Privacy Policy

Pocket Deckers v1 serves Canada only. This policy describes what personal information we collect when you use the site, why, and who else sees it.

Account information. When you sign in with a magic link email or with Google, we store your email address, and, if Google provides them, your name and profile picture. We also store the technical records needed to keep you signed in (a session identifier, and, for Google sign-in, the OAuth tokens Google issues).

Listing information. If you sell, we store the cards you list — condition, grading details you enter, price, shipping cost, and the photos you upload.

Order information. If you buy or sell, we store a copy of the listing and the shipping address you enter, frozen at the moment of checkout so it stays accurate even if the listing is edited later. We also keep an append-only record of what happened to an order — paid, shipped, delivered, and so on — which we use to resolve disputes and, if needed, to respond to a payment dispute raised with Stripe.

We do not collect or store your payment card number or your bank account details. Those go directly to Stripe.

Sellers: to receive payouts, Stripe collects and verifies identity information and banking details as part of onboarding a Stripe account. We do not see or store that information ourselves — we only receive a status telling us whether the account is able to accept charges and receive payouts.

Buyers: Stripe processes your payment method at checkout. We do not store your card details.

• To operate the marketplace: creating listings, processing orders, and paying sellers.
• To send order-related emails — for example, that a payment succeeded, that an order shipped, that funds were released to a seller, or that a refund was issued.
• To investigate and resolve disputes and payment chargebacks.

We do not use your information for advertising, and the site runs no ad-tracking scripts. We do use Vercel Analytics to count page views and see which pages people reach — it records the page visited, the referring site, and coarse details such as country, browser and device type. It does not build a profile of you, follow you to other sites, or receive your name, email address or any account details.

When you report a post, we store the reason, anything you add, and a one-way hash of your IP address — never the address itself. The hash lets us see that the same person has already reported a post, and stops one person filing hundreds of reports; it cannot be turned back into an address or used to locate you, and it is specific to this site.

You do not need an account to report something. If you are signed in, the report is linked to your account so that a pattern of bad-faith reports can be dealt with.

We use cookies necessary to keep you signed in and protect your session (for example, during sign-in). We use no marketing cookies. Our analytics (see section 4) is cookieless: it stores nothing on your device and identifies a visit from the request itself, which is why this site shows no cookie-consent banner.

Stripe, to process payments and payouts. An email delivery provider, to send the transactional emails described above. We do not sell personal information, and we do not share it with anyone else except where required by law.

We keep order records, including the append-only order history described above, for as long as needed for dispute resolution, accounting, and legal requirements. We keep account information while your account is active.

You can ask us what personal information we hold about you, and ask us to correct or delete it, subject to what we're required to keep for orders already placed (for example, order history needed for tax or dispute records). Contact us using the details below.

We may update this policy as the site changes. The date at the top of this page reflects the last update.

Questions about this policy, or a request about your information, can be sent to privacy@pocketdeckers.com.