Privacy Policy

1. Information We Collect

Account Information

When you sign in with Google or Discord, we receive your name, email address, and profile picture from that provider. We store this to create and manage your account. We do not receive or store your OAuth passwords.

Marketplace Activity

·Listings you create: card details, condition, price, photos
·Orders you place or receive: items, prices, shipping addresses, order status
·Bids you place on auctions
·Messages and offers exchanged with other users
·Reviews you write or receive
·Your want list

Usage Data

With your consent, we collect analytics data about how you use the site — pages visited, search queries, time spent — to help us improve the platform. This data is processed by Google Analytics via Google Tag Manager.

Communications

When we send you transactional emails (order confirmations, shipping updates, auction alerts), we log that the email was sent. We use Resend to deliver email.

Technical Data

·IP address and approximate location (country/region)
·Browser type and device information
·Session tokens and authentication cookies (always required)

2. How We Use Your Information

·To operate the marketplace: processing orders, displaying listings, sending notifications
·To verify your identity and prevent fraud
·To send transactional emails you've opted into (order updates, outbid alerts, etc.)
·To analyse site usage and improve features — only with your analytics consent
·To show you relevant content and ads across platforms — only with your marketing consent
·To resolve disputes between buyers and sellers
·To comply with legal obligations

3. How We Share Your Information

We do not sell your personal data. We share data only as necessary to operate the platform:

With Other Users

Your seller username, store information, listings, and reviews are publicly visible. Your real name and email are never shared with other users. When an order is placed, your shipping address is shared with the seller for fulfillment.

With Service Providers

·Google / Discord — OAuth authentication
·Resend — transactional email delivery
·Google Tag Manager / Google Analytics — site analytics (consent-gated)
·Meta — advertising and retargeting (consent-gated)
·Stripe — payment processing (when enabled; subject to Stripe's own privacy policy)
·Neon — PostgreSQL database hosting
·Vercel — application hosting and edge delivery

Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of MegaCardStore, our users, or the public.

4. Cookies & Tracking

We use three categories of cookies:

·Necessary — required for login, your cart, and security. Always active.
·Analytics — help us understand site usage (Google Analytics). Only set after your consent.
·Marketing — used for ad targeting and retargeting (Google Ads, Meta Pixel). Only set after your consent.

You can change your cookie preferences at any time using the Cookie Settings link in the footer. We implement Google Consent Mode v2, meaning all marketing and analytics tags are blocked by default until you give consent.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where we are required to retain it for legal or financial compliance (e.g. completed transaction records, which may be kept for up to 7 years).

Anonymised or aggregated analytics data may be retained indefinitely as it cannot be used to identify you.

6. Your Rights

Depending on your location, you may have the following rights:

·Access — request a copy of the data we hold about you
·Correction — ask us to correct inaccurate data
·Deletion — request that we delete your account and personal data
·Portability — request your data in a machine-readable format
·Opt-out of marketing — update your cookie settings or unsubscribe from emails
·Withdraw consent — you can change analytics/marketing consent at any time via Cookie Settings

To exercise any of these rights, contact us at info@megacardstore.com.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed session tokens, and access controls. However, no system is completely secure. We encourage you to use a strong, unique password for your Google or Discord account.

We never store payment card numbers — all payment processing is handled by Stripe.

8. Children's Privacy

MegaCardStore is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top. For significant changes we'll notify you by email or by a notice on the site.

10. Contact Us

Questions about this privacy policy or your data?

·Email: info@megacardstore.com
·Instagram: @megacardstoretcg