Privacy Policy
Draft prepared for attorney review (spec §12.4). Bracketed placeholders must be settled before launch.
What we collect
Account. Your email address and account identifier, via your palworldtcg.gg account. We do not store a separate password for tradecards.gg.
Trader profile. Your chosen handle, country, an optional region, a short bio, whether you accept cash, and where you are willing to ship.
Approximate location. We store a postal prefix — not your full postal code. A US 3-digit ZIP prefix, a Canadian forward sortation area, a UK outward code, or a 2-digit Australian region. We store the geographic centre of that prefix's area, which is accurate to roughly 20–50 km. This is enough to estimate shipping and to sort matches by distance. It is not enough to locate you, and we designed it that way deliberately.
Trades and messages. The trades you arrange, their contents and status, and messages exchanged with the other party.
Acceptance records. Which version of which policy you accepted, when, and a salted hash of the IP address it came from. We do not store the address itself, and the hash cannot be reversed into a list of visitor IPs.
Collection data. Your binders and their contents, read from your existing palworldtcg.gg account. tradecards.gg does not keep a second copy.
What we never collect
- Your full postal code or street address (arrange delivery details directly with your trade partner)
- Payment card numbers or bank details — we do not process payments
- Your precise location
What is visible to others
Your handle, country, region if you set one, bio, shipping reach, whether you accept cash, and your public trading history and reviews.
Never public: your email address, your payment handle, your postal prefix, and the coordinates derived from it. These are enforced at the database level: the public view of a trader profile does not contain those columns at all.
Who we share with
- Your trade partner, for an agreed trade — the details you choose to send them
- Service providers who host and operate the platform, bound to protect it
- Law enforcement, where legally required
We do not sell your personal information.
How long we keep it
Account and profile data for as long as your account exists. Trade records and acceptance logs are retained after account closure where needed as evidence of what was agreed — see the Terms.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal information, and to object to certain processing. Contact [NOTICE ADDRESS].
Some records — completed trades, acceptance logs, moderation actions — may be retained after a deletion request where we have a legal basis to keep them.
Children
The Service is not directed at children under 13. Users aged 13–17 require guardian consent — see the Terms.
Changes
Material changes are versioned and re-consented. The version you accepted, and when, is recorded.
Contact
[NOTICE ADDRESS]