Who this covers
This policy covers cardpackzone.com. It does not cover a card rip or vault site you open from a partner button. That site collects its own data under its own policy.
What we store on your device
A portfolio account stores your email and a password hash, plus the cards and quantities you save. We do not take payments. A watchlist of starred packs, cards, and brands is stored only in this browser’s local storage, not in an account. Two more identifiers are saved so a later visit can keep the same partner attribution:
- pid — publisher id. It comes from the p, pid, or sub2 parameter on the URL, otherwise from the cookie, otherwise a default id.
- clickid — click id, only when that parameter is on the URL you arrived with.
Each value is written to a first-party cookie and to local storage in the browser. Cookies use path / and SameSite Lax. They are session cookies: they end when you close the browser, unless the browser restores them. On HTTPS they are marked Secure. They are not HttpOnly, because the page script has to read them.
Signing in sets a separate cookie, cpz_member. It holds a random token, not your password. The matching row lives in the database for 30 days. That cookie is HttpOnly. Sign out deletes the row.
Why we use them
When you use a partner button, the link can include the vertical, the offer id when we have one, the publisher id, and the click id. Partners use those values to know which publisher sent the visit. We do not sell these identifiers, and we do not build a profile of packs you viewed.
Server logs and fonts
The host keeps ordinary request logs: IP address, browser, the page requested, and the time. Those logs are used to run and protect the site.
Pages load the Inter typeface from Google Fonts. Your browser requests that file from Google, so Google receives the IP address and browser data that come with any font request. The stylesheet is loaded from fonts.googleapis.com and the font files from fonts.gstatic.com.
Clearing it
Clear cookies and site data for cardpackzone.com in your browser to remove pid, clickid, and the watchlist stored in this browser. Blocking cookies or local storage means partner links fall back to the default publisher id, and starred packs, cards, and brands disappear.
Children
The site is for adults 18 and older. We do not knowingly collect information from children.
Contact
Privacy questions: [email protected]. The rules for using the site are in the terms and conditions.
Last updated: October 27, 2026