Privacy Policy

TCG Exchange ("TCGXC," "we," "us," or "our") operates the website located at https://www.tcgxc.com and the TCGXC mobile application (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Platform. By using TCGXC, you agree to the practices described in this policy.

1. Information We Collect

Information You Provide

• ›Account information — display name, email address, and password when you create an account.
• ›Profile information — avatar, bio, preferred games, and settings you optionally add to your profile.
• ›Collection data — cards, slabs, and other items you add to your collection, including condition, quantity, purchase price, and notes.
• ›Grading submissions — information you enter about cards submitted for grading, including tracking numbers and submission costs.
• ›Trade records — cards and values entered into the Trade Analyzer.
• ›Marketplace listings — card details, pricing, photos, and shipping information when you list items for sale.
• ›Communications — messages or requests submitted to our support team.
• ›Identity verification (KYC) — for marketplace sellers, we collect identity verification information as required by law and to maintain platform trust.

Information Collected Automatically

• ›Usage data — pages visited, features used, search queries, and time spent on the Platform.
• ›Device information — device type, operating system, browser type, and IP address.
• ›Location data — approximate location derived from IP address, and precise location if you grant permission for Card Show Finder features.
• ›Camera data — if you use the card scanner, images are processed to identify cards but are not permanently stored.

Information from Third Parties

• ›Google sign-in — if you choose to sign in with Google, we receive your name, email address, and profile picture from Google.
• ›Pricing APIs — we fetch publicly available card pricing data from third-party sources (eBay, Scryfall, pokemontcg.io, YGOPRODeck) to power our price tracking features.

2. How We Use Your Information

We use the information we collect to:

• ›Create and manage your account and authenticate your identity.
• ›Display and manage your card collection, slab collection, and wishlist.
• ›Provide price tracking, market intelligence, and portfolio valuation features.
• ›Power the Trade Analyzer, Card Show Finder, and other Platform features.
• ›Facilitate marketplace transactions between buyers and sellers, including escrow and dispute resolution.
• ›Send transactional emails such as account confirmation, price alerts, and order updates.
• ›Improve the Platform, fix bugs, and develop new features.
• ›Detect and prevent fraud, abuse, and violations of our Terms of Service.
• ›Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• ›Public profile and collection — if you set your collection to public, other users can view your binders and collection. You control this setting.
• ›Marketplace transactions — when you complete a transaction, necessary information (shipping address, contact details) is shared between buyer and seller to fulfill the order.
• ›Card Show Finder — when you check in as a vendor, your table number and availability status are visible to buyers at the same show.
• ›Service providers — we use Supabase for database and authentication, Vercel for hosting, and other essential service providers. These providers process data only as necessary to provide their services.
• ›Legal requirements — we may disclose information if required by law, court order, or government authority.
• ›Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your account and collection data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes (such as completed marketplace transaction records). Anonymized and aggregated data (such as price history trends) may be retained indefinitely as it cannot identify you.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• ›Access — request a copy of the personal information we hold about you.
• ›Correction — update or correct inaccurate information in your account settings.
• ›Deletion — request deletion of your account and personal information.
• ›Portability — export your collection data in CSV format at any time.
• ›Opt-out — unsubscribe from non-essential emails via the link in any email we send.
• ›Location — deny location permissions at any time through your device settings. This will disable Card Show Finder location features.
• ›Camera — deny camera permissions at any time through your device settings. This will disable the card scanner.

To exercise any of these rights, contact us at privacy@tcgxc.com.

6. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS), encrypted data storage, row-level security policies on our database ensuring users can only access their own data, and access controls limiting who can access personal information internally. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to notify us immediately at privacy@tcgxc.com if you suspect any unauthorized access to your account.

7. Cookies and Tracking

We use essential cookies and local storage to maintain your login session and preferences. We do not use third-party advertising cookies or sell data to advertisers. We use Vercel Analytics for anonymous, aggregated usage statistics to help improve the Platform. This data cannot identify you individually.

8. Children's Privacy

TCGXC is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@tcgxc.com and we will promptly delete it.

9. Third-Party Links and Services

Our Platform may display prices sourced from eBay, TCGPlayer, Scryfall, and other third-party services. Clicking links to these services will take you to their platforms, which have their own privacy policies. We are not responsible for the privacy practices of third-party services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or a prominent notice on the Platform. Your continued use of TCGXC after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: