— LEGAL

PRIVACY POLICY

Last updated: May 2025

1. Information We Collect

We collect information you provide when creating an account (name, email, password) and information generated by your use of the platform (card openings, token transactions, withdrawal requests). If you sign in with Google or Discord, we receive your public profile information from those services.

2. How We Use Your Information

Your information is used to operate your account, process token transactions, fulfill physical card withdrawals, send important account notifications, and improve the platform. We do not sell your personal data to third parties.

3. Cookies & Analytics

We use session cookies required for authentication. We also use Vercel Analytics to collect anonymous usage data (page views, performance metrics) with no personally identifiable information.

4. Data Storage & Security

Your data is stored on secure servers hosted by Vercel and Neon (PostgreSQL). Passwords are hashed using bcrypt and never stored in plain text. We use HTTPS for all data in transit.

5. Third-Party Services

TCGRoll uses Stripe for payment processing. When you purchase tokens, your payment information is handled entirely by Stripe and never stored on our servers. Please review Stripe's Privacy Policy for details.

6. Your Rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account at any time by contacting us. Account deletion removes all personal data within 30 days, except where retention is required by law.

7. Children's Privacy

TCGRoll is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

8. Contact

Privacy questions or data requests: privacy@tcgroll.com