Last updated July 25, 2026
Privacy policy
SubGradedCards is operated by Illustrated Analytics LLC. This policy describes the sports-card storefront at subgradedcards.com.
Information we collect
- Account information such as your name, email address, password hash, security settings, and consent records.
- Order and fulfillment information including purchased items, shipping address, order status, external payment reference, carrier, and tracking number.
- Security and operational records needed to prevent abuse, protect accounts, audit changes, and maintain the on-premises service.
- Messages you send directly to our published contact address.
Payment information
Payment-card details are entered on the payment provider's hosted systems and are not sent to or stored by SubGradedCards. We retain order totals, payment status, provider name, external payment reference, refunds, and related audit records. The payment provider processes information under its own privacy terms.
How information is used
We use information to operate accounts, reserve one-of-one inventory, fulfill orders, provide tracking, send service messages, prevent fraud, maintain business records, and respond to support or privacy requests.
Sharing and external services
We do not sell personal information. Information may be disclosed to service providers only as needed to operate the store—for example email delivery, shipping carriers, internet security and routing, or a future hosted payment provider—and when required by law. Links to grading-company, eBay, and carrier websites are external and governed by their policies.
Retention and security
Account and order records are retained as needed for fulfillment, security, accounting, dispute handling, and legal obligations. The application uses HTTPS, access controls, password hashing, audit records, and verified on-premises backups. No system can guarantee absolute security.
Your choices
You may request access, correction, or deletion of personal information by contacting us. Some transaction or security records may need to be retained where required for legitimate business or legal purposes.
Contact
Email [email protected] for privacy questions or requests. We may verify that a request comes from the account holder before acting on it.