Privacy Policy

Last updated: [effective date]

1. Who we are

The Service is run by FMGP Collectibles LLC, doing business as Benchmark TCG, in Orange County, California ("Benchmark TCG," "we," "us"). This policy covers the Benchmark TCG apps for desktop, iPhone and Android, the website at benchmarktcg.app, and the services behind them (the "Service"). Questions go to benchmarktcg21@gmail.com.

2. What we collect

What you give us.

• Account: your email address, a password (stored only as a one-way hash by our authentication provider), your name or shop name, and if you sign in with Apple or Google, the identity those services share with us (a name and an email, or an Apple relay address).
• Your cards: the cards you add, their set, printing, condition, quantity, what you paid, where you got them, tags and notes, photos you attach, slab certificate numbers you look up, and the NFC tag identifiers you link to cards.
• Your sales and your customers: if you use the selling features, the customers you record (name, handle, email, phone, shipping address), bags, claims, orders, payments you mark, trades, buyouts, shipping labels and tracking numbers, expenses, and your profit and loss figures.
• Catalog contributions: photos of raw cards you upload or confirm as the picture for a card in the shared catalog. These are public to every user (see section 4).
• Messages to us: feedback you send from the app, support emails, and bug reports.

What the app collects as it works.

• Camera: when you scan a card with the phone, the frames are used on the device to identify the card; a cropped image of the card may be sent to our servers to finish the match and may be kept with the card you add. Camera frames are not stored for any other purpose.
• Device and session: a device identifier we create, the device type and operating system, app version, sign-in times and tokens, and which account the device belongs to, so your data syncs between your devices and so we can sign a device out.
• Usage and diagnostics: which features are used, errors and crash details, and logs that help us fix problems. These are kept short and are not used for advertising.
• Pricing activity: which cards you price and when, so the price engine can keep them current.
• Location: we do not collect your location. The app does not ask for it.

What we get from others.

• Market data: sales and listings for cards from the data providers and marketplaces in section 5. This is about cards, not about you.
• Sign-in providers: the name and email Apple or Google share when you choose them.

3. How we use it

• To run the Service: store your cards and sales, sync them between your devices, price cards, print labels, show the booth screen, and keep you signed in.
• To keep it working and safe: fix bugs, prevent abuse, secure accounts.
• To talk to you: account emails (confirmation, password reset, security notices), replies to your feedback, and, only if you opt in, product news. You can turn news off any time.
• To improve the Service: we look at aggregated, de-identified usage to see what works. We do not profile you and we do not make automated decisions about you.
• Your customers' data is used only to provide the selling features to you: to show it to you, to print the label you ask for, and to store it. We never contact your customers, market to them, or share their data with anyone except the shipping label service you use to ship to them.

4. What is shared, and what is not

• We do not sell your personal information, and we do not share it for targeted advertising. There are no advertising networks or tracking pixels in the Service.
• The shared catalog. A raw card photo you contribute becomes part of the catalog every user sees, without your name on it. Your own card photos, live art and inventory are private to your account.
• The booth screen and stream features show only what you choose to show: the card, its price and the customer's bag. They never show your costs, your customers' contact details or your books.
• Service providers (section 5) process data for us under contracts that limit them to doing so.
• Legal reasons. We may disclose data if the law requires it, to enforce our Terms, or to protect anyone's safety.
• A sale of the business. If Benchmark TCG is acquired or merged, your data goes with the Service under this policy, and we will tell you.

5. Who touches your data

Every outside company that handles personal information for the Service, and why. [Re-check this list the day the policy publishes.]

• Supabase (database, authentication, file storage, hosted in the United States): stores your account, your cards, your sales, your customers and your photos, and handles sign-in and password reset.
• Railway (cloud hosting): runs the price engine, catalog sync and background workers that read your card list to keep prices current.
• Apple and Google: if you sign in with them, they confirm who you are and share a name and email. Subscriptions bought through the App Store or Google Play are handled by them.
• EasyPost (shipping labels): when you buy a label, the buyer's name and address and the package details are sent to EasyPost and the carrier to print the label and track the package.
• Card catalog and price data providers (TCGplayer, eBay through SoldComps, JustTCG, PkmnPrices, TCGTracking): we read public card and price data from them. We do not send them your personal information. Card identifiers you price are used to look up that card.
• [Email provider, to be chosen]: sends account emails on our behalf and sees your email address for that purpose.
• GitHub: hosts app updates the desktop app downloads; it sees your IP address when the app checks for an update.
• Google Fonts on the website only: your browser requests fonts from Google, which sees your IP address. The apps bundle their fonts and do not do this.

6. Your choices and rights

• Export: you can export your cards and sales from the app at any time in a standard format.
• Correct: you can edit anything you entered, in the app.
• Delete: you can delete your account and all your data from the app's Account page, or by emailing benchmarktcg21@gmail.com. We complete the deletion within 30 days. Catalog contributions, de-identified data, and records we must keep by law are not deleted.
• Marketing: we only send product news if you opt in, and every message has a way to stop.
• California residents: you have the right to know what we collect and why, to get a copy, to delete it, to correct it, and to not be treated differently for using those rights. We do not sell or share personal information as those words are defined in California law, so there is nothing to opt out of. To use these rights, email benchmarktcg21@gmail.com; we will verify it is you and answer within 45 days.
• Outside the United States: the Service is hosted in the United States, and by using it you understand your data is processed there. If you are in the UK or the European Economic Area, you have the rights above plus the right to object or restrict processing and to complain to your local authority; our basis for processing is the contract with you and, for security and improvement, our legitimate interests.

7. How long we keep it

As long as your account is active. When you delete your account, your data is removed within 30 days and leaves our backups within 90. Server logs are kept for up to 90 days. De-identified usage figures may be kept indefinitely. Catalog contributions stay in the catalog.

8. How we protect it

Data travels encrypted. Passwords are stored only as one-way hashes. Sign-in tokens live in your device's secure storage (the iPhone Keychain, Android Keystore, or the desktop's credential store), never in plain files. Every row in our database is tied to the account that owns it and the database refuses access to anyone else. No system is perfectly secure, so keep your device and password safe, and tell us at once if something looks wrong.

9. If there is a breach

If we learn of a breach that affects your personal information, we will tell you by email and in the app without undue delay, say what happened and what we are doing, and notify the authorities the law requires.

10. Children

The Service is not for anyone under 13 and we do not knowingly collect their information. If you believe a child has an account, email benchmarktcg21@gmail.com and we will remove it.

11. Changes

We will post changes here, and if a change matters we will tell you in the app or by email before it takes effect. The latest version is always at benchmarktcg.app/privacy.

12. Contact

benchmarktcg21@gmail.com FMGP Collectibles LLC, Orange County, California