Privacy policy

Last updated: October 25, 2026

This policy explains what personal information TCG Guy LLC, doing business as TCGGuy ("we," "us," "our"), collects when you visit or buy from tcgguy.com, how we use it, who we share it with, and the choices you have. It is part of our Terms of Service. If this policy and the Terms ever conflict about personal information, this policy controls.

We are a small online store. We collect what we need to sell and ship trading card products, run our rewards and review programs, and market to people who have asked to hear from us. We do not sell your personal information for money.

What we collect

Information you give us

• Contact and shipping details: name, email address, shipping and billing addresses, and phone number.
• Payment details, which go directly to our payment processors (Shopify Payments and PayPal). We never see or store your full card number.
• Account details, if you create an account.
• Order history and the products you view, save, or buy.
• Messages you send us, reviews you write, and requests for pre-order or back-in-stock alerts.
• Rewards program activity, such as points earned and redeemed and referrals.

Information collected automatically

• Device and browser type, IP address, approximate location from your IP address, pages viewed, and how you move through the site.
• Cookies and similar technologies. See "Cookies and tracking" below.

How we use it

• To take, process, ship, and support your orders, including fraud and chargeback checks and the video record of your order being packed.
• To send order emails: confirmations, shipping updates, and replies to your messages.
• To send one reminder email with a link back to your checkout if you enter your email at checkout and leave before paying. It has an unsubscribe link, and we send it only when an item in your checkout is still in stock.
• To run TCGGuy Rewards.
• To send review requests after delivery and to publish reviews you choose to leave.
• To send pre-order and back-in-stock alerts you asked for.
• To send marketing emails, only if you opted in. Every one has an unsubscribe link.
• To measure and improve the site and our advertising.
• To comply with tax, accounting, and other legal obligations, and to enforce our Terms.

Who we share it with

We share personal information only with the companies that help us run the store, and only what each one needs:

Company	What it does for us
Shopify	Hosts the store, checkout, customer accounts, and order emails
Shopify Payments and PayPal	Process payments and screen for fraud
USPS, UPS, and FedEx	Deliver your orders (name, address, phone, and email for delivery updates)
Judge.me	Collects and displays customer reviews
Smile.io	Runs TCGGuy Rewards
STOQ	Sends the pre-order and back-in-stock alerts you sign up for
Selleasy	Shows product recommendations on the site
Shopify Email	Sends our marketing emails to subscribers, and the one checkout reminder described above
Meta (Facebook and Instagram)	Measures our ads and shows them to site visitors, through the Meta Pixel and Conversions API, described below
Google	Site analytics through Google Analytics, described below
Cloudflare	Delivers and protects market.tcgguy.com, runs the Market Insights account check described below, and stores encrypted backups of Market Insights data

Shopify hosts our store and processes personal information on our behalf, and in some cases for its own purposes described in the Shopify Consumer Privacy Policy. We also use Shopify features that draw on data from your interactions with our store, other Shopify stores, and Shopify itself, such as fraud screening and ad measurement. For those features Shopify decides how the data is used and answers rights requests about it. You can exercise privacy rights over data Shopify holds at the Shopify privacy portal.

We may also share information when the law requires it, to protect our rights or the safety of others, or if our business is sold or merged, in which case this policy continues to apply to your information.

Advertising and analytics tools

We use the Meta Pixel so we can see whether our Facebook and Instagram ads lead to visits and purchases, and to show ads to people who visited the site. This sends Meta information about your visit, such as pages viewed and purchases, linked to your device or to your Meta account if you are logged in. We also send Meta details of your visits and purchases directly from our store's servers through Meta's Conversions API, so ads can be measured even when a browser blocks the pixel. That can include your email address, phone number, name, and city, state, and ZIP code, which are hashed (turned into a code) before they are sent, along with your IP address and browser type. Meta uses this to match the activity to a Meta account. Some state privacy laws treat this kind of sharing as a "sale" of personal information or as "targeted advertising." You can opt out on our Your Privacy Choices page, and we honor the Global Privacy Control browser signal as an opt-out. You can also adjust ad settings in your Facebook and Instagram accounts.

We use Google Analytics to understand how people find and use the site, such as which pages are visited and which products are viewed. Google receives your device and browsing information for this purpose under its own privacy policy. You can block it with the Google Analytics opt-out browser add-on or through your cookie settings.

Cookies and tracking

We use cookies and similar technologies to keep you logged in, remember your cart, understand how customers use the site, and measure advertising. You can control cookies in your browser settings. Blocking them may stop the cart and checkout from working.

If your browser sends the Global Privacy Control signal, we treat it as an opt-out from advertising sharing for that browser, and for your account if we can link the two. We do not respond to other "Do Not Track" signals.

Market Insights (market.tcgguy.com)

Market Insights is our market price site. You can browse it without an account. If you sign in, it uses your TCGGuy customer account through Shopify, and we do not receive your email address or a password.

When you sign in, Market Insights stores:

• a scrambled form of your customer number, which lets us match your account without storing the number itself;
• your watchlist and your collection: the products, the quantities, and, if you enter them, what you paid and when, including products you bought from us if you choose to add them;
• when you last signed in, which version of the Market Insights terms of use you agreed to when signing in and when, and a cookie that keeps you signed in for 30 days;
• any alerts you set: the product, the type of alert, and the price or percentage you chose, and a list of the alerts that were triggered, with the market figure and date for each. Triggered alerts are kept for 90 days;
• a history of the changes you make to your watchlist, your collection and your alerts, which is kept with your account until you delete it, including for items you have since removed;
• a record of any automated-activity checks on your account, described below, kept for 90 days.

While you are signed in, the pages you view on Market Insights are linked to your account so we can understand which features people use. When you first sign in, earlier visits from the same browser are joined to your account as well. This does not happen if you turn off "Use my activity to improve Market Insights" in Settings, if your browser sends the Global Privacy Control signal, or if you are in the EU, EEA, UK, or Switzerland. Turning the setting off removes that join. We remove the link from activity older than 36 months. Market Insights has no advertising pixels, session recording, or chat tools, and we do not sell or share this information.

If an account makes a lot of changes in a short time, Market Insights may ask for a Cloudflare Turnstile check before the next change, and may pause changes on that account for 24 hours. Turnstile loads only on that check page, never on our other pages. To tell people from automated programs, it looks at information from your browser and device, which Cloudflare handles under its own privacy policy; we receive whether the check passed and, if it did not, Cloudflare's reason code, which we keep with the check record. Turning off "Use my activity to improve Market Insights" and clearing your collection or watchlist always work, even while changes are paused.

For visitors who are not signed in, Market Insights records page views, searches, and clicks with a random visitor ID kept in one first-party cookie, which is not set for visitors in the EU, EEA, UK, or Switzerland. It does not store your IP address.

You can clear your collection or watchlist at any time in Settings. Clearing your watchlist or collection also removes the alerts on products you no longer watch or own. To delete your Market Insights account and everything it holds, email support@tcgguy.com from the email on your TCGGuy account and we will do it within 30 days. An account with no sign-in for 36 months is deleted automatically. After deletion we keep only anonymous totals, such as how many people viewed a page, that cannot be tied to you, and backup copies age out within 90 days. Deleting your Market Insights account does not delete your TCGGuy store account. Market Insights accounts are for people 18 and older.

Links to other sites

The site links to social media and other websites we do not control. Their privacy practices are their own, so check their policies before sharing information with them.

Reviews are public

Reviews you leave through Judge.me are shown on the site with the display name you choose. Do not include personal information you do not want public.

How long we keep it

We keep order and customer records for as long as we need them to fulfill orders, provide support, handle returns and disputes, and meet tax and accounting rules, which generally means several years after the order. The packing video for an order is kept for at least 120 days, and longer if a dispute is open. Marketing data is kept until you unsubscribe or ask us to delete it.

Security

Checkout is encrypted, and payments are handled by PCI-compliant processors. We limit access to customer data to the people who need it to run the store. No system is perfectly secure, so we also keep the data we hold to what we actually need. If a security breach affects your information, we will notify you as the law requires.

Your choices and rights

No matter which state you live in, you can ask us to:

• tell you what personal information we have about you;
• correct it;
• delete it, except records we must keep for tax, accounting, or dispute reasons;
• send you a copy of it;
• stop sharing it for advertising (use Your Privacy Choices); and
• stop sending marketing emails (use the unsubscribe link, or email us).

Email support@tcgguy.com with the subject line "Privacy Request." We will confirm it is you, usually by replying to the email on your account, and respond within 45 days. We will not treat you differently for making a request. You can also have someone make a request for you, and we will ask for proof that you authorized them. If we decline a request, we will explain why, and you can appeal by replying with the subject line "Privacy Appeal." You can also complain to your state attorney general. Residents of states whose privacy laws apply to us also have the rights those laws provide.

Children

The site is for adults. We do not knowingly collect personal information from anyone under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us personal information, email us and we will delete it.

Text messages

We do not send marketing text messages. If we add them, we will ask for your separate consent first, and you will be able to opt out at any time by replying STOP.

Changes

We may update this policy. The date at the top shows the current version, and we will post a notice on the site for any material change.

Contact

TCG Guy LLC, doing business as TCGGuy
4255 S Buckley Rd, Unit #224
Aurora, CO 80013, United States
support@tcgguy.com