隱私政策 / Privacy Policy
更新日期 / Last updated: 2026-09-16
1. 經營者與聯絡 / Operator and contact
CARDAR 由台灣個人經營者提供服務。關於 CARDAR 處理個人資料的問題與請求，請聯絡 cardarsports@gmail.com。
CARDAR is operated by an individual based in Taiwan. For questions and requests about CARDAR's handling of personal data, contact cardarsports@gmail.com.
2. 處理的資料與用途 / Data and purposes
依你使用的功能，我們處理帳戶識別與登入資料、搜尋內容、收藏與上架資料、你提供的圖片或圖片連結、客服往來，以及交易編號、訂閱狀態與使用資格。服務供應商亦可能處理 IP 位址、裝置、請求與錯誤紀錄，以提供服務、維持安全及排除故障。
Depending on features used, we process account identifiers and sign-in information, searches, collection and listing data, images or image links you provide, support correspondence, transaction IDs, subscription status and access entitlements. Service providers may also process IP addresses, device information, requests and error logs to operate, secure and troubleshoot the service.
3. 瀏覽器與雲端儲存 / Browser and cloud storage
網站及登入服務使用 Cookie 與瀏覽器儲存保存工作階段、偏好及部分收藏或編輯資料。使用雲端收藏備份時，收藏欄位及圖片連結會傳至伺服器；該備份功能不接受圖片檔本身。清除瀏覽器資料可能移除本機內容；登出或刪除登入帳戶不代表所有雲端紀錄已自動刪除。
The site and sign-in service use cookies and browser storage for sessions, preferences and some collection or editing data. Cloud collection backup sends card fields and image links to the server; that backup feature does not accept image binaries. Clearing browser data may remove local content. Signing out or deleting a sign-in account does not automatically erase every cloud record.
4. 服務供應商與選用連線 / Providers and optional connections
Clerk 提供登入服務；Render 提供網站託管；Paddle 處理結帳、付款、稅務與訂閱通知。CARDAR 不接收或儲存完整付款卡號及安全碼。你選擇連接 eBay 時，授權憑證及相關賣家／刊登資料會用於所選功能。市場查詢會將必要搜尋內容傳送給資料來源。各供應商依其角色與隱私政策處理資料。
Clerk provides authentication, Render hosts the website, and Paddle handles checkout, payments, taxes and subscription notifications. CARDAR does not receive or store full payment card numbers or security codes. If you connect eBay, authorization credentials and relevant seller or listing data are used for the selected functions. Market queries send necessary search terms to data sources. Each provider handles data according to its role and privacy policy.
5. 保存、跨境與安全 / Retention, international processing and security
資料會因提供服務、帳務、防詐、爭議處理與適用法令需要而保存；不再需要時予以刪除或去識別化。資料可能由上述供應商於台灣以外處理。我們採取存取限制與傳輸保護等措施，但任何網路服務皆無法保證零風險。
Data is retained as needed for service delivery, accounting, fraud prevention, disputes and applicable legal obligations, then deleted or de-identified when no longer needed. Providers may process data outside Taiwan. We use measures such as access restrictions and transport protection, but no online service can guarantee zero risk.
6. 你的選擇與請求 / Your choices and requests
你可聯絡客服請求存取、更正、匯出或刪除個人資料，或行使適用的其他權利。我們可能需確認你的身分；依法或為處理爭議必須保留的紀錄可能不會立即刪除。你可在瀏覽器管理本機資料，並於第三方帳戶撤銷選用授權。政策重大變更將透過網站或適當方式告知。
Contact support to request access, correction, export or deletion of personal data, or exercise other applicable rights. Identity verification may be required; records needed by law or for disputes may not be deleted immediately. You may manage browser storage and revoke optional authorizations in third-party accounts. Material policy changes will be communicated through the site or another appropriate channel.
7. 訪客統計 / Visitor analytics
我們以瀏覽器內的隨機識別碼估算訪客及瀏覽次數，並在伺服器保存該識別碼的雜湊、初次到訪時間及每日次數，供累計與趨勢分析使用。統計資料不包含 IP、姓名、信箱、帳戶 ID、搜尋內容或瀏覽網址；託管服務本身的安全日誌另依其政策處理。防重複事件碼最多保留約 30 天；每日統計及訪客雜湊於統計服務期間保存。同人使用不同裝置可能重複計算。管理員可選擇公開累計數字，不公開個別訪客資料。
A random browser identifier estimates visitors and page views. We retain its hash, first visit time and daily counts for cumulative and trend analysis. Analytics excludes IPs, names, emails, account IDs, search text and page URLs; hosting security logs are separate. Deduplication event hashes are kept for approximately 30 days; visitor hashes and daily counts are retained while analytics operates. Different devices may count separately. Only an aggregate total may be published.
可使用下方開關停止此瀏覽器後續統計；清除網站資料會重設此選擇。亦尊重 Do Not Track 與 Global Privacy Control。停止統計不會自動刪除既有彙總資料。
Use the control below to stop future analytics in this browser. Clearing site data resets this preference. We also honor Do Not Track and Global Privacy Control. Opting out does not erase existing aggregates.
8. 各類資料 / Data types
Clerk 帳號資料：交給 Clerk 處理登入。傳輸使用 HTTPS。你可以在 刪除帳號 送出請求。這個網站不會立刻刪除 Clerk 裡的帳號。Clerk 是否另存備份，程式無法得知。
Clerk account data is handled by Clerk over HTTPS. A deletion request is available. This site does not delete the Clerk user immediately. Whether Clerk keeps its own copy is unknown from this code.
卡片照片：存在 Cloudflare R2，物件鍵在 cardar_image_ownership，路徑為 uploads/。伺服器用憑證讀取照片。傳輸使用 HTTPS。是否已有人在儲存桶上打開公開網址，這份程式沒有設定，因此標為未知。刪除請求會把這些物件鍵列給操作人員，按鈕本身不刪檔。
Card photos are stored in Cloudflare R2 under uploads/, with keys in cardar_image_ownership. The server reads them with credentials, over HTTPS. Whether the bucket is already publicly readable is unknown here, because this code does not enable public bucket access. A deletion request names those keys and does not delete the files.
卡冊內容：存在 cardar_collection_backups。資料庫連線有沒有強制 TLS，程式沒有寫死，標為未知。網站與 App 對使用者的連線是 HTTPS。刪除請求涵蓋這一表，但不會立刻刪除。
Binder contents are in cardar_collection_backups. The database code does not force TLS, so that protection is unknown. The site and app use HTTPS toward you. The deletion request includes this table and does not delete it immediately.
Paddle 付款資料：結帳、卡號與稅務在 Paddle。CARDAR 只存訂閱編號、客戶編號與狀態，不存完整卡號。與 Paddle 的連線是 HTTPS。進行中的訂閱不會因刪除請求而取消。要停止之後的扣款，請登入後打開 https://cardar.onrender.com/pricing，按「管理／取消訂閱」。該按鈕會 POST /api/billing/portal，網站只接受主機名稱以 .paddle.com 結尾的 https 連結，再由你在 Paddle 取消續訂。一般取消在已付款期間結束後生效，不會退回已扣款項。若沒有那個按鈕，請改看 退款頁 的客服信箱，不要寄完整卡號。Paddle 自己的帳務紀錄不在這個請求的刪除範圍。
Paddle handles checkout, card numbers and tax. CARDAR stores the subscription id, customer id and status, not the full card number. That traffic is HTTPS. An active subscription is not cancelled by a deletion request. To stop later charges, sign in and open https://cardar.onrender.com/pricing, then use Manage / cancel subscription. That button POSTs /api/billing/portal. The site opens only an https link whose host ends with .paddle.com, and you cancel the renewal there. A normal cancellation takes effect at the end of the paid period and does not refund a charge that already happened. If that button is missing, use the contact address on the refunds page and do not send the full card number. Paddle's own billing records are outside this request.
當機與使用紀錄：Android App 沒有當機回報套件。網站訪客統計與功能次數是瀏覽器雜湊，不存帳號編號，傳輸是 HTTPS，也不會因刪除帳號而清掉。你可以在本頁關閉之後的訪客統計。
The Android app has no crash-reporting package. Site analytics and feature counts store a browser hash, not an account id, travel over HTTPS, and are not removed by an account-deletion request. You can stop later visitor counts on this page.
刪除帳號 / Delete account · 下載 App
服務、帳務與個資聯絡 / Service, billing and privacy contact:
cardarsports@gmail.com