Privacy policy
Data controller: CardHunter service. By using CardHunter, you agree to the terms below.
Effective date: 2026-06-30.
General
This policy describes how CardHunter processes personal data. For users in the Russian Federation, the Russian version of this policy applies and is legally binding.
The policy is prepared in accordance with Russian Federal Law No. 152-FZ on Personal Data.
Data controller
Data controller: operator of the CardHunter service.
Contact: support@card-hunter.ru, Telegram @card_hunter_PM.
Legal bases
- Your consent — registration, linking external services, cookie banner.
- Performance of the user agreement — providing Service features.
- Legitimate interests — security, abuse prevention, and technical support.
Processing purposes
- Account registration, authentication, and management.
- Exchanges, listings, card watch subscriptions, and trade proposals.
- Email and Telegram notifications (when linked and enabled).
- Support and feedback handling.
- Traffic analytics (Yandex.Metrica) — after cookie consent.
- Advertising (Yandex ad network) — after cookie consent.
- Security and stable operation of the Site.
Data categories
- Account: name, email, password hash, email verification status.
- OAuth: Yandex ID, VK ID, profile data from providers.
- Telegram: chat ID when linked.
- Profile: avatar, title, achievements.
- Activity: exchanges, listings, subscriptions, proposals, last seen time.
- Technical: IP, User-Agent, session data, cookies, localStorage.
- Feedback: name, email, message (including from guests).
- Notification preferences.
Processing activities
We collect, store, use, transfer (including to processors), anonymize, block, and delete personal data using automated means.
Cookies
Necessary cookies are used for authentication and settings. Analytics (Yandex.Metrica) and ads load only after you accept the cookie banner.
For more about Yandex data, see Yandex privacy policy, Yandex ad network terms.
Third parties
We do not sell personal data. Processors include hosting, email, Yandex (Metrica, OAuth, ads), VK (OAuth), and Telegram (notifications). CardHunter is not affiliated with Krafton.
Cross-border transfer
Data is stored on our hosting provider's servers. Yandex, VK, and Telegram may process data under their own policies.
Retention
Account data is kept until deletion or consent withdrawal. Session and log data — as needed for security. Data is deleted or anonymized when no longer required.
Security
We use HTTPS, password hashing, access controls, and backups.
Your rights
You may request access, correction, blocking, deletion, or withdraw consent by emailing support@card-hunter.ru. We respond within 30 days where applicable.
Complaints
You may lodge a complaint with the Russian data protection authority (Roskomnadzor) at rkn.gov.ru.
Authority website: rkn.gov.ru.
Policy updates
Current version effective: 2026-06-30. The latest version is always at /privacy.
