Privacy Policy — Chrome Extension

Scope

This privacy policy applies specifically to the TCG STATS Chrome Extension ("the Extension"), which enables synchronization between your TCG STATS account and your Cardmarket seller account.

For the privacy policy governing the TCG STATS web application, please see our Web Application Privacy Policy.

Permissions & Justification

The Extension requests the following browser permissions, each for a specific purpose:

• storage — Stores your authentication token and selected location ID in chrome.storage.local to maintain your session between browser restarts.
• tabs — Opens the TCG STATS authentication callback page when you connect your account.
• cardmarket.com — Reads article data from your Cardmarket seller stock pages and submits price, quantity, and listing updates on your behalf.
• app.tcgstats.com — Communicates with the TCG STATS API to sync inventory data, retrieve pending updates, and authenticate your session.

Data Collected

The Extension collects and processes the following data:

• Authentication bearer token — stored in chrome.storage.local to authenticate requests to the TCG STATS API.
• Location ID and name — your selected TCG STATS store location, used to associate imported inventory with the correct location.
• Cardmarket article data — scraped from your seller stock pages, including: article ID, product ID, product name, expansion, condition, language, price, quantity, and comments.
• CSRF tokens — read from Cardmarket pages and used only for form submissions on your behalf. These are not stored persistently.
• Cardmarket username — used to activate the platform connection between your Cardmarket and TCG STATS accounts.

How Data Is Used

The data collected by the Extension is used exclusively for:

• Import inventory — Cardmarket article data is sent to TCG STATS so you can manage your inventory in one place.
• Push price updates — Price changes made in TCG STATS are retrieved by the Extension and applied to your Cardmarket listings.
• Push quantity updates — Quantity changes made in TCG STATS are similarly synced to Cardmarket.
• Bulk list articles — New articles created in TCG STATS can be listed on Cardmarket through the Extension.

Data Transmission

All communication between the Extension and TCG STATS is transmitted over HTTPS and authenticated using a bearer token.

Communication with Cardmarket uses your existing browser session. The Extension does not store or transmit your Cardmarket username or password — it operates within the context of your already-authenticated Cardmarket session.

Data Storage

The Extension stores data only in chrome.storage.local, which is sandboxed to the Extension and accessible only to it. The stored data is limited to:

• Your authentication bearer token
• Your selected location ID and name

No additional data is stored on external servers by the Extension itself. Data sent to TCG STATS during import or sync operations is stored by the TCG STATS web application under its own Privacy Policy.

Data Sharing

The Extension does not share your data with any third parties. Data flows only between:

• Your Cardmarket seller account (using your existing browser session)
• Your TCG STATS account (authenticated via bearer token over HTTPS)

No data is sold, rented, or disclosed to advertisers, analytics providers, or any other external parties.

Data Deletion

You can remove all data stored by the Extension at any time:

• Disconnect the platform — In your TCG STATS account settings, disconnect the Cardmarket connection. This removes the stored authentication token and cached data from the Extension.
• Uninstall the Extension — Removing the Extension from your browser automatically deletes all data in chrome.storage.local.
• Clear extension data manually — You can clear the Extension's storage through your browser's extension settings.

Remote Code

The Extension does not load or execute any remotely hosted code. All JavaScript is bundled at build time and included in the Extension package distributed through the Chrome Web Store.

Contact

If you have any questions about this Privacy Policy, please contact us at support@tcgstats.com.