texttcgPrivacy Policy
Last updated: August 6, 2026
What we collect
Your phone number— it's your account and how we match your texts to your portfolio. Messages you send us — text and card photos, which we store (along with our replies, as a conversation log) so your portfolio works, so you can revisit what you logged, and so we can support you. Sign-in codes are redacted before storage. Optional profile details you choose to add — username, email, and Telegram, X, Instagram, and TikTok handles (X, Instagram, and TikTok show on your public profile page if you make one). If you make your profile public, it shows official catalog art only — never your own photos, never your prices. Portfolio data— the cards you log, bought and sold, plus anything you attach to them (prices, tags, notes, and consignment details like a consignor's name and split — all private to your account). Decks— the decklists you build in the deck builder, private to your account unless you share one. Sharing a deck publishes that decklist read-only at its own link, which shows the deck's cards (official catalog art only) and, if your profile is also public, your username — anyone with the link can read it, and turning sharing back off takes the page down. Your other decks, your portfolio, and your photos are never part of it. Referrals— if you create your account after opening someone's referral link, we record which account referred yours. That referrer can see that someone joined from their link and when; they see your username only if you make your profile public. Billing status — handled by Stripe; we never see or store your card number.
Cookies
We use two cookies, both first-party and neither for advertising: one that keeps you signed in, and — only if you arrived on a referral link — one that remembers which account invited you, so the referral is credited if you go on to sign up. The referral cookie holds an internal account reference, lasts 30 days, and is dropped as soon as your account is created (or when it expires, whichever comes first). Your light/dark preference is kept in your browser's local storage, not sent to us.
How we use it
Only to run texttcg: identifying the cards you text us, keeping your portfolio, replying to your messages, signing you in, and handling subscriptions. We don't sell your data, and we don't send marketing texts — we only reply to messages you send us.
Who processes it for us
Like most small services, we run on infrastructure providers, and your data passes through them to do the things above: Vercel (hosting), Supabase (database), Amazon Web Services (photo storage), OpenAI (card-photo identification — your card photos are sent there to be recognized), Stripe (payments), and our text-messaging providers (delivering texts to and from your phone). Each receives only what its job requires.
How long we keep it
As long as you have an account, so your portfolio and history keep working. You can delete your account yourself — the profile page has a delete button that permanently removes your profile, messages, photos, and portfolio — or ask us by text or at support@texttcg.com.
Security
Sign-in codes and session tokens are stored hashed; webhooks are signature-verified; data is encrypted in transit. No system is perfectly secure, but we keep the surface small — there are no passwords to leak.
Children
texttcg isn't directed to children under 13, and we don't knowingly collect their data.
Changes
If this policy changes materially we'll update the date above. Continuing to use texttcg after a change means you accept it. See also the Terms of Service.
Contact
Privacy questions: support@texttcg.com.