Privacy Policy

1. Introduction and Identity of the Controller

Card Butler (operating under the trade name "TCG Inventory"), a company established under the laws of Switzerland, with its registered office in Zurich, Switzerland ("Company," "we," "us," or "our"), is the Data Controller for the personal data collected through the TCG Inventory web application, the Card Butler hardware device, and the website https://www.tcg-inventory.com (collectively, the "Service").

We are committed to protecting your privacy in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable to users in the European Economic Area (EEA), the General Data Protection Regulation (GDPR).

2. Categories of Data We Collect

We collect and process the following categories of personal data:

2.1 Information You Provide to Us

• Identity & Contact Data: Email address (used for Magic Link authentication), username, and full name (if provided for shipping).
• Shipping Data: Physical address, phone number, and delivery preferences (collected primarily from Kickstarter backers for hardware fulfillment).
• Inventory Data: Lists of trading cards, deck compositions, and collection valuations.
• User Content: Images/scans of cards uploaded via the Card Butler device or web interface.
• Support Data: Correspondence, feedback, and issue reports sent to our support team.

2.2 Information We Collect Automatically

• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
• Usage Data: Clickstreams, page response times, download errors, and page interaction information (scrolling, clicks).
• Device Telemetry (Hardware Users): If you use the Card Butler device, we collect device health status, firmware version, and connection stability logs.
• Authentication Data: Session tokens and login timestamps.
• Public-page requests: When someone opens a public profile, playgroup, or share link, we process the visitor's IP address and basic request data to operate the page and limit abuse.

2.3 Information from Third Parties

• Kickstarter: If you backed our project, we receive your pledge details, email, and shipping address from Kickstarter.
• Stripe: We receive payment confirmation and subscription status (Active/Canceled) from Stripe. We do not store complete credit card numbers.

2.4 Profile and Social Data

If you use collector profiles, friends, or playgroups, we also process:

• Profile content: Handle, display name, tagline, biography, pronouns, location, avatar, banner, links, and the visibility and module settings you choose.
• Collection modules: Collection statistics, showcased cards, and an estimated collection value if you turn that module on. Other viewers may see a range rather than an exact figure unless you choose to show the exact figure.
• Photographs: Catalog art by default. Photographs from your scanner only if you choose that option for a module.
• Social graph: Friend connections, friend-request messages, blocks, playgroup membership, and playgroup name, description, and location.
• Activity: Feed events, comments, and reactions you post, and notifications about them.
• Reports: Reports you submit about a profile, playgroup, or post, and reports others submit about you.

3. Why We Process Your Data

We process your data for the following purposes:

• Service Provision: To provide the TCG Inventory application, authenticate users via Magic Link, and manage card databases (Contract Performance).
• Order Fulfillment: To ship Card Butler hardware and process Kickstarter rewards (Contract Performance).
• Billing: To manage subscriptions and process payments via Stripe (Contract Performance).
• Security: To prevent fraud, secure user accounts, and detect API abuse (Legitimate Interests).
• Analytics: To improve the app and understand user behavior (Legitimate Interests/Consent).
• Marketing: To send newsletters and product updates (Consent).
• Legal Compliance: To maintain financial records for tax authorities (Legal Obligation).
• Profiles and social features: To provide collector profiles, friend connections, playgroups, the activity feed, and notifications you have not turned off, and to show that information to the audience you select (Contract Performance).
• Moderation: To review reports, remove content, and keep the Services safe (Legitimate Interests, and Legal Obligation where the law requires us to act).

4. Who Can See Profile and Social Data

Inventory you have not chosen to publish stays in your account. A profile is private until you change that. After you do, the people who can see it depend on the setting you confirm:

• Private: You.
• Friends: People you have accepted as friends, for modules you set to that audience.
• Playgroup: Members of a playgroup, for modules you set to that audience.
• Private link: Anyone who has the link. The link can be forwarded. It does not reveal modules you limited to friends.
• Public: Any visitor. A public profile or public playgroup may be indexed by search engines and stored in link-preview caches. A public profile may also appear in discovery features inside the Services.

Publishing also discloses other people. If your profile is visible to someone, your friends list can show each friend's handle, display name, avatar, and favorite game, including a friend whose own profile is private. A public playgroup shows its members' handles, display names, and avatars to visitors, including a member whose own profile is private. We do that because you published the connection, or because the playgroup was made public.

We do not sell profile or social data. Service providers who host and operate the Services, listed in section 5, process it on our instructions.

5. International Data Transfers

Card Butler is based in Switzerland. However, our technology stack relies on service providers located in the United States and other regions. Therefore, your personal data will be transferred to, and processed in, these jurisdictions.

5.1 Transfer Protection

We ensure your data is protected during these transfers through mechanisms compliant with Swiss and EU law, such as the Swiss-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs).

5.2 Key Service Providers

We use the following key service providers to operate our Service:

• Vercel: Hosting and Analytics (USA)
• Neon: Database Provider (USA)
• Resend: Email Service (USA)
• Stripe: Payment Processing (USA)
• AWS: Storage and Infrastructure (USA/EU)
• PostHog: Product analytics (European Union)

6. Data Retention and Deletion

We adhere to the principle of storage limitation:

• Account Data: Retained as long as your account is active. You may request deletion at any time. Upon deletion, your data is removed from our live database within 30 days.
• Backups: Deleted data may persist in encrypted backups for up to 90 days.
• Hardware Telemetry: Retained for 12 months on a rolling basis.
• Financial Records: Retained for 10 years as required by law.
• Profile and social content: Kept while your account is active. Removed from the live database with the rest of your account data. Backups may keep it for up to 90 days.
• Reports: Kept for as long as we need to review the report, enforce these rules, or meet a legal obligation.
• Copies outside our systems: Search engines, link-preview caches, and other people may keep a copy of a public profile, playgroup, or preview image after you hide or delete it. We cannot erase those copies.

7. Your Rights

Under applicable data protection laws, you possess the following rights:

• Right of Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may correct inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your account. Note that we may retain transaction records for legal reasons.
• Right to Data Portability: You may request your inventory data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your data for direct marketing purposes.
• Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict the processing of your personal data while we verify its accuracy, where the processing is unlawful but you oppose erasure, where we no longer need the data but you require it for legal claims, or while a decision on an objection you have raised is pending. Where processing is restricted, we will only store your data and will not process it further without your consent, except for the establishment, exercise, or defence of legal claims.

Exercise of Rights: To exercise these rights, please contact us at privacy@tcg-inventory.com.

Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC). This right is without prejudice to any other administrative or judicial remedy.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate core features, remember preferences, and manage your consent choices.

• Strictly Necessary Cookies: Required for the operation of the app, authentication, and account security.
• Functional Cookies: Used to remember interface and TCG preferences.

For full details about cookie categories and current cookie names, please review our Cookie Policy.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption at rest and in transit. However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

10. Minors

The Services are intended for people who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe we have, email privacy@tcg-inventory.com and we will delete the account.