Terms and Conditions of Sale and Use

Version 2.1.1 — Applicable as of May 20, 2026 Last updated: May 20, 2026 Earlier versions archived and available on request at [email protected]

---

In short — the essentials in 7 points

This summary has no contractual scope. In the event of any discrepancy of interpretation, articles 1 to 30 prevail.

1. Who is selling? CARDONAUT SAS, 61 Avenue de Toulouse, 31750 Escalquens, France, RCS Toulouse 988 997 573. Share capital €1,000.
2. What? Cardonaut mobile application (iOS/Android) with integrated sale of TCG products (boosters, displays, ETBs, decks, single cards, accessories) + in-app virtual currency Aether Fragments restricted to cosmetics.
3. Where? Delivery to metropolitan France, Belgium and Luxembourg.
4. Minimum age: 15 years old (checkbox at registration). Parents may request the deletion of their child's account at any time.
5. Change your mind? 14 days to withdraw, "Request a withdrawal" button directly in the app (article 11).
6. Dispute? Amicable approach first, then free mediation via CM2C (article 14), then the court of your place of residence if necessary (article 29).
7. Changes to the Terms? 30 days notice + right of refusal + termination free of charge (article 28).

---

Preamble

These Terms and Conditions of Sale and Use (hereinafter "T&Cs" or "Conditions") govern:

1. The use of the Cardonaut mobile applications distributed on Apple's App Store and the Google Play Store (hereinafter the "Applications");
2. The distance sale, integrated into these Applications, of products related to trading card games (hereinafter the "Products");
3. Access to the associated services: smart assistant Cardo IA, AI-based card scanning pipeline, collection management, in-app virtual currency Aether Fragments, gamification programs (hereinafter together the "Services").

Important note: the website cardonaut.shop, which previously hosted a separate online store, is closed. All Cardonaut sales now take place through the mobile Applications. The corporate website cardonaut.com remains active for informational and legal purposes (legal notice, policies, support).

These T&Cs are entered into between:

CARDONAUT, a simplified joint-stock company (SAS) with share capital of €1,000, registered in the Toulouse Trade and Companies Register under number 988 997 573, whose registered office is located at 61 Avenue de Toulouse, 31750 Escalquens, France, identified by the intra-EU VAT number FR90 988 997 573, represented by its President Mr. Luc LABBÉ

hereinafter referred to as "Cardonaut"

and any natural person aged at least fifteen (15) years, who is a consumer within the meaning of the preliminary article of the French Consumer Code, who places an order in the Application or uses the Services (hereinafter "you", "Customer" or "User").

⚠️ Important reading: these T&Cs contain essential information about your rights, your obligations, the terms of delivery, the right of withdrawal, the legal warranties, the processing of your personal data and the procedures for settling disputes. Cardonaut invites you to read them carefully before any use of the Services. An indicative summary appears in the "In short" section above.

Acceptance of these T&Cs is given:

• at account creation: by ticking (i) the "I certify that I am at least 15 years old" box and (ii) the "I have read and accept the Cardonaut Terms" box;
• at each substantial change: by validating a re-acceptance screen presented the next time the Application is opened after the new version comes into force (see article 28);
• at each order: by final validation via the "Order with obligation to pay" button (article L.221-14 of the French Consumer Code).

---

Table of contents

1. Definitions
2. Scope and acceptance
3. Identity of the seller
4. Legal capacity — Minors
5. User accounts
6. Description of products and Services
7. Prices
8. Order and conclusion of the contract
9. Payment
10. Delivery and transfer of risk
11. Right of withdrawal
12. Legal warranties
13. After-sales service — Complaints
14. Mediation and dispute resolution
15. Aether Fragments — in-app virtual currency
16. User-to-user marketplace
17. AI scan pipeline and Cardo IA assistant
18. Intellectual property
19. User-generated content
20. Prohibited behaviour
21. Suspension and termination of the account
22. Availability of the Services and force majeure
23. Personal data
24. Cookies and trackers
25. Liability
26. Subcontracting and assignment
27. Miscellaneous provisions
28. Amendment of the T&Cs
29. Applicable law and jurisdiction
30. Contact details and complaints

---

1. Definitions

In these T&Cs, the terms below have the following meanings:

• Applications: the Cardonaut mobile applications distributed on the iOS App Store and the Google Play Store.
• Corporate website: the website accessible at cardonaut.com, for informational purposes (legal notice, policies, support, pre-contractual information).
• Services: all the features offered by Cardonaut through the Applications, including the integrated sale of Products, the Cardo IA assistant, the scan pipeline, collection management, Aether Fragments and the gamification programs.
• Account: personal area of a User, created by registration or anonymously, identified by a unique identifier.
• Customer: natural person consumer who has placed an order in the Application.
• User: natural person using the Applications, whether or not they have placed an order.
• Consumer: within the meaning of the preliminary article of the French Consumer Code, any natural person who acts for purposes that do not fall within the scope of their commercial, industrial, craft, liberal or agricultural activity.
• Cardo IA: smart conversational assistant integrated into the Cardonaut environment, powered by third-party language models (in particular Anthropic's Claude Sonnet).
• Aether Fragments: in-app virtual currency, with no discharging value, described in article 15.
• Product: any item offered for sale in the Application (boosters, displays, ETBs, preconstructed decks, single cards, accessories).
• TCG: Trading Card Game (Pokémon, Magic: The Gathering, One Piece, Yu-Gi-Oh!, Lorcana, Riftbound, Flesh and Blood, etc.).
• Substantial change: amendment of the T&Cs concerning the main obligations of either party (subject of the contract, prices, payment terms, duration, termination conditions, jurisdiction, warranties).

2. Scope and acceptance

2.1. Contractual documents

These T&Cs form, together with the documents below (together: the "Contract"), the entire agreement between Cardonaut and the User:

• the Refund Policy;
• the Shipping Policy;
• the Privacy Policy;
• the Legal Notice;
• the List of subprocessors;
• the order summary sent by email.

In the event of conflict, the order of precedence is: (i) the order summary, (ii) these T&Cs, (iii) the annexed policies.

2.2. Acceptance

Use of the Services implies full and unreserved acceptance of these T&Cs. Acceptance is collected:

• At registration: via a dedicated checkbox ("I have read and accept the Terms and Conditions of Sale and Use"), separate from the minimum-age checkbox (see article 4.2) and separate from the validation button.
• At each substantial change of the T&Cs: via a modal window in the application requiring a new explicit acceptance before being able to continue using the Services (see article 28).

At each order of a physical Product, the User also validates their purchase via a button bearing the wording "Order with obligation to pay" in accordance with article L.221-14 of the French Consumer Code. This button does not constitute a re-acceptance of the T&Cs but reflects the contractual commitment for the specific order.

2.3. Applicable version

The applicable T&Cs are those in force on the date of the order or of the last acceptance by the User. Cardonaut keeps a copy of each version to allow, where applicable, its return to the User upon simple request at [email protected].

3. Identity of the seller

For any question relating to hosting, publication management or French data-protection (CNIL) declaration, please refer to the Legal Notice.

4. Legal capacity — Minors

4.1. Legal capacity of adult persons

To place an order in the Application or conclude a contract for paid Services, the User declares that they have full legal capacity within the meaning of articles 414 et seq. of the French Civil Code.

4.2. Minimum age 15 — declaration on honour

The Services are reserved for persons aged at least fifteen (15) years. At registration, the User declares on their honour, through a dedicated checkbox, that they meet this age condition.

This 15-year threshold corresponds to the age from which a minor can consent alone to the processing of their personal data in France, in accordance with article 45 of amended French Law n° 78-17 of January 6, 1978 (the "French Data Protection Act") transposing article 8 of the GDPR.

4.3. Purchases by minors aged 15 to 17

Minors aged 15 to 17 can consent alone to the processing of their personal data, but cannot conclude online purchases for amounts exceeding everyday acts without the authorisation of their legal representative (article 1148 of the French Civil Code). In the event of a manifestly disproportionate purchase made by a minor, the holder(s) of parental authority may, with supporting evidence, request the cancellation of the order in accordance with common-law provisions.

4.4. Deletion at the request of parents

If Cardonaut discovers, or is informed by a holder of parental authority, that an Account has been created by a minor under 15, this Account is deactivated without delay and deleted within a maximum of thirty (30) days upon receipt of a written request made by the holder of parental authority at [email protected], accompanied by proof of identity and of legal-representative status, in accordance with article 12 of the GDPR.

The holder of parental authority may also, under the same conditions, request the deletion of the Account of a minor aged 15 to 17 at any time.

5. User accounts

5.1. Account creation

Use of the Applications is possible:

• anonymously (no personal information required beyond a technical identifier stored on the device);
• in an authenticated manner, by creating an account with an email address. Login is by OTP (one-time password sent by email).

The purchase of Products requires at minimum the provision of a valid email address and a delivery address.

5.2. Credentials and security

The User is solely responsible for the confidentiality of access to their Account and for all operations carried out via this Account. Any use of the Account is deemed to be carried out by the User. In the event of loss, theft or unauthorised use, the User undertakes to inform Cardonaut without delay at [email protected].

5.3. Personal and non-transferable nature

The Account is strictly personal. The User may not assign, sell, transfer or make it available to a third party without Cardonaut's prior written consent.

5.4. Account merger

When an anonymous User subsequently authenticates with an email address corresponding to an existing account, their data collected in anonymous mode (collection, scans, preferences, Aether Fragments balances) are merged with the existing account. The anonymous Account is then archived.

⚠️ No transfer of Aether Fragments is possible between separate accounts of different users. The merger only operates between an anonymous account and an authenticated account belonging to the same natural person.

6. Description of products and Services

6.1. Application catalogue

The Application offers for sale products related to trading card games:

• Sealed products: boosters, displays, Elite Trainer Boxes (ETB), tins, preconstructed decks, bundles;
• Single cards: cards sold individually, according to their edition, their condition (perfect / excellent / played / damaged or publisher equivalent) and their rarity;
• Accessories: sleeves, binders, deckboxes, playmats, top loaders, etc.

The essential characteristics of each product are described on its product page: publisher, series, language, state, condition, content (where applicable), rarity, size (where applicable). Cardonaut endeavours to faithfully represent its products; however, minor differences between the visuals (colours, brightness of foil effects, photographs taken under varying lighting) and the delivered product may exist without constituting a lack of conformity.

The catalogue is subject to change. Cardonaut reserves the right to withdraw a product or modify its description without notice, without affecting orders that have already been accepted.

6.2. Product availability

Product offers are valid as long as they are visible in the Application, within the limit of available stock. In the event of unavailability of a product after order, Cardonaut will inform the Customer by email as soon as possible and will proceed, at the Customer's choice, either with a full refund of the corresponding amount (within fourteen (14) days, art. L.216-3 of the French Consumer Code), or with the delivery of an equivalent product (subject to express agreement from the Customer).

6.3. Delivery geographic area

The Products are only sold and delivered to metropolitan France, Belgium and Luxembourg. The details of the procedures, delivery methods and prices are set out in the Shipping Policy.

6.4. Associated services

In addition to the sale of Products, Cardonaut offers the following Services within the Applications:

• collection management (personalised inventory, virtual binders, decks, statistics);
• card scanning pipeline (automatic visual recognition — see art. 17);
• conversational assistant Cardo IA (see art. 17);
• loyalty and gamification programs (quests, lootboxes, Aether Fragments virtual currency — see art. 15).

These Services are today provided free of charge in their entirety, following Cardonaut's decision of April 10, 2026 to make the application free for all users (removal of the paid Crew and Stellar subscriptions). Cardonaut reserves the right to offer additional paid features in the future, subject to prior information and express consent from the User.

7. Prices

7.1. Display of prices

Product prices are displayed in euros (€), inclusive of all taxes (French VAT at the applicable rate), excluding delivery costs.

The order summary displayed before validation details:

• the unit price of each product;
• the quantity;
• the subtotal;
• the delivery costs;
• the total VAT-inclusive amount.

7.2. Validity of the price

The applicable price is the one in force at the time of order validation. Any subsequent change in the price of a product has no retroactive effect on orders already accepted.

7.3. Manifest error

In the event of a manifest pricing error (for example a product displayed at a derisory price due to a technical bug), Cardonaut reserves the right, in accordance with article 1132 of the French Civil Code on error, to cancel the order and proceed with a full refund of the Customer. This decision will be notified to the Customer as soon as possible.

7.4. Promotions

Promotions, discount codes and special offers are subject to specific conditions specified at the time of their issuance. Unless otherwise indicated, they are not combinable.

7.5. Virtual purchases (Aether Fragments and cosmetics)

Aether Fragments and other in-app virtual goods possibly purchased against real payment are sold under the conditions displayed at the time of purchase, via Apple's (App Store) and Google's (Play Store) in-app stores, in accordance with their own terms (see article 9.5).

8. Order and conclusion of the contract

8.1. Ordering process

The order is placed according to the following steps within the Application:

1. Selection of products and addition to the cart;
2. Cart validation;
3. Identification (account creation or login);
4. Entry of the delivery address and choice of delivery method;
5. Detailed summary (article L.221-14 of the French Consumer Code);
6. Final validation via the "Order with obligation to pay" button (wording compliant with article L.221-14 of the French Consumer Code);
7. Payment.

8.2. Order confirmation

At the end of the process, Cardonaut sends the Customer a confirmation email containing all the order details. The conclusion of the contract is subject to the Customer's receipt of this confirmation email.

8.3. Refusal or cancellation of order

Cardonaut reserves the right to cancel or refuse any order in the following cases, it being specified that no other arbitrary cause of cancellation may be invoked against the Consumer:

• total or partial non-payment of a previous order;
• delivery address manifestly incorrect, fictitious or incomplete;
• reasonable suspicion of fraud supported by a body of evidence (inconsistency between the account, the contact details and the means of payment);
• stock-out;
• manifest pricing error (see art. 7.3);
• abusive use of the Services (see art. 20).

In the event of cancellation, the Customer is informed by email as soon as possible, and any sum already debited is fully refunded within fourteen (14) days.

8.4. Archiving of orders

Cardonaut archives the order forms and invoices on a reliable and durable medium constituting a faithful copy, in accordance with article L.213-1 of the French Consumer Code (for contracts of an amount greater than €120). The Customer may request a copy at [email protected].

9. Payment

9.1. Accepted means of payment (Physical Products)

Payments relating to physical Products are processed by Stripe (Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). The accepted means of payment are:

• Bank cards (Visa, Mastercard, American Express);
• Apple Pay;
• Google Pay.

9.2. Payment security

Bank data is collected and processed directly by Stripe without transiting or being stored on Cardonaut's servers. Transmission is secured by standard protocols (TLS, PCI DSS level 1 compliance).

9.3. Debit and invoicing

Debit is made at the time of order validation. An invoice is made available in the customer area after shipment.

9.4. Payment failure

In the event of rejection of the payment by the banking institution, the order is automatically cancelled and the Customer is informed by email.

9.5. In-app purchases via Apple and Google

Purchases of in-app virtual goods (Aether Fragments, cosmetics, any premium content) are carried out exclusively via the in-app stores of the distribution platform:

• iOS: Apple's App Store (Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland);
• Android: Google Play Store (Google Ireland Limited, Gordon House, Barrow Street, Dublin, Ireland).

As such, refunds for these purchases are governed exclusively by Apple's or Google's terms, and not by Cardonaut's refund policy. The User is invited to contact Apple or Google for any in-app purchase refund request.

10. Delivery and transfer of risk

The terms of delivery are detailed in the Shipping Policy, which forms an integral part of these T&Cs.

⚠️ Mandatory provision — Article L.216-4 of the French Consumer Code:

The risk of loss or damage to the products is transferred to the Customer at the time when the Customer, or a third party designated by the Customer (other than the carrier), takes physical possession of the goods.

Any contrary clause shall be deemed unwritten.

The overall delivery time cannot exceed thirty (30) days from the conclusion of the contract (art. L.216-1 of the French Consumer Code). In the event of exceeding this period, the Customer may make use of article L.216-2 of the French Consumer Code (formal notice then termination) — see Shipping Policy.

In the event of an incorrect delivery address or a parcel not collected at a pickup point resulting in return to sender, a re-shipment flat fee of €6.90 incl. VAT is charged to the Customer if they wish to have the parcel re-shipped (see Shipping Policy § 8).

11. Right of withdrawal

In accordance with articles L.221-18 to L.221-28 of the French Consumer Code, the Customer has a period of fourteen (14) days to exercise their right of withdrawal, without having to justify their decision and without penalty.

11.1. Terms of exercise

Three means are made available to you to exercise this right:

1. "Request a withdrawal" button in the Application: from the "My orders" screen, a dedicated button triggers a pre-filled form, in accordance with article L.221-21-1 of the French Consumer Code (introduced by Ordinance n° 2026-2 of January 7, 2026 transposing Directive (EU) 2023/2673). A time-stamped acknowledgement-of-receipt email is automatically sent and serves as proof. Cardonaut recommends this option.
2. Standard withdrawal form attached to the Refund Policy (Annex A);
3. Written declaration by email at [email protected] or by post to CARDONAUT SAS — Withdrawal Service, 61 Avenue de Toulouse, 31750 Escalquens, France.

11.2. Exceptions to the right of withdrawal

In accordance with article L.221-28 of the French Consumer Code, the right of withdrawal cannot be exercised for contracts concerning in particular:

• the supply of goods unsealed by the Consumer after delivery and which cannot be returned for reasons of hygiene or health protection (art. L.221-28, 6°). On this basis, boosters, displays, ETBs, tins and sealed decks are returnable as long as their original seal is intact. Once these products are unsealed or opened, they can no longer be the subject of a withdrawal;
• goods made to the Consumer's specifications or clearly personalised (art. L.221-28, 3°);
• gift cards whose code has been revealed or used.

11.3. Costs and time limits

In the absence of voluntary coverage by Cardonaut (in the event of defect, non-compliance, Cardonaut error, rare card damaged — see Refund Policy), the direct costs of returning the goods are borne by you.

The refund is made within fourteen (14) days from the date on which Cardonaut is informed of your withdrawal decision, by the same means of payment as the one used initially (unless expressly agreed otherwise).

For the full terms (calculation of time limits, depreciation, exceptions, seasonal commercial warranties, recourse), please refer to the Refund Policy.

12. Legal warranties

📜 Informational box — Legal warranties (article L.211-2 of the French Consumer Code transposed)

Cardonaut SAS is bound, independently of any commercial warranty, by defects of conformity of the goods under the conditions of articles L.217-3 et seq. of the French Consumer Code and by hidden defects of the goods sold under the conditions of articles 1641 to 1648 of the French Civil Code.

• Legal warranty of conformity: 2 years from delivery of the goods. Presumption of pre-existence of the defect for 24 months.
• Warranty against hidden defects: 2 years from the discovery of the defect.
• You may choose between the repair and the replacement of the goods, subject to the cost conditions provided for in article L.217-12 of the French Consumer Code.
• You are exempted from providing proof of the existence of the defect during the 24 months following delivery.

No provision of these T&Cs may deprive the Customer of these warranties, which remain applicable independently of any commercial warranty.

The terms of implementation are specified in the Refund Policy, articles 2 et seq.

⚠️ Cardonaut does not currently offer any additional commercial warranty beyond the legal warranties.

13. After-sales service — Complaints

Any complaint may be addressed:

• by email: [email protected];
• by post: CARDONAUT SAS — Customer Service, 61 Avenue de Toulouse, 31750 Escalquens, France.

Cardonaut undertakes to respond within a reasonable time, generally within seven (7) working days.

14. Mediation and dispute resolution

14.1. Prior complaint

Any complaint must first be the subject of a prior written approach to Cardonaut, in accordance with article L.612-2 of the French Consumer Code.

14.2. Consumer mediator

In accordance with articles L.611-1 et seq. of the French Consumer Code and article R.616-1 of the French Consumer Code, and in accordance with the provisions of the French Consumer Code regarding "the consumer dispute mediation process", after contacting us and failing to receive a satisfactory response, you have the option of resorting free of charge to a consumer mediation procedure with:

CM2C 49 rue de Ponthieu, 75008 Paris, France Phone: +33 1 89 47 00 14 Website: https://www.cm2c.net/declarer-un-litige.php Email: [email protected]

Referral to the mediator is free for the consumer. It is only admissible after a prior written approach from the Customer to Cardonaut, and no later than within one (1) year of this complaint.

Note: the European Online Dispute Resolution (ODR) platform established by Regulation (EU) No 524/2013 was closed on July 20, 2025 by virtue of Regulation (EU) 2024/3228. No referral is possible through this platform.

14.3. Judicial action

In the absence of an amicable settlement, the dispute may be brought before the competent courts in accordance with the rules of Regulation (EU) No 1215/2012 known as "Brussels I bis": see article 29.

15. Aether Fragments — in-app virtual currency

15.1. Legal nature

Aether Fragments (in French: "Fragments d'Éther") refers to an internal virtual currency, specific to the Cardonaut ecosystem, awarded to Users as a reward for the use of the Services (quests, lootboxes, community events) or, where applicable, acquired via in-app purchases on the App Store or the Google Play Store.

⚠️ Aether Fragments constitute an internal commercial credit. They DO NOT constitute:

• electronic money within the meaning of article L.315-1 of the French Monetary and Financial Code;
• a payment instrument within the meaning of article L.133-4 of the French Monetary and Financial Code;
• a crypto-asset within the meaning of Regulation (EU) 2023/1114 ("MiCA").

They have no discharging value and are not convertible into legal-tender currency.

15.2. Characteristics

• Non-transferable: cannot be transferred to another User, sold or exchanged for goods or services outside the Cardonaut ecosystem;
• Non-refundable: cannot be converted into cash, into cryptocurrency or into any other financial instrument;
• No resale value: do not constitute an asset from a financial standpoint;
• Reserved for in-app cosmetics: usable exclusively to purchase cosmetic virtual goods (avatars, borders, badges, virtual lootboxes, visual content). They cannot be used to purchase physical Products sold by Cardonaut;
• No expiry as long as the account is active: no expiration deadline applies as long as the User remains connected to their account.

15.3. Acquisition

Users may acquire Aether Fragments through:

• the completion of quests and participation in gamification events;
• the opening of lootboxes (free or cosmetic);
• loyalty rewards;
• promotional events;
• where applicable, in-app purchases made via the App Store or Google Play Store (to the exclusion of any direct sale by Cardonaut SAS against payment).

No purchase of Aether Fragments directly against euros via Stripe is offered to date.

15.4. Account deletion

In the event of account deletion (at the User's or Cardonaut's initiative), Aether Fragments are permanently lost without financial compensation. This loss cannot give rise to any compensation.

15.5. Schedule modification

Cardonaut reserves the right to modify the schedule of allocation, the cost of use and the possible uses of Aether Fragments. However, these modifications cannot have the effect of reducing the balances acquired by Users without prior information and a reasonable period of use.

15.6. Evolution of the model

If Cardonaut were to later offer a direct sale of Aether Fragments against euros (outside in-app purchases via the App Store/Play Store) or to extend their use to physical Products, these T&Cs would be updated and the legal analysis (in particular with regard to the possible qualification as electronic money within the meaning of article L.315-1 of the French Monetary and Financial Code, and the need for authorisation from the ACPR (Autorité de contrôle prudentiel et de résolution — the French banking and insurance supervisory authority) or recourse to a licensed payment service provider) would be reconsidered before launch.

16. User-to-user marketplace

16.1. Current status — not available

At the date of entry into force of these T&Cs, no user-to-user marketplace is offered by Cardonaut: the sales integrated into the Application are operated exclusively by Cardonaut SAS as direct seller.

16.2. Reservation for future activation

Cardonaut reserves the possibility of subsequently activating a marketplace feature allowing Users to exchange or sell physical cards between themselves. Such activation would be the subject of an amendment to these T&Cs, with 30-days notice and right of refusal under the conditions of article 28, and would specify in particular:

• Cardonaut's qualification (pure DSA host or intermediary operator);
• the obligations applicable under Regulation (EU) 2022/2065 (the "Digital Services Act");
• the reporting obligations under Regulation (EU) 2024/3022 transposing the "DAC7" directive (reporting of revenues of certain sellers to tax authorities);
• the mechanism for reporting illicit content (art. 16 DSA);
• the respective liability of Cardonaut, the User seller and the User buyer.

16.3. Reporting of illicit content (DSA)

Independently of any marketplace, any User may report to Cardonaut, at the address [email protected], any content (comment, message in Cardo IA, card photograph, profile element) that would be manifestly illicit (counterfeiting, fraud, harassment, child-pornography content, terrorism apology, etc.). Cardonaut processes reports with due diligence under the conditions and within the deadlines provided for by article 16 of Regulation (EU) 2022/2065 (DSA).

The single point of contact under article 11 of the DSA is: [email protected].

17. AI scan pipeline and Cardo IA assistant

17.1. How the scan works

The Applications offer an automatic card recognition service powered by artificial intelligence:

• a first detection phase runs locally on the User's device (TFLite YOLOv8 model);
• a second OCR (optical character recognition) phase runs on Cardonaut's servers, calling on third-party language models (Google Gemini Flash 2.5, Anthropic Claude Sonnet);
• the User systematically confirms the card eventually identified before it is added to their collection.

17.2. Automated decision — GDPR art. 22 right

The proposed identification constitutes an automated decision with limited effect, the User retaining final control (validation, rejection, correction). On this basis, and in accordance with article 22 of the GDPR, the User has the right to obtain human intervention, to express their point of view and to contest the decision. To exercise these rights: [email protected].

The details of operation, the legal bases and the retention periods associated with AI scanning are described in article 5 of the Privacy Policy.

17.3. Cardo IA

The Cardo IA assistant is a conversational agent powered by generative-AI models (in particular Claude Sonnet, provided by Anthropic, USA). The conversations are:

• processed in real time via third-party APIs;
• kept on Cardonaut's servers to allow continuity of the User's history (duration: 24 months or until a deletion request);
• not used by Anthropic or Google to train their models, in accordance with the contractual service clauses signed by Cardonaut.

17.4. Limits of the AI Services

⚠️ The responses generated by Cardo IA and the identifications proposed by the scan pipeline are probabilistic in nature and may contain inaccuracies.

The User is invited to exercise their judgement, in particular for uses that would have a financial impact (price estimation, identification of rare cards, purchase advice).

Cardonaut cannot guarantee the absolute accuracy of the results provided by these Services. Price estimates, descriptions and characteristics are provided for information purposes only.

17.5. Behavioural anti-abuse detection

Cardonaut implements an automated behavioural-detection service intended to prevent fraud (artificial multiplication of accounts, exploitation of bugs, mass card additions incompatible with normal use). The parameters and purposes of this processing are described in article 5.3 of the Privacy Policy.

The User has the same rights as in article 17.2 with respect to any measure taken on the basis of this detection (in particular suspension of the Account under article 21).

17.6. Personal data

Data processing in connection with AI scanning, Cardo IA and behavioural detection is detailed in the Privacy Policy.

18. Intellectual property

18.1. Cardonaut's property

All elements making up the Services (text, illustrations, logos, graphic charter, source code, structured database, "Cardonaut" trademark, algorithms, proprietary AI models, etc.), to the exclusion of content belonging to third parties, are the exclusive property of Cardonaut SAS or are subject to an operating licence in its favour. They are protected by the provisions of the French Intellectual Property Code and the applicable international conventions.

18.2. Licence of use granted to the User

Subject to compliance with these T&Cs, Cardonaut grants the User a personal, non-exclusive, non-transferable and revocable licence to use the Services, for strictly personal and non-commercial purposes, for the duration of use of the Services.

Any other use (reproduction, representation, adaptation, modification, translation, making available to the public, commercial exploitation, scraping, systematic extraction of the database, etc.) is strictly prohibited without prior written authorisation from Cardonaut, under penalty of incurring the User's civil and criminal liability (articles L.335-2 and L.342-1 of the French Intellectual Property Code).

18.3. Third-party trademarks and card visuals

The trademarks, names and card visuals belonging to the publishers of the referenced games (in particular The Pokémon Company International, Wizards of the Coast, Bandai, Konami, Disney/Ravensburger, Bushiroad) remain the exclusive property of their holders. Their reproduction by Cardonaut is carried out for documentary and descriptive purposes, within the limits of article L.713-6 of the French Intellectual Property Code, without any affiliation, sponsorship or endorsement by these holders being claimed.

18.4. Cardonaut Orbit (public API)

The use of the public "Cardonaut Orbit" API is governed by specific terms that supplement these T&Cs and are accessible on the dedicated developer area.

19. User-generated content

19.1. Definition

Users may be led to publish on the Services various contents: product reviews, photographs of cards, wishlists, public decks, feedback addressed to Cardo IA, reports, etc. (together: "User Content").

19.2. Licence granted to Cardonaut

The User retains all of their intellectual-property rights over the User Content they publish. However, by publishing this content on the Services, they grant Cardonaut a non-exclusive, free, worldwide, transferable and sublicensable licence, for the statutory duration of protection of the rights and for the sole purposes of operating the Services:

• to reproduce the User Content (in particular to host it on the servers of Cardonaut and its technical processors);
• to represent the User Content on the Services and to other Users;
• for technical adaptation necessary for distribution (formats, resolutions, resizing).

This licence does not allow Cardonaut to commercially exploit the User Content outside the scope of the Services (resale to a third party, integration into advertising outside the Services, etc.) without further express agreement.

19.3. User warranties

The User warrants that they have all the necessary rights to publish the User Content and that it:

• does not infringe any third-party rights (copyrights, trademarks, personality rights, privacy);
• is not illicit, defamatory, insulting, racist, sexist, homophobic, contrary to public decency or applicable legal provisions;
• does not contain viruses, malware, or any code likely to impair the operation of the Services.

The User undertakes to indemnify Cardonaut for any prejudice resulting from a breach of these warranties.

19.4. Moderation

Cardonaut may, without being obliged to do so, moderate User Content a priori or a posteriori and remove any content that is manifestly illicit. Any moderation measure is notified to the User concerned, who may contest it by simple writing to [email protected] within a period of six (6) months from the notification, in accordance with article 20 of the DSA.

19.5. Notice and action — DSA art. 16

Any third party (User or not) may report User Content that they consider illicit via the reporting form available at [email protected], specifying:

• the URL or the reference making it possible to locate the content;
• the precise reason for the report (category of illegality referred to);
• their contact details (except for a report relating to content referred to in articles 3 to 7 of Directive 2011/93/EU — child pornography, which may be anonymous).

Cardonaut acknowledges receipt of the report and notifies its reasoned decision within a reasonable time, in accordance with article 16 of the DSA.

20. Prohibited behaviour

The User undertakes not to use the Services:

• for illicit, fraudulent or harmful purposes;
• to infringe the rights of Cardonaut or third parties (intellectual property, privacy, personality rights);
• to collect personal data of other Users (scraping, harvesting);
• to impersonate a third party;
• to transmit content of a defamatory, insulting, obscene, violent, hateful, discriminatory nature;
• to transmit viruses, worms, Trojan horses or any malicious code;
• to circumvent or attempt to circumvent the security and protection measures of the Services;
• to exploit the Services for commercial purposes without prior authorisation;
• to adopt any abusive behaviour (artificial multiplication of accounts, exploitation of bugs, unauthorised automation, mass card additions manifestly incompatible with normal personal use).

21. Suspension and termination of the account

21.1. Termination on the User's initiative

The User may at any time terminate their Account using the feature provided for this purpose in the Application settings or by sending a request to [email protected]. This termination results in the deletion of the Account and the associated data, under the conditions and within the deadlines specified in the Privacy Policy.

21.2. Termination on Cardonaut's initiative — exhaustively listed cases

Cardonaut may suspend or terminate a User's Account in the cases exhaustively listed below, after having given reasonable notice by email (except in the case of serious or repeated breach justifying an immediate measure):

• serious or repeated breach of these T&Cs (prohibited use art. 20, fraud, abuse);
• persistent payment default;
• suspicion of fraud supported by a body of evidence (in particular via the behavioural detection art. 17.5);
• binding request from a judicial or administrative authority;
• prolonged inactivity of the Account (more than thirty-six (36) consecutive months without any connection).

The User has the right to contest the measure, in writing at [email protected]. Cardonaut undertakes to provide a reasoned response within a reasonable time, and at the latest within thirty (30) days.

21.3. Effects of termination

Termination results in:

• the deletion of the Account and the associated data (under the conditions of the Privacy Policy);
• the loss of Aether Fragments without compensation (see art. 15.4);
• the resolution of orders in progress not yet shipped, with full refund of the sums paid within 14 days.

Orders already shipped remain payable. Obligations applicable after termination (intellectual property, confidentiality, legal warranties in progress) continue to produce their effects.

22. Availability of the Services and force majeure

22.1. Service continuity

Cardonaut endeavours to ensure continuous and secure operation of the Services, but is only bound to an obligation of means (and not of result) in terms of technical availability. The Services may be temporarily interrupted for maintenance operations, updates or in case of technical failure.

22.2. Force majeure

Cardonaut is not liable for the non-performance or late performance of its obligations in the event of force majeure within the meaning of article 1218 of the French Civil Code: unpredictable, irresistible and external events (natural disasters, armed conflicts, pandemics, generalised failures of telecommunications networks, massive cyberattacks, administrative or judicial decisions).

The force-majeure event suspends the affected obligations during its duration. If the impediment is definitive, the contract may be terminated as of right, and the sums paid refunded on a pro rata basis.

23. Personal data

The processing of Users' personal data is governed by the Privacy Policy, which forms an integral part of these T&Cs and which the User declares to have read and accepted.

Cardonaut SAS acts as data controller within the meaning of the GDPR and the French Data Protection Act.

24. Cookies and trackers

The Applications and the corporate website cardonaut.com do not use third-party cookies for advertising purposes. The details of mobile technical SDKs (Firebase Crashlytics, Firebase Analytics, RevenueCat, Sentry/GlitchTip), the App Tracking Transparency (iOS) mechanism and the ways of expressing consent are described in article 9 of the Privacy Policy.

25. Liability

25.1. Strict liability of the online seller

In accordance with article L.221-15 of the French Consumer Code, Cardonaut is strictly liable to the Customer for the proper performance of the obligations resulting from the contract concluded at a distance, whether these obligations are to be performed by Cardonaut or by other service providers (in particular the carrier), without prejudice to its right of recourse against them.

Cardonaut may exonerate itself from all or part of its liability by providing proof that the non-performance or improper performance of the contract is attributable either to the Customer, or to the unpredictable and insurmountable act of a third party foreign to the provision of the services provided for in the contract, or to a case of force majeure.

25.2. Lawful limitations with regard to consumer law

Without prejudice to the strict liability set out in article 25.1, and subject to the applicable mandatory provisions, Cardonaut cannot be held liable:

• for damage caused by the Customer's fault (improper use of the Services, supply of erroneous information);
• for damage caused by the unpredictable and insurmountable act of a third party foreign to the contract;
• for a force-majeure event within the meaning of article 1218 of the French Civil Code.

Cardonaut declines any liability in the event of non-compliant use of the Services by the User or for damage affecting the User's data or equipment resulting from improper configuration of their hardware.

⚠️ No global exclusion or lump-sum limitation of liability is enforceable against the Consumer to the extent that it would conflict with articles R.212-1 and R.212-2 of the French Consumer Code (black and grey clauses). These T&Cs contain no clause of this kind. Any provision found to be contrary to these articles shall be deemed unwritten.

25.3. User's liability

The User is liable for the consequences resulting from:

• the use of their Account by themselves or by a third party to whom they have given access;
• the truthfulness of the information they provide (in particular the declaration on age at registration, art. 4.2);
• compliance with these T&Cs;
• compliance with third-party rights in the User Content they publish.

26. Subcontracting and assignment

26.1. Subcontracting

Cardonaut may use subcontractors (in particular host, carrier, payment service providers, AI model providers) to perform the Services. The up-to-date list, roles and any transfers outside the EU are detailed in article 7 and article 8 of the Privacy Policy as well as on the dedicated List of subprocessors page.

26.2. Assignment of the T&Cs

Cardonaut may transfer these T&Cs and its rights and obligations in the context of a reorganisation operation, a merger, an asset transfer or a universal transfer of patrimony. This assignment shall be notified to the User within a reasonable time and opens to them, when it entails a substantial change in the conditions with regard to their interests, a right to terminate as of right without penalty.

The User may not assign their Account or rights without Cardonaut's prior written consent.

27. Miscellaneous provisions

27.1. Independence of clauses

If any of the provisions of these T&Cs is held to be void or unenforceable by a final court decision, such nullity does not affect the validity of the other provisions, which continue to produce their effects.

27.2. Waiver

The fact that Cardonaut does not avail itself of a provision of these T&Cs cannot be interpreted as a waiver of the right to avail itself of it subsequently.

27.3. Entire agreement

These T&Cs and the annexed documents (see art. 2.1) constitute the entire agreement between the parties and replace any prior agreement or communication relating to the same subject matter.

27.4. Headings

The headings of the articles have only an indicative value and cannot affect the interpretation of the provisions.

27.5. EPR / AGEC — household packaging

Cardonaut SAS is in the process of registering with the eco-organisation CITEO under the Extended Producer Responsibility (EPR) scheme for "household packaging" provided for by French Law n° 2020-105 of February 10, 2020 on combating waste and the circular economy (the "AGEC Law") and articles L.541-10-1 et seq. of the French Environmental Code. The unique identifier issued by ADEME will be published at the address https://cardonaut.com/legal/notice once obtained.

28. Amendment of the T&Cs

28.1. Principle

Cardonaut reserves the right to modify these T&Cs at any time, in particular to adapt to legislative, regulatory, technological or commercial developments.

28.2. Prior information and right of refusal

Any substantial change (within the meaning of article 1) is brought to the attention of Users at least thirty (30) days before its entry into force, by email and by notification within the Applications.

Upon expiry of the 30-day period, the first time the Application is opened, a re-acceptance screen is presented to the authenticated User:

• if they accept the new version, it applies to future contractual relations;
• if they refuse, they may terminate their Account without penalty before the modification comes into force; in the absence of termination and explicit acceptance within 30 days following presentation of the screen, access to the Services may be suspended until regularisation.

28.3. Orders in progress

Orders already accepted remain governed by the T&Cs in force on the date of their acceptance.

29. Applicable law and jurisdiction

29.1. Applicable law

These T&Cs are governed by French law.

However, pursuant to article 6 of Regulation (EC) No 593/2008 known as "Rome I", where the Consumer resides in Belgium or Luxembourg (other Cardonaut delivery zones) or in another Member State of the European Union, they also benefit from the protection afforded to them by the mandatory provisions of the law of their country of residence.

29.2. Jurisdiction

In the event of a dispute with a Consumer, the following jurisdiction rules apply (Regulation (EU) No 1215/2012 "Brussels I bis", articles 17 to 19):

• The Consumer may, at their choice, bring proceedings before:
  • the courts of the place where they are domiciled within the European Union;
  • the courts of the domicile of Cardonaut SAS (competent Court in Toulouse, France).
• Cardonaut may bring an action against a Consumer only before the courts of the Member State of the European Union where the Consumer is domiciled.

30. Contact details and complaints

---

Related documents:

• Refund Policy
• Shipping Policy
• Privacy Policy
• Legal Notice
• List of subprocessors