Privacy Policy
Last updated: July 20, 2026
1. Introduction
This Privacy Policy describes how OpenToTrade ("we," "us," or "our") collects, uses, and protects your information when you use our website, platform, and related services (collectively, the "Service").
By using the Service, you consent to the collection and use of your information as described in this Privacy Policy.
2. Information We Collect
We collect several types of information to provide and improve the Service:
Account Information
When you create an account, we collect your email address, password (stored in encrypted form), and any name you choose to display.
Profile Information
Information you add to your public profile, such as your display name, avatar, bio, collecting interests, location, and vendor storefront details.
Collection and Wishlist Data
The cards you add to your Trade Binder and Wishlist, including card details, conditions, quantities, and notes. This data helps power trade matching and is visible to other users according to your privacy settings.
Messages
Private messages you exchange with other users through the Service, used to facilitate trades and communication. We may review message content when investigating reports or disputes.
Location Information
Location information (such as a ZIP code or city) you provide to enable local trade discovery, meetup coordination, and proximity-based matching. We do not track your real-time location without your explicit consent.
Payment and Subscription Information
When you purchase a paid membership, we process payments through our third-party payment processor. We do not store your full credit card number on our servers; payment details are handled securely by our payment provider.
Usage and Analytics Information
We collect technical and usage data such as your device type, browser, pages visited, interactions with features, and log data. This helps us understand how the Service is used and improve it.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate your sessions.
- Operate trade matching, wishlist alerts, and discovery features.
- Display your profile, binder, and wishlist to other users.
- Process membership subscriptions and manage billing.
- Send service notifications, trade updates, and account communications.
- Detect, prevent, and respond to fraud, abuse, and policy violations.
- Provide customer support and respond to your requests.
- Improve, analyze, and develop the Service and new features.
4. Third-Party Services
We rely on trusted third-party services to operate the Service. These providers may process limited data necessary to deliver their functions:
- Stripe — payment processing for memberships and subscriptions.
- Hosting providers — server infrastructure and data storage.
- APIs — third-party data sources such as the Pokémon TCG API used to enrich card information.
- Analytics tools — to help us understand platform usage.
5. Data Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or loss.
However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security, and you acknowledge that you provide your information at your own risk.
6. Account Deletion Requests
You may request deletion of your account and associated personal data at any time by contacting us using the contact information below.
Upon receiving a deletion request, we will remove your account and personal data from active systems within a reasonable timeframe. Some information may be retained where required by law or to resolve outstanding disputes.
7. Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal data.
- Opt out of certain marketing or analytics communications.
- Restrict or object to certain processing of your information.
- Receive a copy of your data in a portable format.
8. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information.
If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
9. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain information where required by law or for legitimate business purposes such as fraud prevention and dispute resolution.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact Information
If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us using the following placeholder:
Email: [Contact Email Placeholder]
Mailing Address: [Business Address Placeholder]