Policies
Privacy Policy
Last updated: October 26, 2026
Legacy Card Vault ("we," "us," or "our") respects your privacy. This page explains what information we collect when you use legacycardvault.com or buy from us in our shop at 18 W Water St, Chillicothe, OH, how we use it, and who helps us handle it. We do not sell your personal information.
Information we collect
Orders. To place an order we collect your name, email address, shipping address, and phone number if you give one, along with what you bought. You enter your payment details on Stripe's secure payment page; we never see or store your full card number.
Want list and "notify me" requests. Your email address and what you are looking for, so we can email you when it arrives.
Vault Club. If you join our free Vault Club, we keep your email address, your first name if you give one, and a record of when and how you agreed to receive emails, so we can send you members-only deals and honor it when you unsubscribe.
Contact form. When you send us a message through the contact page, we keep your name, email address, and message, along with a scrambled (one-way) code made from your internet address that we use only to limit how many messages one person can send in an hour. We email the message to our store inbox and send a short alert to our team's Slack. Emails you send us directly are kept in our business mailbox.
Comic pull list. If you ask to be put on our comic pull list, we keep your name, email address, phone number if you give one, the series you want held, how many copies, and any note you add. We use it to set aside your books and to tell you when they come in. A request is not added to the list until we approve it; once it is, we keep a customer record for you and the list of books held for you. Tell us at store@legacycardvault.com and we will take you off the list and remove it.
In our shop and on social media. If you give us your name or contact details for a sale, special order, or when selling to us, or if you message our Facebook Page, we keep what you tell us so we can help you. When you pay by card in the shop, the payment is taken on a Stripe card reader. With the sale we keep the card's brand and last four digits, how the card was read, and the chip details printed on your receipt. We never see or keep your full card number.
Shopping cart. The items in your cart are saved in your own browser (local storage) and are not sent to us until you start checkout.
Automatic information. Our website is hosted on Cloudflare, which keeps standard server logs (such as IP address and the pages requested) for security and reliability. Our checkout, contact, want-list, and pull-list forms use Cloudflare's bot check (Turnstile) to block automated abuse; it may look at technical details of your browser to do so.
How we use information
We use your information to process, ship, and support your orders; to answer your questions; to email you order and shipping updates; to tell you when something you asked for is in stock; to keep our records, taxes, and accounts in order; to prevent fraud and abuse; and to improve the shop.
Who helps us handle your information
We share information only with the services we use to run the shop, and only what each one needs to do its job:
- Stripe processes payments, online and in our shop, and may also collect your name, email, and shipping address at checkout. If you give us your email for a card payment, Stripe emails you the receipt.
- Cloudflare hosts our website and stores our order and customer records securely.
- EasyPost and the United States Postal Service receive your name, shipping address, and phone number (if provided) to create labels and deliver your order.
- Resend delivers our order and shipping emails, and Microsoft Outlook hosts our business mailbox.
- Intuit QuickBooks holds our accounting records, which can include sales and customer details.
- AI and voice tools (Anthropic and OpenAI) help our staff read and draft replies and answer questions about the business. The text of messages and orders may be processed by these tools for that purpose only.
- Slack carries internal notifications to our team, such as a new order.
- Facebook, if you contact our Page or Marketplace listings there, under Facebook's own terms.
We may also share information when the law requires it, or to protect our customers, our shop, or others from fraud or harm.
Cookies
We don't use advertising or tracking cookies. Services you use through our site, such as Stripe's payment page and Cloudflare's bot check, may set their own cookies or similar technologies under their own policies.
We send order confirmations and shipping updates. If you join the Vault Club, we also email you members-only deals. Every one of those emails has an unsubscribe link and our postal address, and we do not send Vault Club deals to anyone who hasn't joined or who has unsubscribed. If you are on our comic pull list, we email you when books held for you come in, and may remind you if they are still waiting. We may occasionally email you about something you asked for or a follow-up on a recent order. If you'd like us to stop emailing you, use the unsubscribe link or tell us at store@legacycardvault.com and we will.
How long we keep information
We keep order and sales records as long as we need them for returns, disputes, tax and accounting, and other legal requirements. Other information, like want-list requests, is kept only as long as it is useful, and is removed when you ask. Pull-list requests and the books held for you are kept while you are on the list. Vault Club members stay on the list until they unsubscribe, and we keep a record that they did so we never email them again.
Security
We use reasonable safeguards to protect your information, including encrypted connections and restricted access for our staff. No method of storing or sending information is completely secure, so we can't promise absolute security.
Your choices
You can ask us what information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop emailing you by writing to store@legacycardvault.com. We may need to keep certain records, such as past orders, where the law requires it.
Children's privacy
Our shop and website are not directed to children under 13, and we do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. The "last updated" date above shows the most recent revision.
Contact us
Questions about this policy? Email store@legacycardvault.com or write to us at 18 W Water St, Chillicothe, OH 45601.