Privacy Policy
Last Updated: October 23, 2026
Version: 2026.11
This Privacy Policy describes how Card Depot Inc. ("Card Depot," "we," "us") collects, uses, and shares personal information when you visit www.CardDepot.com (the "Site"), create an account, or buy gift cards from us. It applies to information collected through the Site and through our communications with you. It forms part of our Terms of Use.
The short version. We collect what we need to verify who you are, deliver your order, keep fraud off the platform, and support you. Because we sell gift cards, we verify identity: when you create an account or place an order, we may ask for a government ID and a selfie, which are processed by our verification provider, Persona Identities, Inc. (see Sections 1 and 6). We use advertising and analytics tools from Google, Meta, TikTok, Microsoft, and OpenAI, which means some information about your visit is shared with those companies for advertising. We do not sell your personal information for money. You can opt out of advertising sharing at any time by emailing [email protected] with the subject line "Opt Out of Advertising." We are adding a footer opt-out link and support for the Global Privacy Control browser signal; until that is live, email is the opt-out method.
1. Information We Collect
Information you give us
- Identity verification: when you create an account or place an order, we may ask you to verify your identity. This can include your full name, date of birth, residential address, phone number, a photo of a government-issued ID such as a driver's license or passport, a selfie, and the IP address and device information of the device you verify from. Verification is performed by Persona Identities, Inc., which collects, processes, and stores this information on our behalf. Persona's privacy policy is at withpersona.com/legal/privacy-policy. See Section 6 on sensitive information.
- Account details: name, email address, telephone number, password, and the information in your profile. We verify your email address by sending a message containing a unique link. If you sign in with Google, we receive your name and email address from Google.
- Payment information: when you pay by card, your card details are collected directly by our payment processor, Stripe, and are not stored by Card Depot. When you pay by Zelle, ACH, or wire, we receive the bank name, account holder name, and transaction reference.
- Order and account history: what you bought, when, how you paid, delivery records, and any balance held in your account.
- Communications: emails, live chat conversations, support tickets, and calls. Live chat conversations are recorded and stored, and calls may be recorded, for support, quality, and fraud prevention.
- Claims: if you make a claim under our Guarantee, the information you provide to support it, including records you obtain from the issuing merchant.
Information collected automatically
- Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, links clicked, referring page, and time spent on the Site.
- Cookies and similar technologies: small files and identifiers placed by us and by the third-party tools listed in Section 4. These are used to keep you logged in, remember your choices, measure how the Site is used, and show you advertising on other sites.
- Approximate location derived from your IP address.
Information from other sources
- Mobile carrier verification: with your authorization under the Terms of Use, we may ask your mobile carrier to confirm your identity and return subscriber details such as name, address, and device information.
- Fraud prevention services: we may receive information from credit bureaus, identity and fraud prevention providers, and public records to confirm who you are and detect fraud.
- Referrals: if another customer refers you, we receive your name and email address from them.
2. How We Use Information
- To create and manage your account and deliver gift cards you buy
- To verify your identity and prevent, detect, and investigate fraud, abuse, and unauthorized access
- To process payments, returns, and claims, and to collect amounts owed
- To provide customer support, including by live chat, email, and phone
- To send transactional messages about your account and orders, including verification and delivery notices
- To send marketing emails and show you advertising, where permitted and subject to your choices
- To operate, secure, measure, and improve the Site
- To comply with law, respond to lawful requests, and enforce our Terms of Use
- To establish, exercise, or defend legal claims
We may combine information from these sources for the purposes above.
3. How We Share Information
We do not sell your personal information for money. We share it in these circumstances:
Service providers. Companies that process information on our behalf and only for our purposes: identity verification (Persona), payment processing (Stripe and our bank and payment partners), live chat and support, bot protection (Google reCAPTCHA), and our email delivery, hosting, security, tag management, and fraud prevention providers. When you are logged in, your name and email address are passed to our chat and email providers so we can recognize you.
Advertising partners. We use advertising and analytics tools from Google, Meta, TikTok, Microsoft, and OpenAI. These tools place cookies or pixels on the Site and receive information about your visit, including your IP address, device identifiers, pages viewed, and purchases. When you make a purchase, your email address, in hashed form, is sent to Google, Meta, and Microsoft to match the purchase to your advertising profile, and purchase events are sent to Meta, TikTok, and OpenAI, including from our servers. This is "sharing" for cross-context behavioral advertising under California law, and you can opt out as described in Section 7.
Issuing merchants and card suppliers. To investigate a card problem, a claim, or a payment dispute, we may share order and card details with the merchant that issued the card or the supplier we bought it from.
Legal and safety. We share information where required by law, subpoena, or court order; to respond to a request from a regulator or law enforcement; to protect the rights, property, or safety of Card Depot, our customers, or others; and to enforce our Terms of Use, including referring unpaid balances to collections.
Business transfers. If Card Depot is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.
With your direction. Where you ask us to share information, for example by sending a gift card to someone else.
4. Cookies, Pixels, and Third-Party Tools
The Site uses these third-party tools. Each operates under its own privacy policy.
| Tool | Provider | What it does |
|---|---|---|
| Google Tag Manager, Google Analytics, Google Ads | Site measurement; advertising conversion tracking; receives hashed email on purchase | |
| Google reCAPTCHA | Bot protection on login and sign-up; collects device and interaction data, subject to Google's Privacy Policy and Terms of Service | |
| Sign in with Google | Optional login; provides us your name and email address | |
| Meta Pixel and Conversions API | Meta | Advertising measurement and targeting; receives hashed email on purchase |
| TikTok Pixel and Events API | TikTok | Advertising measurement and targeting; receives purchase events |
| Microsoft Advertising (UET) | Microsoft | Advertising measurement for Bing; receives hashed email on purchase |
| OpenAI advertising SDK | OpenAI | Advertising measurement and targeting; receives purchase events |
| Persona | Persona Identities, Inc. | Identity verification; collects and stores ID images and verification data on our behalf. Privacy policy |
| Stripe | Stripe | Card payment processing and fraud screening |
We also use live chat, email delivery, hosting, content delivery, security, and tag management providers that act on our behalf. Live chat conversations are handled by a third-party chat provider and are recorded. Our hosting and security providers collect standard server logs, and our content delivery provider runs privacy-preserving analytics that do not use cookies.
Your choices. You can opt out of advertising cookies and pixels by emailing [email protected] with the subject line "Opt Out of Advertising." We will apply your request within 15 business days. We are adding a footer opt-out link and support for the Global Privacy Control (GPC) browser signal; until that is live, we do not respond to GPC or "Do Not Track" signals, and email is the opt-out method. Most browsers also let you block or delete cookies, though doing so may affect how the Site works.
You can also opt out directly with the advertising networks: Google at adssettings.google.com, Meta in your Facebook ad preferences, and through the Digital Advertising Alliance at optout.aboutads.info.
5. Email and Text Messages
Email. We send transactional emails about your account and orders, which you cannot opt out of while you hold an account. We also send marketing emails, which you can stop at any time using the unsubscribe link in any marketing email or in your account settings.
Text messages (SMS). We do not currently send text messages. If we begin to, they will be transactional messages to verify your identity and your orders and to notify you about delivery, under the authorization in the Terms of Use, and you will be able to stop them by replying STOP. We will not send marketing text messages unless you separately opt in.
6. Sensitive Personal Information
Under California law, your government ID, the selfie used to match you to it, and your log-in credentials are sensitive personal information. We use them only to verify identity, prevent fraud, secure your account, and comply with law. We do not share them for advertising or use them to infer characteristics about you. Verification images are processed and stored by Persona Identities, Inc. under its privacy policy.
7. Your Privacy Rights
California residents have the rights below under the CCPA. We extend the same rights and process to residents of every state with a privacy law.
- Know what personal information we hold about you, where it came from, and who we shared it with.
- Correct inaccurate information.
- Delete. On request we close your account and stop all marketing contact, including removal from email lists and advertising audiences. We retain your account record, as the law permits, to detect and prevent fraud, complete transactions, meet tax, accounting, and legal obligations, and defend claims. We will confirm what we kept and why.
- Opt out of sharing for advertising. We do not sell personal information. We share it for cross-context behavioral advertising. Email [email protected] with the subject line "Opt Out of Advertising" and we will apply it within 15 business days. This does not affect sharing with service providers acting on our behalf.
- Limit use of sensitive information. Our uses in Section 6 are exempt from this right.
- Non-discrimination. Exercising a right will not affect your service or pricing.
To make a request, email [email protected] with the subject line "Privacy Request." We verify your identity against your account details before acting. We respond within 45 days, extendable once by 45 days with notice. An authorized agent may act for you with your written authorization. If we deny a request you may appeal by replying, and we respond within 45 days. California residents may also contact the California Privacy Protection Agency. We do not disclose personal information to third parties for their own direct marketing.
8. Referral Program
Referring a friend gives us their name and email, and earns you account credit on their first qualifying purchase. California treats this as a financial incentive. The credit amount is in the program terms, you may stop participating at any time, and we value the information collected at the amount of the credit, reflecting the value of a new customer to us.
9. Notice at Collection
This Policy is our notice at collection. Sections 1 through 3 list what we collect, why, and who we share it with; Section 10 states how long we keep it.
10. How Long We Keep Information
- Account records (identity, contact and device details, payment identifiers, verification outcome, orders, payments, deliveries, communications, and account actions) are kept for as long as we operate, because repeat fraud is identified by matching past activity and transaction records are needed for disputes, accounting, and tax.
- Identity verification images are held by Persona under its retention settings.
- Marketing contact stops when you close your account, unsubscribe, or ask us to delete your information.
- Advertising and analytics providers retain data under their own policies.
11. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit and access controls. Card details are collected by our payment processor and are not stored on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password and your gift card credentials confidential, as described in the Terms of Use.
12. Children
The Site is for adults. You must be 18 or older to create an account or place an order. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
13. Third-Party Links
The Site contains links to other websites, including issuing merchants. Those sites have their own privacy policies, and we are not responsible for their content or practices.
14. Users Outside the United States
The Site is operated from the United States and is intended for US residents. If you access it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
15. Changes to This Policy
We may update this Policy from time to time. The current version, with its last-updated date, is always posted on the Site. If we make a material change to how we use or share personal information, we will notify you by email or through your account before the change takes effect.
16. Contact Us
Card Depot Inc.
8 The Grn #4731, Dover, DE 19901, United States
[email protected]
Last updated October 23, 2026 · Version 2026.11
