Cookie Policy
Last updated: 26 September 2026
1. What cookies are
Cookies are small files a website stores in your browser; local storage is a similar mechanism that keeps data in your browser without sending it with every request. This policy covers both, and the scripts from other companies that load on our pages.
2. What we use
CardTrading only uses what is strictly necessary to provide the service you ask for: keeping you signed in and protecting payments against fraud. These do not require consent under Spanish law (art. 22.2 LSSI), but we list them so you know exactly what is stored. We do not use analytics or marketing cookies. If we ever add them, they will only run after you allow their category, and we will ask you again.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| token | CardTrading | Keeps you signed in to your account.Local storage, once you sign in | 7 days, or until you sign out | Necessary |
| __stripe_mid | Stripe | Fraud prevention for card payments.Cookie, set by Stripe.js on the checkout and bid-payment pages only | 1 year | Necessary |
| __stripe_sid | Stripe | Fraud prevention for card payments.Cookie, set by Stripe.js on the checkout and bid-payment pages only | 30 minutes | Necessary |
3. Third-party services on our pages
Stripe (payments) loads only on the checkout and bid-payment pages. Besides the two cookies above, the card field is an iframe served from Stripe’s own domain, where Stripe may store data for fraud prevention under its cookie policy.
Cloudflare Turnstile protects the registration page against automated sign-ups. It stores no cookies on our domain; Cloudflare processes technical data about the browser to tell people from bots, as described in its Turnstile privacy notice.
Card images are loaded directly from the image servers of the catalogue sources (for example Scryfall, the Pokémon TCG API or YGOPRODeck). Your browser requests them like any other image, which gives those servers your IP address; we do not ask them to set cookies. Our fonts are served from our own domain.
4. Your choice
Today there is no choice to make: we only use cookies that are strictly necessary, and those do not need your consent. If we ever add analytics or marketing cookies, we will ask for your consent before they run, and a “Cookie settings” link will appear in the footer of every page so you can change your choice at any time. We would then ask again whenever this policy changes and, in any case, every 12 months.
5. Deleting cookies in your browser
6. More information
How we handle personal data in general is explained in our Privacy Policy. Questions: support@cardtrading.eu.