Privacy Policy

Who we are

NZTCG ("Treasure Log", "we", "us") operates https://treasurelog.duckdns.org. We are a sole trader in New Zealand. Contact: nztcgstore@gmail.com.

What we collect

We collect only what we need to run the service:

• Account details — your email address and a securely hashed password, used to create and sign in to your account.
• Your collection — the cards you add, so we can calculate your collection value.
• Purchase status — whether your account has unlocked Pro. We never store full card numbers; payments are handled entirely by Stripe.

Who we share it with

We share only what is necessary, and only with providers that help us operate the service:

• Supabase — account authentication and database storage.
• Stripe — payment processing. Card details are entered on Stripe's hosted pages and never touch our servers.
• PriceCharting — we read public card pricing from them; we do not send them your personal data.

Cookies and tracking

We use a session cookie to keep you signed in. Free-plan advertising may set cookies to measure ad performance. We do not sell your personal information.

Your rights under the Privacy Act 2020

You can ask us at any time to access, correct or delete your personal information, or to stop sending you direct marketing. Email us and we will action it.

Data retention and security

We keep your data for as long as your account is active. Deleting your account removes your collection and personal details from our systems.

Passwords are hashed and never stored in plain text. The service is served over HTTPS. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last revised.