Privacy Policy

1. Data controller

The MyTCGPrice website (www.mytcgprice.com) is published by MyTCGPrice, based at Enghien-les-Bains, France.

For any question regarding your personal data: contact@mytcgprice.com

2. What we collect and why

MyTCGPrice only collects the data needed to operate. No data is ever sold or transferred to third parties for commercial purposes.

a) User account

Data: email address, password, username, chosen avatar, creation date and last login date.
Purpose: to create and secure your account and let you sign in.
Legal basis: performance of a contract (the terms accepted when creating the account).
Important: your password is never stored in clear text. Only a cryptographic hash (scrypt) is kept; it cannot be reversed to recover the original password.

b) Your collection

Data: cards added, quantities, history of your collection's total value, badges earned.
Purpose: to provide the collection tracking feature you use.
Legal basis: performance of a contract.

c) Community posts

Data: displayed username, shared card, optional comment, optional free-text location.
Purpose: to publicly display cards shared by the community.
Legal basis: performance of a contract.
Please note: these posts are public and visible to everyone, including non-registered visitors and search engines. Do not include anything you would not want to be public.

d) Abuse prevention

Data: a hash of your IP address.
Purpose: to limit spam and automated posting.
Legal basis: legitimate interest (protecting the service and its users).
Important: your IP address is never stored in clear text. Only a salted SHA-256 hash is kept, which cannot be traced back to the original address.

e) Email contact

If you write to us, your email address and the content of your message are used solely to reply to you.
Legal basis: legitimate interest (answering your request).

3. Retention periods

Account, collection and badges: kept for as long as your account exists. They are deleted immediately and permanently when you delete your account.
Community posts: deleted at the same time as your account.
Email verification and password reset tokens: a few hours, then they expire automatically.
Anti-spam IP hashes: kept for as long as needed to limit abuse.
Email exchanges: for as long as needed to handle your request.

4. Who has access to your data

Your data is hosted on a server rented from OVH, located in the European Union. No one other than the site's publisher has access to it.

Two technical providers are involved:

Email delivery (address verification, password reset): OVH RoundCube.
Audience measurement: Google Analytics, provided by Google Ireland Limited. This service may transfer data to the United States under the EU–US Data Privacy Framework.

Displayed prices come from external sources (TCGplayer, eBay, Cardmarket). These sources provide market data only: no data about you is sent to them.

5. Cookies and analytics

Necessary cookies: MyTCGPrice sets a session cookie to keep you signed in and remember your language. These cookies are essential to the site and do not require your consent.

Analytics: the site uses Google Analytics to understand traffic. This service sets cookies which do require your prior consent.

You can configure your browser to block cookies at any time, or use the opt-out add-on provided by Google.

6. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: to know what data we hold about you.
Right to rectification: to correct inaccurate data. Your username, avatar and password can be changed directly from your account page.
Right to erasure: to delete your account and all your data. You can do this yourself and immediately from your account page, without contacting us.
Right to data portability: to receive your data in a machine-readable format.
Right to object and to restriction: to object to certain processing or ask that it be restricted.

To exercise a right that is not directly available from your account, write to contact@mytcgprice.com. You will receive a reply within one month at the latest.

7. Lodging a complaint

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

8. Security

The site is served over HTTPS only, passwords are hashed (scrypt) and IP addresses are kept as hashes only. No online service can, however, guarantee absolute security.

9. Minors

Creating an account is reserved for people aged 15 or over. Below that age, the consent of a parent or legal guardian is required.

10. Changes

This policy may change. Registered users will be informed of any significant change.

Last updated: July 2026.  ·  Terms of Service  ·  Legal Notice