Privacy Policy

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include email addresses, mailing addresses, names.

Sensitive Information. We do not process sensitive information.

Payment Data. We do not collect payment information. Data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument is handled and stored by Stripe. You may find their privacy notice at https://stripe.com/privacy.

Social Media Login Data We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called HOW DO WE HANDLE YOUR SOCIAL LOGINS? below.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services by our analytics software.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

We also collect information through cookies and similar technologies. You can find out more in our Cookie Notice: https://tcgquickship.com/cookie-policy.

Marketplace order data (buyers)

In Short: When a seller connects a marketplace (such as Shopify, eBay, or Manapool), we process the order and buyer shipping details we need to help that seller fulfil the order. We do this on the seller’s behalf.

For each order a seller imports or that arrives through a connected marketplace, we process the buyer’s name, shipping address, and the order’s contact email, together with the order’s line items and totals. We use this only to pick, pack, print packing slips and shipping labels, push tracking back to the marketplace, match the order to the seller’s records across their marketplaces, and handle post-sale issues such as returns and carrier disputes. We do not email buyers (order notifications remain the marketplace’s), we do not build buyer profiles, and we do not sell or share this data. We do not process buyers’ payment details; the marketplaces handle payment.

The seller is the controller of their buyers’ personal information; we are their processor. Buyers who want to access or erase their data should contact the seller they bought from; the seller can ask us to export or erase it, and for Shopify stores we also act automatically on Shopify’s privacy requests. See "How long do we keep your information?" below.

TCG QuickShip Link browser extension

In Short: Our optional TCG QuickShip Link extension syncs a seller’s TCGplayer orders, tracking, and listing quantities with their TCG QuickShip account. It works through the TCGplayer Seller Portal session in the seller’s own browser; we never receive their TCGplayer password or session.

What the extension sends to us. Only after a seller installs the extension and pairs it with their account, and only for the sync features they switch on, the extension sends TCG QuickShip:

• the seller’s TCGplayer orders, including each buyer’s name and shipping address, the order’s line items, prices, and totals, and its status;
• the seller’s TCGplayer listings (product, condition, quantity, and price), so we can show what is live next to their inventory;
• the results of the work it performs for the seller, such as whether tracking was added or a quantity was updated; and
• basic status information: a label for the browser (for example, “Chrome on macOS”), the extension version, whether the seller is signed in to the Seller Portal, and their TCGplayer seller identifier.

What it does on TCGplayer. At the seller’s direction, the extension adds tracking numbers to their TCGplayer orders, marks them shipped, and lowers their listing quantities when an item sells elsewhere. It acts only on the signed-in seller’s own store.

What it does not collect. The extension does not read or transmit the seller’s TCGplayer password, cookies, or session tokens. It does not read the other websites a seller visits, their browsing history, or any activity outside the TCGplayer Seller Portal. In the seller’s browser it stores only a pairing token that identifies that browser to their TCG QuickShip account, its sync status, and progress markers so interrupted work can resume.

How we use it. We use this information only to provide the sync features described above, and buyer information is handled as described in Marketplace order data (buyers). We do not sell it, use it for advertising, or use it to determine creditworthiness. Our use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Disconnecting. A seller can disconnect a paired browser at any time from the Connections page in TCG QuickShip, or by uninstalling the extension. Disconnecting immediately invalidates that browser’s pairing token. Orders and listing data already synced are kept and deleted as described in "How long do we keep your information?".

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to facilitate account creation and authentication, deliver and facilitate delivery of services, fulfill and manage your orders, request feedback, send marketing and promotional communications (where permitted by you), deliver targeted advertising, protect our Services, save or protect an individual's vital interest, and comply with legal obligations.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law, like with your consent, to comply with laws, to provide you with services, to fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

We may share your data with vendors, consultants, and other third-party service providers who perform services for us or on our behalf and require access to such information to do that work (for example: ad networks, affiliate marketing programs, order fulfillment providers, performance monitoring tools, sales & marketing tools). We may also share your information for business transfers, with affiliates, and with business partners. In certain situations we may share information to comply with legal obligations or protect vital interests.

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: https://tcgquickship.com/cookie-policy.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you from that provider (for example: name, email, profile picture).

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Marketplace order data. We keep a seller’s order and buyer shipping details for as long as the seller needs them to fulfil, reconcile, and handle post-sale issues, and delete or scrub them on erasure. Eighteen months after an order ships (or after the sale, when we never see it shipped) we automatically remove the buyer’s name, email, phone, and street address from every record of it, whichever marketplace it came from, and delete the label images; the order itself and its coarse destination stay. When a buyer’s data is erased we remove their name, email, phone, and street address from the order records, keeping only the coarse destination (city, state/region, postal code, country) and the shipping cost, carrier, and service on the postage record, which we retain as a purchase record for tax and carrier-dispute purposes. For connected Shopify stores we act automatically on Shopify’s customers/redact and shop/redact requests, and route a customers/data_request to the seller. For other marketplaces and for seller accounts, erasure happens on request and on account closure.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We have organizational and technical processes and procedures in place to protect your personal information.

Access Control and Data Encryption: We maintain access control policies governing the protection of personal information. All personal data stored within our systems is encrypted at-rest using industry-standard encryption protocols, including AES-128 or RSA with a minimum 2048-bit key size or higher. Data transmitted between your device and our servers is encrypted in-transit using Transport Layer Security (TLS) version 1.2 or above. These encryption measures are designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction during storage and transmission.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: The Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us to request deletion.

11. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your jurisdiction, you may have rights to access, correct, update, or request deletion of your personal information. You may also have rights to object or restrict processing and to request portability. To exercise your rights you can submit a data subject access request or contact us at the email below.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Some browsers support Do Not Track signals. Our Services will try their best to respond to these signals. Users may also control tracking via browser settings and our cookie controls.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Depending on your state, you may have additional rights such as the right to opt-out of certain data sales/sharing or targeted advertising. See the US-specific section in the full policy for details.

14. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this privacy policy from time to time. If we make material changes, we will provide notice as required by law (for example via the Services or email) before the changes take effect.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or concerns about this policy, please contact us at:

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

The easiest way to exercise your rights is by submitting a data subject access request or by contacting us at the email above. We will consider and act upon any request in accordance with applicable data protection laws.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.