Privacy Policy

Effective date: March 19, 2026

Information We Collect

We collect the following types of information through the TCG STATS web application:

  • Account data — Your email address and authentication credentials used to access TCG STATS.
  • Location and store data — Information about your selling locations, including name and platform connections.
  • Inventory data — Card details, quantities, prices, conditions, and listing status across your connected platforms.
  • Order data — Buyer name, email address, and shipping address received from connected platforms when orders are placed.
  • Platform connection data — OAuth tokens and account identifiers for Shopify, CardTrader, Cardmarket, eBay, and WooCommerce. Tokens are encrypted at rest using AES-256 encryption.
  • Payment data — Subscription and billing information processed through Stripe. We do not store your full credit card details.
  • Collections and wishlists — Card collections and wishlists you create within TCG STATS.
  • Price alerts — Alert preferences for market price notifications.
  • Newsletter preferences — Your email subscription status and preferences.

How We Use Your Information

We use the information we collect to:

  • Synchronize your inventory across connected selling platforms (Shopify, CardTrader, Cardmarket, eBay, WooCommerce).
  • Process and display orders received from connected platforms.
  • Provide market analytics, pricing insights, and price alert notifications.
  • Manage your listings including pricing, quantities, and status across platforms.
  • Send transactional emails (order notifications, price alerts) and optional marketing communications.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Cookies & Tracking

Our website uses cookies and similar technologies for functional and marketing purposes:

  • PostHog — First-party analytics cookies to track page views and browsing behavior across our domains.
  • Meta Pixel — Advertising cookies (_fbp, _fbc) to measure ad effectiveness on Facebook and Instagram.
  • Reddit Pixel — Advertising cookie (rdt_cid, 90-day retention) to measure ad effectiveness on Reddit.

You can manage your cookie preferences through your browser settings at any time.

Marketing & Advertising

We use Meta/Facebook and Reddit conversion APIs to measure advertising effectiveness and reach potential users. These services may receive hashed personally identifiable information for conversion matching and general location data (country, region, city) derived from network headers.

We do not sell your personal data to third parties. Each advertising platform collects data under their own privacy policy: Meta Privacy Policy, Reddit Privacy Policy.

Third-Party Services

We integrate with the following third-party services to provide our functionality:

  • Stripe — Payment processing and subscription management. Privacy Policy
  • PostHog — Product analytics and usage tracking. Privacy Policy
  • Meta — Advertising and conversion tracking. Privacy Policy
  • Reddit — Advertising and conversion tracking. Privacy Policy
  • CardTrader API — Marketplace listing sync and order import. Privacy Policy
  • eBay API — Marketplace listing sync, inventory updates, and order import. Privacy Policy
  • WooCommerce / WordPress REST API — Webstore listing sync and order import via your self-hosted store. Privacy Policy
  • Featurebase — Feedback and feature requests. Privacy Policy

Legal Basis (GDPR)

We process your personal data under the following legal bases:

  • Contract performance — Processing necessary to provide the core features of TCG STATS, including inventory sync, order management, and platform integrations.
  • Legitimate interest — Analytics and product improvement using PostHog to understand usage patterns and improve the service.
  • Consent — Marketing communications (newsletter) and advertising cookies (Meta Pixel, Reddit Pixel). You can withdraw consent at any time.

Data Retention

  • Order data — Buyer personal information (name, email, shipping address) is automatically anonymized 180 days after order completion. Aggregate order data is retained for reporting.
  • Account data — Retained while your account is active. Upon account deletion, all personal data is removed.
  • Platform tokens — Deleted immediately when a platform connection is disconnected or your account is deleted.

We also respond to compliance webhooks from connected platforms (such as Shopify) for data deletion and data access requests, ensuring timely removal of personal data when requested.

Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Request correction of inaccurate personal data.
  • Erasure — Request deletion of your personal data. Buyers can exercise this right through the platform where they placed their order.
  • Portability — Request your data in a machine-readable format.
  • Withdraw consent — Withdraw consent for marketing communications and tracking cookies at any time.
  • Lodge a complaint — File a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@tcgstats.com.

Data Security

We take appropriate technical and organizational measures to protect your data:

  • All data is transmitted over HTTPS using TLS encryption.
  • Platform authentication tokens are encrypted at rest using AES-256 encryption.
  • Webhook payloads are verified using HMAC signature verification to prevent tampering.
  • Access to personal data is restricted to authorized services and personnel only.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through an in-app notification. Your continued use of the Service after such notification constitutes acceptance of the updated policy.

Related Policies

For product-specific privacy policies, please refer to:

Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@tcgstats.com.