Privacy Policy

TCGBerg ("we", "us", "our") operates the TCGBerg website. This policy explains what personal data we collect, why, and your rights. Browsing the market data requires no account and no login. You can reach us through our contact page.

• Account information, only if you sign up: your name, email address, and authentication identifiers, managed for us by Clerk.
• Content you create: the cards on your watchlist and the holdings you add to your portfolio.
• Messages: what you send through the contact form or newsletter sign-up (name, email, and your message), delivered for us by Resend.
• Usage data: cookieless product analytics via PostHog (EU region), such as pages viewed and interactions, plus standard technical data like browser type and an approximate location derived from your IP address.
• Security data: your IP address, processed transiently by Cloudflare Turnstile (to prevent form abuse) and Upstash (rate limiting).

We use this data to provide and secure the Service, to power the optional watchlist and portfolio features, to respond to your messages, to send the newsletter you asked for, and to understand and improve how the Service is used. We do not sell your personal data, and we do not use it for third-party advertising.

Where the GDPR or UK GDPR applies, we rely on: your consent (the newsletter, which you can withdraw at any time); performance of a contract (providing your account features); and our legitimate interests in running, securing, and improving the Service (analytics and abuse prevention).

Our product analytics is cookieless (it keeps no cookies or local storage), so no cookie-consent banner is required. The only cookies we set are the strictly necessary authentication cookies placed by Clerk while you are signed in. We do not use advertising or cross-site tracking cookies.

We share personal data only with the service providers that help us run TCGBerg, each acting on our behalf under their own privacy terms:

• Clerk (account sign-in and sessions)
• Resend (contact-form and newsletter email)
• PostHog (EU) (cookieless product analytics)
• Cloudflare (anti-abuse (Turnstile) and storage)
• Upstash (rate limiting)
• Vercel (website hosting)
• Supabase (application database)

Several of our providers are based in the United States, so your data may be transferred there. Where required, these transfers rely on appropriate safeguards such as the Standard Contractual Clauses.

We keep account and portfolio data for as long as your account is active, and other data for as long as needed for the purposes above, after which it is deleted or anonymised. Newsletter data is kept until you unsubscribe.

Depending on where you live, you may have the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise any of these, contact us through our contact page. You can also unsubscribe from the newsletter at any time using the link in any issue, and EU/UK users may complain to their local data-protection authority.

When we show market listings, we never display the identity of the seller: eBay seller usernames are pseudonymised before we store anything, so no seller identity is exposed on TCGBerg.

TCGBerg is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

We may update this policy as the Service evolves. The "Last updated" date above always reflects the current version.