Privacy Policy

Who we are

TCG Network services, including TCG Tracker, share one account system and together are called the Services in this policy. TCG Network is the correspondence name for the independent UK-based team responsible for the personal data described here. For privacy enquiries, email privacy@tcgnetwork.co.uk or write to TCG Network, PO Box 5323, Cardiff, CF11 1EP, United Kingdom.

What data we collect

• Account data: name, email address, securely hashed password where you set one, and a Google account identity if you connect or create an account with Google.
• Linked accounts: Discord identity and, if you connect X, its account ID, username and requested follow-action state.
• Collection activity: TCG Tracker Collection and Wishlist cards, quantities and preferences, imports and exports, and TCG Tracker products you track.
• Subscription data: Stripe customer and subscription identifiers, membership status, billing and entitlement information.
• Giveaway entries: details supplied for an applicable TCG Tracker giveaway, such as Discord identity and an Instagram username for the relevant test or promotion.
• Technical and security data: IP address, browser information, security logs and cookie or local-storage preferences.
• Communications: support enquiries, transactional account messages and marketing preferences or messages where you opt in.

How we use your data

• To provide and personalise the Services, maintain your shared account, Collection, Wishlist and tracked products, and support imports and exports.
• To process subscriptions through Stripe and send necessary account and service messages.
• To send marketing messages or stock notifications according to your choices.
• To operate linked Discord and X features and verify giveaway eligibility where the particular giveaway requires it.
• To protect the Services against fraud and abuse and understand aggregate use through privacy-friendly analytics.

Legal basis for processing (UK GDPR)

• Contract: processing needed to deliver the Services you use.
• Consent: optional marketing and non-essential cookies or tracking where consent is required.
• Legitimate interests: security, fraud prevention and service improvement, balanced against your rights.
• Legal obligation: records we must retain by law.

Data sharing

We share data only where needed to provide the Services, including with our hosting and database providers, Stripe for payments, email delivery providers for transactional messages, Google for Google sign-in, and Discord or X if you use those integrations. Plausible provides aggregate, cookieless analytics. We do not sell your personal data.

Data retention

• Account data: kept while your shared account is active; deletion requests are normally completed within 30 days, subject to records we must keep for legal obligations or disputes. Deleting the account can affect both Services.
• Payment records: kept as required by Stripe and UK tax law, which may be up to seven years.
• Stock alert history: kept for up to 12 months.
• X connection: kept while connected and removed when you disconnect X or close your account. Disconnecting does not unfollow the X account.

Your rights (UK GDPR)

Subject to applicable law, you can request access to your personal data, correct inaccurate data, request deletion, restrict or object to processing, and receive data in a portable form. You can withdraw consent where we rely on it. Email privacy@tcgnetwork.co.uk to exercise these rights.

Cookies

We use cookies as described in our Cookie Policy.

Changes to this policy

We will notify registered users of significant changes by email.

Contact

For privacy enquiries, email privacy@tcgnetwork.co.uk or write to TCG Network, PO Box 5323, Cardiff, CF11 1EP, United Kingdom. You may also complain to the UK Information Commissioner’s Office (ICO).