Privacy Policy

1. Information We Collect

We collect the following categories of information to provide the Service:

• Authentication account data: When you create or sign in to an account through our identity provider, we receive your name, email address, profile image, and authentication tokens.
• Collection content and activity: Card lists, notes, favourites, price tracking preferences, and other data that you choose to store in TCGVisor.
• Support and communications: Messages you send us through email or community channels and our responses to those requests.
• Device and technical data: Device type, operating system, browser type, and interaction events collected through analytics cookies.

2. How We Use Your Information

We process your information to deliver the Service, including to:

• Authenticate you and secure your account through our identity provider.
• Display your collections, favourites, and preferences in the application.
• Respond to support requests and communicate updates about the Service.
• Improve the Service by analysing aggregated usage trends from analytics cookies.
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Basis for Processing (GDPR)

We rely on the following legal bases under the GDPR to process your personal data:

• Contract: Processing necessary to provide the Service, including account management and access to your collections.
• Legal obligation: We may retain certain information to comply with tax, accounting, or other legal requirements.
• Legitimate interests: To maintain the security and integrity of the Service, prevent abuse, and protect our rights.

4. Third-Party Providers

TCGVisor uses third-party infrastructure and service providers to deliver the Service. These partners may act as processors and are only permitted to use data as necessary to perform services on our behalf. Examples include:

• Authentication and account management – to provide secure sign-in, sessions, and user handling.
• Database and storage services – to host collection data and ensure reliability.
• Caching and performance – to keep the service responsive and available at scale.
• Analytics – to understand usage trends.
• Hosting infrastructure – to serve the web application globally and securely.

5. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share limited information:

• With service providers listed above, solely to operate the Service.
• If required by law, court order, or legal process.
• To protect TCGVisor, our users, or the public from harm or illegal activity.
• With your consent, for example when you request support that involves third-party tools.

6. Data Retention

We retain your personal data for as long as you have an account or as needed to provide the Service. If you delete your account or ask us to remove data, we will delete or anonymise it unless we must keep it for legal reasons, dispute resolution, or to enforce our agreements.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access your personal data and receive a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data when it is no longer needed.
• Object to or restrict certain processing activities.
• Data portability, where technically feasible.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@tcgvisor.com. We may need to verify your identity before processing your request.

8. Security

We implement technical and organisational measures to protect your data, including encryption in transit, access controls, and monitoring for suspicious activity. While no system is perfectly secure, we work to safeguard your information and encourage you to enable any additional security options offered by our identity provider.

9. International Data Transfers

TCGVisor is operated from Spain, and our infrastructure providers may process data in the European Union or other locations with appropriate safeguards. When transferring data outside the EU/EEA, we rely on standard contractual clauses or other legal mechanisms to ensure your data remains protected.

10. Children and Minors

TCGVisor is not directed to children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and provide additional notice as required by law. Your continued use of the Service after the changes take effect means you accept the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@tcgvisor.com.