Privacy Policy

Last Updated: September 17, 2026

PipTCG is operated by Sibo Ju, 7202 Lugary Dr, Houston, TX 77036 ("PipTCG", "we", "our", "us"). This policy explains what personal information we collect when you use the PipTCG mobile app, why we collect it, who we share it with, and the choices you have. PipTCG is for adults 18 and older and is currently offered in the United States.

1. Information We Collect

Information you give us

• Account details: email address, password (stored only as a hash), display name, username, profile photo, banner image, bio, and the games you're interested in. If you sign in with Apple, we receive the name and email Apple shares with us.
• Date of birth: collected once at sign-up to confirm you are at least 18. It is not shown to other users.
• Phone number (optional): if you verify a phone number as a seller or apply as a game store.
• Location: a zip code is required to show nearby listings and events; we store the general area it represents. With your permission you can also share your device's precise location for nearby results, and the app records a location check-in when you tap that you have met up for a deal. You can use PipTCG with a zip code alone.
• Content: card listings, collection and wishlist entries, photos and videos, posts, replies, messages, reviews, saved and recent searches, store applications, and support or feedback messages.
• Transaction records: the cards and cash amounts both parties agree to in the app, meetup places and times, completion confirmations, no-show reports, and reviews. We never see or store payment card details; no money moves through PipTCG.
• Photos you scan: when you use the card scanner, the photo is sent to our card-identification provider to identify the card.

Information collected automatically

• Device and technical data: device model, operating system, app version, a random identifier the app creates and stores on your device, push notification tokens, and your IP address at sign-up and sign-in.
• Usage data: which screens and features you use and actions you take, tied to your account. The text of your searches is not sent to our analytics provider.
• Crash and performance data: error reports and timing information, tied to your account ID.
• Camera, photo library, and microphone are accessed only when you use a feature that needs them and only after you grant permission in your device settings.

Purchases

If you subscribe to an optional paid membership, Apple or Google processes the payment. We and our subscription provider receive the purchase and subscription status linked to your account ID, not your payment details.

2. How We Use Information

• Create and run your account, and show your listings, collection, and profile.
• Show listings, collectors, stores, and events near you.
• Enable messaging, trades, meetups, reviews, and notifications.
• Identify cards from photos and compute local price history from completed deals.
• Moderate content and enforce our Terms, using both automated screening and human review.
• Detect and prevent fraud, scams, ban evasion, spam, and abuse.
• Understand how the app is used and improve it.
• Diagnose crashes and performance problems.
• Respond to support requests and legal obligations.

We do not use your information for advertising, and we do not use it to profile you across other companies' apps or websites.

3. How We Share Information

With other users. Your profile (name, username, photo, bio, games, membership and trust badges), listings, posts, reviews, and collection or wishlist (if you choose to make them visible) are visible to other users. Other users see an approximate distance or area, never your exact coordinates. Messages are visible to the people in the conversation.

With service providers who process data on our behalf and only as needed to run the Service:

• Supabase — hosting, database, authentication, and file storage (United States).
• OpenAI — identifies cards from scanned photos and screens text and images for prohibited content. Under OpenAI's API terms, this data is not used to train their models.
• PostHog — product analytics.
• Sentry — crash and error reporting.
• Expo — push notification delivery and app updates.
• hCaptcha — bot protection at sign-up.
• Mapbox — map display.
• Apple and Google — sign-in, push notifications, and in-app purchases.
• RevenueCat — subscription status, if paid membership is offered.

For safety and legal reasons. We may disclose information when required by law or legal process, to report suspected child sexual abuse material as U.S. law requires, or to protect the rights, safety, or property of PipTCG, our users, or the public.

Business transfers. If PipTCG is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will tell you before your information becomes subject to a different privacy policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Staff Access to Your Data

PipTCG staff may access account data only when there is a legitimate operational need: responding to your support request, investigating a report or suspected fraud, complying with a legal obligation, or diagnosing a system problem. Private messages are viewed only when a report has been filed against that conversation. Every privileged action, including bans, content removals, and conversation views, is written to an internal audit log, and access is limited by role.

5. Data Retention and Account Deletion

We keep your information while your account is active.

Deleting your account. Go to Settings → Privacy & Security → Delete Account. Your profile is hidden and all sessions are signed out immediately, and your account, content, and uploaded files are permanently deleted within 30 days. If you can't access the app, email us from the address on your account and we will process the request within 30 days.

What we keep after deletion:

• Records of completed trades and any disputes, for record-keeping and to protect the other party to the deal.
• Moderation reports and enforcement history.
• For accounts that were banned: the email address, phone number (if provided), and device identifier, so that the ban can be enforced. IP addresses are kept for no more than 30 days.
• Anything we are required to keep by law or for an active legal matter.

6. Your Choices and Rights

• Access and correction: edit your profile, collection, listings, and settings in the app at any time.
• Deletion: delete your account in the app (Section 5).
• Export: email us to request a machine-readable copy of your personal data. We respond within 30 days.
• Location: precise location is optional. Turn it off in your device settings and use a zip code instead.
• Notifications: choose which push notifications you receive in Settings, or turn them off in your device settings.
• Visibility: choose whether your collection and wishlist are visible to others.
• Blocking: block any user to stop them from contacting you or seeing your profile.

California and other U.S. state residents. Depending on where you live, you may have the right to know what personal information we collect, use, and share; to delete it; to correct it; to receive a copy of it; and to not be discriminated against for exercising these rights. We do not sell or share personal information, so there is nothing to opt out of. To exercise a right, use the in-app tools above or email us; we will verify the request through the email address on your account. You may use an authorized agent if they provide proof of your written permission.

7. Security

We protect your information with encryption in transit, hashed passwords, role-based access controls, row-level database security, audit logging of staff actions, and regular security reviews. No system is perfectly secure, and we cannot guarantee the security of your data. If we discover a breach that affects you, we will notify you as the law requires.

8. Children

PipTCG is for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete the account and its data. If you believe someone under 18 is using PipTCG, please contact us.

9. Where Your Data Is Processed

PipTCG operates from the United States and our providers store and process data there. If you use PipTCG from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

10. Changes to This Policy

We may update this policy as the app and the law change. For material changes we will post a notice in the app and update the date at the top of this page. Continued use of PipTCG after a change takes effect means you accept the updated policy.

11. Contact Us

Email: support@piptcg.com
In the app: Settings → Help & Support
Mail: Sibo Ju, 7202 Lugary Dr, Houston, TX 77036