Privacy Policy

1. Who we are

TCG Stack ("we", "us", "our") is a platform for trading card game collectors to track and manage their collections. Our service is available at tcgstack.com and via our mobile apps.

For any privacy-related questions, contact us at hello@tcgstack.com.

2. Information we collect

Account information. When you register, we collect your email address, display name, and a securely hashed password. We never store your password in plain text.

Collection data. We store the cards and sealed products you add to your collection, including quantities, conditions, variants, languages, grades, and any notes you provide. This data belongs to you.

Usage data. We collect anonymised event data (page views, feature interactions) to understand how the platform is used and improve it. This data does not include the contents of your collection.

Error data. We capture technical error reports when something goes wrong, which may include device and browser information. These reports never include your collection contents, passwords, or payment details.

3. How we use your information

• To provide, maintain, and improve the TCG Stack service.
• To authenticate your account and keep it secure.
• To display market prices and estimated collection values.
• To send transactional emails (account verification, password reset). We do not send marketing emails without your explicit consent.
• To send push notifications, if you have opted in on your device.
• To detect and prevent abuse, fraud, and security incidents.

4. Third-party services

We use the following third-party services to operate TCG Stack. Each has its own privacy policy governing how they handle data.

• Supabase — database, authentication, and file storage. Your account and collection data is stored on Supabase-managed infrastructure.
• Firebase (Google) — push notification delivery. A device token is registered with Firebase when you opt in to notifications.
• PostHog — product analytics. Anonymised usage events only; no collection contents or personal identifiers are sent.
• Sentry — error monitoring. Error reports are scrubbed to remove passwords, tokens, and personally identifiable information before transmission.
• eBay — market price data. We query eBay's API to retrieve card prices. We do not share your personal data with eBay.
• Stripe — payment processing for premium subscriptions. We never see or store your full card number; Stripe handles all payment data directly.
• Resend — transactional email delivery.

5. Data retention

We retain your account and collection data for as long as your account is active. If you delete your account, your personal data and collection data are permanently deleted within 30 days. Anonymised analytics data and aggregated error reports may be retained indefinitely as they cannot be linked back to you.

6. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and all associated data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.

To exercise any of these rights, email us at hello@tcgstack.com. We will respond within 30 days.

7. Cookies and local storage

We use browser local storage to maintain your session and remember preferences such as your selected currency. We do not use third-party advertising cookies or tracking pixels.

8. Children's privacy

TCG Stack is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email.

10. Contact

Questions or concerns? Reach us at hello@tcgstack.com.