Privacy policy

Effective date: August 26, 2026

CCGCastle LLC ("TCG Bulk", "we", "us", or "our"), located at 2 Craftsman Road, East Windsor, Connecticut 06088, United States, operates the TCG Bulk websites, mobile applications, and related services (collectively, the "Service").

This Privacy Policy explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, and the choices and rights available to you.

Information We Collect

Depending on how you use TCG Bulk, we may collect:

  • Account and contact information: your name, username, email address, telephone number, account identifier, company details, billing or shipping address, country, and preferred language.
  • Seller, buyer, and transaction information: card and collection details, Binder contents, submissions, offers, shipment tracking, payment or payout status, transaction history, account balance, and information needed to process or support a sale.
  • Verification and compliance information: company or representative details, identity or authority information where verification is required, fraud-prevention information, and relevant publicly available business information.
  • Communications and user content: support requests, chat messages, profile images, submission photographs, shipping-label documents, attachments, claims, complaints, and other content you choose to provide.
  • Camera and photo-library content: images you take or select after granting permission for features such as card scanning, a profile photo, chat, or submission evidence.
  • Scanner information: when you scan a trading card, a cropped image is sent securely to our recognition service to identify possible card, set, and variant matches. The recognition service processes the submitted scan image in memory and does not retain it after servicing the recognition request. A card you confirm, add to your Binder, or use in a submission may be stored as part of your account or transaction history.
  • Payment and payout information: transaction identifiers, payment status, payout details, and related account information needed to complete and support transactions. Payment providers such as Stripe and PayPal process payments or payouts. TCG Bulk does not store complete payment-card numbers.
  • Device, network, and technical information: IP address, device and app identifiers, advertising identifier where permitted, operating system, app version, browser type, language, approximate region derived from network information, diagnostic information, and security or access logs. A region-lookup provider may temporarily process or log an IP-address query.
  • Usage and analytics information: pages and screens viewed, feature interactions, scanner and Binder milestones, submission milestones, referral information, campaign parameters, and app performance information.
  • Notification information: push-notification subscription identifiers, notification preferences, and delivery or interaction status.
  • Social sign-in information: if you sign in with Apple or Google, we receive the provider account identifier and profile information you authorize the provider to share, which may include your name and email address.

How We Use Information

We use personal information to:

  • create, authenticate, secure, and administer accounts;
  • provide card scanning, Binder, marketplace, chat, submission, shipping, payment, payout, and support features;
  • connect buyers and sellers and support the performance of physical-card transactions;
  • process transactions, prevent fraud or misuse, resolve disputes, and enforce our Terms of Service;
  • send service messages, transaction updates, support responses, and notifications you request;
  • understand and improve performance, reliability, usability, and feature adoption;
  • measure advertising and campaign performance where the required consent or platform permission has been provided;
  • comply with tax, accounting, consumer-protection, law-enforcement, and other legal obligations; and
  • establish, exercise, or defend legal claims.

Legal Bases

Where applicable law requires a legal basis, we process personal information as necessary to perform a contract with you or take steps at your request before entering a contract; comply with a legal obligation; pursue our legitimate interests in operating, securing, improving, and protecting the Service, provided those interests are not overridden by your rights; or based on your consent.

You may withdraw consent at any time without affecting processing that occurred before withdrawal.

Communications, Safety, and Marketplace Integrity

To protect users and enforce our marketplace rules, automated detection systems and, where necessary, authorized personnel may review messages and attachments exchanged through TCG Bulk. This processing may be used to identify fraud, abuse, spam, illegal content, threats, sharing of contact information, attempts to move transactions outside TCG Bulk, or other violations of our Terms of Service.

Analytics, Advertising Measurement, and Consent

TCG Bulk uses analytics and advertising-measurement technologies according to your consent choices and applicable platform permissions:

  • Firebase Analytics helps us understand app usage and performance.
  • Meta App Events helps us measure whether our advertising leads to useful actions in the app. Where permitted, Meta may receive app interaction or conversion events and app, device, or attribution identifiers made available by the platform or SDK.
  • Website analytics and advertising technologies may use cookies or comparable identifiers where permitted.

On iOS, advertising measurement that requires Apple's App Tracking Transparency permission is not enabled unless you allow it. You can change this permission in iOS Settings. Website users can update available cookie choices through our consent controls. You may also limit advertising identifiers through your device settings.

TCG Bulk does not display third-party advertising inside the app. Advertising measurement is used to understand and improve our own marketing.

Cookies

Our websites may use cookies and similar technologies for essential functions, preferences, analytics, and advertising measurement where permitted. For more information, see our Cookie Policy.

Push Notifications

We use OneSignal to provide optional push notifications. OneSignal may process a notification subscription identifier and related app, device, session, delivery, or interaction information. A notification subscription may be associated with your TCG Bulk account while you are signed in. You can disable notification delivery in the app or your device settings.

When We Share Information

We may share personal information with:

  • service providers that host, secure, monitor, or support our websites, apps, databases, communications, scanner service, and infrastructure;
  • payment and payout providers, including Stripe and PayPal;
  • analytics, attribution, and advertising-measurement providers, including Google/Firebase and Meta, where permitted by your choices;
  • notification providers, including OneSignal;
  • identity providers, including Apple and Google, when you choose social sign-in;
  • shipping, email, customer-support, fraud-prevention, professional-adviser, and transaction-support providers where needed to provide the Service;
  • a buyer, seller, or other transaction participant to the extent needed to complete and support a transaction;
  • authorities or other parties where required by law or reasonably necessary to protect rights, safety, and security; and
  • a successor in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.

We do not sell personal information for money. Some analytics or advertising-measurement disclosures may be treated as "sharing", "targeted advertising", or a "sale" under certain privacy laws. Where those laws apply, we provide the required choices and honor applicable consent or opt-out requests.

International Transfers

TCG Bulk and its service providers may process information in countries other than where you live, including the United States and countries in the European Economic Area. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or standard contractual clauses.

Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy:

  • Account information is generally kept while your account is active and while a deletion request is being completed.
  • Images submitted to the card-recognition service are processed in memory and are not retained by that service after the recognition request is completed.
  • Confirmed Binder and submission records remain until you remove them, close your account, or they are no longer needed, subject to transaction and legal-retention requirements.
  • Transaction, payment, shipping, fraud-prevention, dispute, and accounting records may be retained after account deletion where required by law or reasonably necessary to protect transaction participants and legal rights.
  • Support messages, chat records, submission evidence, and security logs are kept only as long as reasonably needed for support, safety, fraud prevention, disputes, or legal obligations.
  • Analytics, notification, and advertising-measurement information is retained according to our configured provider settings, legal requirements, and your consent choices.

When information is no longer required, we delete or anonymize it.

Account Deletion

You may request deletion from within the TCG Bulk app or through our Account Deletion page. Eligible deletion requests are normally completed within seven calendar days.

Deletion may be delayed while an active submission, unpaid payout, or positive account balance requires resolution. We will explain any action required. When deletion is completed, we delete or anonymize account information that is no longer needed. Certain transaction, payment, shipping, fraud-prevention, dispute, tax, accounting, or legal records may be retained where required by law or reasonably necessary to protect transaction participants and legal rights.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy of your personal information; withdraw consent; opt out of certain targeted-advertising or data-sharing activities; or complain to a data-protection authority.

You can update certain account information through the Service and manage available cookie, notification, or device tracking choices through the relevant Service or device controls. To exercise another privacy right, contact [email protected]. We may need to verify your identity before completing a request.

If you are in the European Economic Area, you may also lodge a complaint with your local data-protection authority. Contact details for European supervisory authorities are available through the European Data Protection Board.

Security

We use technical and organizational safeguards designed to protect personal information. However, no transmission or storage system can be guaranteed completely secure.

Children

TCG Bulk is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users must also meet any higher minimum age that applies in their country or have the authorization required by local law and our Terms of Service.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or legal requirements. We will post the updated policy and effective date and provide additional notice where required.

Contact Us

For privacy questions or requests, contact:

CCGCastle LLC
2 Craftsman Road
East Windsor, Connecticut 06088
United States
[email protected]