Privacy Policy

Effective date: June 10, 2026

TCGVendr ("the app", "we") is a discovery platform for trading-card shows: vendors publish the inventory they're bringing to upcoming shows, and attendees browse shows, tables, and cards. This policy explains what information the app collects, how it's used, and the choices you have. The short version: we collect only what the app needs to work, we don't run ads, we don't sell your data, and we don't track you across other apps or websites.

Information you provide

• Account details. An email address (used for one-time-code sign-in), a display name, and an optional profile photo. You can browse without an account; publishing, RSVPs, interests, and messaging require one.
• Content you create. Inventory entries (cards, conditions, grades, prices you set, and any card photos you add), published show tables, show submissions, RSVPs, "Interested" marks, follows and saved items, chat messages, and any reports you file about other users' content.
• Card scans. When you scan a card, the photo is sent through our servers to a third-party card-recognition service to identify it. It is used only to return a catalog match and is not tied to your profile.

Information collected automatically

The app itself does not include advertising or analytics SDKs and does not collect location data. Each session is tied to an account identifier, and if you turn on notifications we store a push-notification device token so we can deliver them. Our infrastructure providers keep standard operational logs (such as IP addresses and request timestamps) to run and secure the service. We use a third-party crash-reporting tool that collects technical crash data (device model, OS version, stack traces) to diagnose problems — never your content, and configured not to attach identifying information.

What other users can see

TCGVendr is a social discovery app, and some information is visible to others by design:

• Your display name, profile photo, and published show tables are public.
• RSVP'ing "I'm going" to a show places you on that show's public attendee list and makes your collection (card names, images, quantities, and asking prices — never what you paid) browsable by signed-in users while the RSVP is active. The app asks you to confirm before this happens.
• Marking "Interested" on someone's card lets that person browse your collection under the same rules. The app explains this the first time.
• Any card can be hidden from your public collection with its "hidden" toggle.

Your purchase costs, lot history, sales records, and notes are never visible to other users.

How we use information

• To provide the service: showing shows and tables, matching mutual interest, delivering messages.
• To keep the community safe: enforcing our terms, reviewing reported content, and honoring blocks.
• To communicate essential account email (sign-in codes). No marketing email.

Service providers

We use a small number of service providers to operate the app, each receiving only what its function requires and processing it solely on our behalf:

• Cloud hosting — stores the data described above and delivers messages.
• Transactional email — sends sign-in code emails.
• Card catalog and market-price data — catalog queries are proxied through our servers and are not tied to your profile by the data provider.
• Card image recognition — when you scan a card, the photo is relayed through our servers to a third-party recognition service solely to identify the card; the provider is not given your account or profile.
• Error monitoring — receives crash diagnostics (device model, OS version, stack traces) to help us fix bugs, with identifying information stripped before it is sent.
• Push notifications — delivers notifications to your device when you enable them.
• Apple — app distribution (TestFlight / App Store).

We do not sell personal information to anyone, and we do not share it with third parties for their own marketing.

Data retention and deletion

Your data is kept while your account exists. You can delete your account at any time in Settings → Delete account, which permanently removes your profile, inventory, listings, interests, RSVPs, and conversations. Shows you submitted that other users rely on remain, without your identity attached. Snapshots of messages that were reported for moderation may be retained briefly to investigate the report. Backups expire on a rolling schedule.

Children

TCGVendr is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

Security

Data is encrypted in transit, sign-in uses one-time email codes rather than passwords, session tokens are stored in the device keychain, and access controls are enforced on our servers so users can only read what the visibility rules above allow.

Changes

If this policy changes materially, we'll update this page and the effective date above. Continued use of the app after a change means you accept the updated policy.

Contact

Questions or requests (including data deletion): support@tcgvendr.com