CARDROSTER · CODEMODEAPPS
Privacy
Published October 7, 2026. Updated October 18, 2026. This notice describes this preview.
Browser storage
Saved and Compare store only selected catalog IDs in this browser’s localStorage. Selections persist on this device and do not sync. Clear them from the Saved or Compare page, or remove site data through your browser. No account is required.
Checklist downloads
CSV downloads contain published reference fields and source links. Player and set checklists are served from this site. A Saved export is prepared locally from this browser’s selected references. The download does not create a synchronized account or send your selections to a new provider. Store and manage the downloaded file through your own device and spreadsheet application.
Requests and hosting
Vercel hosts this preview. Normal page and asset requests disclose network information such as IP address and request headers to the hosting provider, which may retain operational or security logs under its policies. Page view counting is described below.
External links and email
Source and companion-site links open outside CardRoster and are subject to those services’ policies. Fonts, historical reference scans and licensed sport photographs are served from this site. Outside the embedded Baseball page and the eBay listing photos described below, ordinary CardRoster page viewing does not request Wikimedia image hosts or external card images. SluggerData loads its own assets when the Baseball page is opened. The Image credits page links the original sources and reuse notices. If you email hello@codemodeapps.com, your email service and the recipient’s email service process the message.
Embedded baseball site
Opening the Baseball page requests the SluggerData site directly in an iframe. Its hosting, cookies, analytics, authentication and storage follow SluggerData’s own privacy notice and your browser settings. CardRoster does not read the cross-origin frame’s content or exchange Saved/Compare selections with it. Use Open SluggerData for account or checkout features.
Page view counts
CardRoster counts page views with Cloudflare Web Analytics: a script from static.cloudflareinsights.com sends Cloudflare the page address, the referring site, your browser, operating system and device type, and page-load timing, and Cloudflare derives a country from the request. It sets no cookies and stores nothing in your browser. CodeModeApps sees only aggregate counts, and Cloudflare processes these reports under its own privacy policy.
Retailer click counts
When you open an eBay listing link, a script from analytics-dashboard-six-mu.vercel.app, the CodeModeApps click counter hosted on Vercel, records the click: this site, the retailer, the destination address without its query string (so search and affiliate parameters are dropped), the link text and placement, the card and the page you were on. It sets no cookie, uses no account or device identifier and does not store your IP address. Clicks are kept as daily totals that expire after 400 days.
eBay listing photos
A card page may ask CardRoster’s server for one current eBay listing that matches the card. The server searches eBay’s Browse API using only the card’s published identity, never anything about you, and keeps the result for up to five hours without seller details. If a photo is shown, your browser loads it from eBay’s image host, i.ebayimg.com, which receives your network address and browser details. The link to the listing opens eBay and carries CodeModeApps’ eBay Partner Network identifier.
Current collection
CardRoster’s own interface has no sign-up form, newsletter, advertising pixel, checkout, price feed or third-party authentication. It counts page views and eBay listing clicks as described above, and eBay listing links carry an eBay Partner Network identifier. Contact the publisher at hello@codemodeapps.com for questions about this notice.