Privacy Policy

TCG Watch ("we", "us") provides trading-card restock alerts for Australian retailers via our website (tcgwatch.com.au) and mobile app. This policy explains what personal information we collect, why, and how we handle it, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

• Email address — used to create your account and sign you in via magic links, and to send service emails (sign-in links, billing notices).
• Billing information — payments are processed by Stripe. Your card details are entered on and stored by Stripe; they never touch our servers. We store only your Stripe customer reference and subscription status (e.g. trialing, active, trial end date).
• Device push token — if you enable notifications in the app, we store the device token needed to deliver push alerts.
• Notification preferences — the alert filters you set (brands, stores, states, product types, price ranges).
• Service records — basic operational data such as your last sign-in time and standard server logs.

We do not collect your name, address, or date of birth. We do not use advertising trackers or sell personal information to anyone.

• To operate your account and deliver restock alerts you asked for.
• To process your subscription and manage billing.
• To send essential service emails (we don't send marketing email).
• To keep the service secure and diagnose faults.

• Stripe — payment processing and subscription billing (Stripe privacy policy). Stripe sets its own cookies during checkout for fraud prevention.
• Render — hosts our API and database (Singapore region).
• Vercel — hosts this website.
• Resend — delivers our transactional email (magic links).
• Google Firebase Cloud Messaging — delivers push notifications to your device.

These providers process data on our behalf under their own privacy and security terms. Because some are located overseas (Singapore and the United States), your information may be stored or processed outside Australia.

Our website does not set advertising or analytics cookies. Stripe sets cookies on its checkout pages for security and fraud prevention.

We keep your information while your account exists. To delete your account and personal information, email support@tcgwatch.com.au from your account email address — we'll remove your account, filters and device tokens. Billing records are retained by us and Stripe as required by Australian tax and accounting law.

All traffic is encrypted in transit (TLS 1.2+). Sign-in uses single-use, expiring magic links rather than passwords, so we never store a password for you. Access to production systems is restricted and credentialed.

You can request access to, or correction of, the personal information we hold about you at any time by emailing support@tcgwatch.com.au. If you believe we've mishandled your information, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

TCG Watch is not directed at children under 16 and we do not knowingly collect personal information from them. A payment method is required to subscribe.

If we make material changes we'll update this page and the effective date above. Continued use of the service after a change means you accept the updated policy.

Questions about this policy or your data: support@tcgwatch.com.au