Privacy Policy

TCG Meta ("we", "us") operates tcgmeta.io and the TCG Meta apps. This policy explains what we collect, why, and the choices you have. The short version: we collect what we need to run a great collecting platform, we monetize market data, never your personal data, and anything beyond the essentials only happens with your consent.

What we collect

• Account data: email, username, display name, profile picture, bio, social links you choose to add, and a hashed password (we can never read the original).
• Collection data: cards, grades, quantities, cost information and watchlists you add to the platform.
• Activity data: actions on the platform such as sign-ups, watches, trades and pack openings, kept as an event history that powers features like trust scores.
• Technical data: device and browser information, IP address, and usage measurements (analytics only with your consent on the web).
• Payment data: when commerce features launch, payments are handled by regulated processors; we do not store full card numbers.

How we use it

• Running the service: accounts, portfolios, watchlists, alerts, purchases (performance of our contract with you).
• Keeping the platform safe: fraud prevention, abuse detection, security (legitimate interest).
• Improving the product: analytics and diagnostics (consent on web, or settings in the app).
• Marketing and partner offers: only with your consent, and you can withdraw it any time.
• Aggregated market intelligence: we build and may commercialize statistics about the trading card market, such as price trends and sales volumes. These are derived from market activity and platform usage in aggregated, anonymized form. They do not identify you and are not "your data being sold".

What we share

• Processors that host and run the service for us: Vercel (hosting), Neon (database), Google (sign-in, if you use it), and email delivery providers. They process data under contract, only on our instructions.
• Partners and advertisers: only aggregated, anonymized information, or with your explicit consent for marketing cookies.
• Nobody gets your personal data sold to them. If that position ever changed, we would ask you first, plainly.
• Legal requirements: we disclose data if the law genuinely requires it.

Public by choice

Your portfolio is private by default. If you switch on the public page, the cards, values, bio and social links you choose to show become visible at your public URL. Cost basis and gains stay private. You can switch it off any time.

Retention

We keep account data while your account exists. If you delete your account, personal data is removed or anonymized within 30 days, except where the law requires longer (for example transaction records). Aggregated market statistics are kept indefinitely because they contain no personal data.

Your rights

Depending on where you live (including UK and EU GDPR), you can access, correct, export or delete your data, object to processing, and withdraw consent. Email privacy@tcgmeta.io and we will act on it. UK users can complain to the ICO; EU users to their local authority.

Children

TCG Meta is not directed at children under 16. If a child has created an account, contact us and we will remove it.

Changes

We will update this policy as the product grows (packs, marketplace, the mobile app). Material changes get an in-product notice and, where required, fresh consent. See also the Cookie Policy and Terms of Service.