Privacy Policy
Last updated: July 29, 2026
Overview
TCG Market Tracker provides public card-price information, optional user accounts, and an inventory and sales workspace for enabled vendors. The service does not process customer payments. Vendors may record a payment method and optional customer name, location, and notes after completing a payment outside the service.
AI-assisted market research
The public AI-assisted research described by TCG Market Tracker uses market and product-level inputs such as price history, marketplace listings, tournament demand, graded estimates, and supply signals. It is not used to decide account access, vendor permissions, checkout totals, transaction reversals, or account deletion.
Public AI market analysis is not personalized with vendor customer names, internal inventory notes, or private transaction records. Source prices and displayed calculations remain separate from AI-assisted research summaries and prioritization.
Account and vendor information
Accounts may contain a username, password hash or Google sign-in identifier and email, saved Watchlist cards, sessions, and account permissions. Vendor workspaces additionally store the vendor name, website and timezone, serialized inventory, cost and asking prices, internal notes, pricing rules, sales records, and inventory audit history.
Vendor sale records may include the vendor-entered payment method, customer name, location, and notes. Do not enter payment card numbers or other sensitive payment credentials. Public QR item pages expose only item details, availability, asking price, and market-reference information - not cost basis, internal notes, location, certification number, customer identity, or transaction history.
Information processed automatically
When you visit, Cloudflare and the application server may process your IP address, browser and device information, requested URLs, request timestamps, and security or diagnostic information. This information is used to deliver the site, prevent abuse, enforce rate limits, investigate errors, and maintain security.
Application logs are size-limited and rotate automatically. Cloudflare processes data under its own policies and retention practices.
Cookies and authentication
The site does not use advertising or analytics cookies. Cloudflare may use essential security cookies. Signed-in accounts use an essential session cookie, and a local-network browser may receive a separate host-only session after one-time pairing. Restricted administrator pages may also use Cloudflare Access and HTTP Basic authentication.
Third-party services and links
The service uses Cloudflare for delivery and security, third-party providers for market and catalog data, and PriceCharting for optional graded-price estimates. Market-data provider attribution will be published when public access launches. Accounts that choose Google sign-in are also subject to Google's privacy practices. Following a third-party link makes your activity subject to that provider's privacy policy.
Data sharing
Personal information is not sold. Limited technical data may be processed by service providers that operate the site or disclosed when reasonably necessary to comply with law, protect the service, or investigate abuse.
Deletion and retention
Deleting a non-vendor account removes its account, sessions, and synchronized Watchlist. When a vendor account is deleted, direct sign-in identifiers and sessions are removed, its membership is disabled, and ledger actor references are reassigned to an anonymous account so inventory audit and immutable sale history remain internally consistent. Vendor-entered transaction and inventory records are retained as business records until removed under the operator's retention or legal obligations.
Browser-local guest Watchlists and pending offline vendor sales remain on that device until the user clears site data or the application removes them. Clearing site data can permanently remove a pending offline sale before it reaches the server.