Privacy Policy

1. What we collect

Account details: name, email, and password (encrypted), or your identity from Google if you sign in that way.

Content you post: listings, photos, descriptions, messages to other users, your collection and wishlist.

Technical information: IP address and browser data collected through normal use, plus a session cookie that keeps you signed in.

2. How we use it

To run the service: authenticate you, display listings, enable messages and offers between users, and estimate card market prices.

To send email related to your use of the service: email verification, password resets, notifications about new messages or offers.

To keep the service secure and prevent abuse.

3. Sharing with third parties

We don't sell your personal data. We use the following providers to run TCGTrade:

Google — if you choose to sign in with a Google account.

Resend — to send email on our behalf (verification, notifications).

Vercel and Neon — hosting for the site, database, and images you upload.

TCGdex and eBay — public card data and price references; no personal data of yours is sent there.

4. Cookies

We use a single necessary cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

5. Data security

Passwords are encrypted and never stored in plain text. We apply reasonable security measures but can't guarantee complete security of data transmitted over the internet.

6. Data retention

We keep your information for as long as your account is active. If you'd like to close your account and delete your data, contact us and we'll process the request within a reasonable time.

7. Your rights

Under data protection law you have the right to access, correct, or delete your personal data, and to withdraw consent where applicable. Contact us to exercise these rights.

You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is) if you believe we haven't handled your personal data properly.

8. Children

The service isn't intended for children under 18 without a guardian's consent, consistent with our terms of service.

9. Changes to this policy

We may update this privacy policy from time to time. The date of the last change is shown at the top of this page.

10. Contact

Questions about how we handle personal data can be sent to hjalp@tcgtrade.is.