Privacy policy

Who we are

TCG Pricer ("we", "us", "the service") is a Pokémon TCG price aggregator. Contact: r_emil@live.dk.

What we collect

• Account data: name, email, hashed password.
• Preference data: your chosen currency, theme.
• Watchlist + collection: which cards/sealed product you've saved, optional purchase prices and dates you record.
• API usage: per-key request counts, last-used timestamps, plan tier.
• Payment data: only via Stripe — we never see your card number. Stripe stores it; we store a customer reference and subscription status.
• Server logs: request IP, user agent, route, timestamp (typical web access logs). Retained 30 days for debugging + abuse detection.

We do not collect: browsing behavior beyond the routes you visit, location beyond what your IP infers, or any data from eBay/TCGPlayer about other users.

Why we collect it

• Authentication and account-bound features (watchlist, collection).
• Plan enforcement and rate limiting on the API.
• Billing (Stripe) and customer communication.
• Detecting abuse, debugging incidents.

Who we share data with

We use a small set of third-party services. Each has its own privacy policy.

• Stripe — payment processing.
• Email provider — to send alert + transactional email.
• Pricing data sources — pokemontcg.io, TCGCSV, eBay Browse API, optionally Cardmarket, PriceCharting. We pull pricing data from them; we do not send your data to them.

We do not sell your data. We do not run third-party advertising trackers.

Your rights

• Access + export: email us and we'll send you a JSON copy of everything we have on you within 30 days.
• Delete: email us to delete your account and all associated data. Some records (e.g. invoices) may be retained where required by law.
• Correct: edit your name/email/preferences anytime from your account.
• Object: stop using the service. We will not contact you further beyond required service notices.

Cookies

We use a single session cookie to keep you logged in and remember your currency + theme preference. No analytics or advertising cookies.

Children

This service is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has registered, email us and we'll delete the account.

Changes

If we change this policy materially, we'll email registered users at least 14 days before changes take effect.

Contact

Questions? Email r_emil@live.dk.