Privacy Policy

Overview

TCGBank ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication data (securely managed by Supabase)

Collection Data

When you use TCGBank, we store:

• Card information you add (names, sets, conditions)
• Purchase prices and dates you enter
• Notes and planned actions for your cards
• CSV import data

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or sensitive payment details. We only receive confirmation of successful payments and your Stripe customer ID for subscription management.

How We Use Your Information

We use your information to:

• Provide and maintain the TCGBank service
• Process your subscription payments
• Send important service updates (account, billing)
• Respond to your support requests
• Improve our service based on usage patterns

Data Storage and Security

Your data is stored securely using:

• Supabase: Database and authentication (hosted on AWS)
• Stripe: Payment processing (PCI-DSS compliant)
• Vercel: Application hosting

All data transmission uses HTTPS encryption. We implement industry-standard security measures including row-level security policies and secure authentication.

Third-Party Services

We integrate with the following third-party services:

• Pokemon TCG API: To fetch card data and market prices
• Stripe: For secure payment processing
• Supabase: For authentication and data storage
• Google: For optional OAuth sign-in

Each service has their own privacy policy. We encourage you to review them.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

Your Rights

You have the right to:

• Access: Request a copy of your data
• Export: Download your collection via CSV export
• Correction: Update your account information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a standard format

To exercise these rights, contact us at privacy@tcgbank.com

Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or sell your data to advertisers. If we add analytics in the future, we will update this policy and provide opt-out options.

Children's Privacy

TCGBank is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or through the Service. The "Last updated" date at the top reflects when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at: privacy@tcgbank.com