session_token (and related Better Auth cookies)First-party cookieKeeps you signed in to your accountUp to 7 days, or until the browser is closed if you do not choose to stay signed inTechnical, necessary
i18nextFirst-party cookieRemembers the interface language1 yearTechnical / preference
sidebar_stateFirst-party cookieRemembers whether the side menu of the personal area is open or closed7 daysTechnical / preference
themeLocal StorageRemembers the light or dark themeUntil clearedTechnical / preference
sh-seller-listings-viewLocal StorageRemembers whether you prefer grid or table viewUntil clearedTechnical / preference
sh-seller-cart:*Local StorageKeeps the cards added to a seller's cart until you send the proposalUntil sent or clearedTechnical, necessary
display-*Local StorageRemembers display preferences in the personal areaUntil clearedTechnical / preference
shuffles.viewSessionLocal StorageRandom, anonymous key to count a visit to a listing or store only once a day. It is not linked to your account and does not identify youUntil cleared; recorded views are deleted after 24 monthsFirst-party statistical, anonymous
_ga, _ga_QBTEYF96FJFirst-party cookies set by Google AnalyticsDistinguish visitors and measure visits in statistical form, to understand how the site is used2 yearsAnalytics, only with your consent

Technical and preference cookies do not require your consent (Art. 122 Privacy Code); we use them on the basis of our legitimate interest in making the site work. The anonymous visit count is a first-party statistical tool that does not allow you to be identified or data to be cross-matched with other services.

3. Third-party content

Catalog card images may be loaded from the servers of public card-data services (Scryfall, TCGdex, YGOPRODeck, Lorcast, optcgapi). As far as we know these services do not set cookies through the images, but they see your IP address and browser technical information when you download them, as any site serving an image does. We do not embed videos, interactive maps, social plugins or advertising pixels. Links to external sites (for example a store's map) take you to sites with their own notices.

4. How to manage or delete this data

You can delete cookies and Local Storage from your browser settings, or block them altogether. If you do, the site keeps working, but you will have to sign in again and will lose your preferences (language, theme, view) and any cart not yet sent.

You can accept or reject analytics cookies in the banner and change your mind at any time with “Cookie preferences” in the site footer: if you withdraw, we stop collecting data with Google Analytics and delete its cookies (_ga). Rejecting does not remove any feature of the site.

5. Rule for the future

If in the future we add other third-party analytics tools, advertising, pixels or embedded content that use non-technical cookies, before activating them we will show you a banner with the choice to accept or reject (with equal prominence), and we will not install any non-technical cookie before you have chosen.

6. Controller and contacts

The data controller is CardPlaza. For clarifications or to exercise your rights write to privacy@cardplaza.net. You will find full details on the processing of personal data in the Privacy notice.