PRIVACY POLICY

Last updated: January 2025

1. WHAT WE COLLECT

Account Information:

  • Email address (required for account)
  • Username (public)
  • Location / District (optional, public)

Optional Contact Details (you choose what to share):

  • WhatsApp number
  • Telegram username
  • Discord username
  • WeChat ID

Listing Information:

  • Card details (name, set, condition, price)
  • Photos you upload
  • Notes and descriptions

Usage Data:

  • Pages visited and actions taken
  • Device and browser information
  • IP address

We do NOT collect: Payment information, government ID, precise GPS location, or any financial data.

2. HOW WE USE YOUR DATA

We use your information to:

  • Provide the service (display listings, enable contact between users)
  • Display your public profile to other users
  • Send notifications (if you enable them)
  • Improve the platform and fix bugs
  • Enforce our Terms of Service
  • Investigate reported users and suspicious activity
  • Communicate important updates about the service

3. WHAT'S PUBLIC VS PRIVATE

PUBLIC (visible to all users):

  • Username
  • Location / District
  • Your listings
  • Feedback score
  • Account creation date

PRIVATE (protected):

  • Email address (never shared)
  • Contact details (only visible to logged-in users)

You control which contact methods to add to your profile. You can add or remove them at any time in your account settings.

4. DATA SHARING

We do NOT sell your data.

We do NOT share your data with advertisers.

We may share data with:

  • Service providers: Hosting (Vercel), database (Supabase), email services - only as needed to operate the platform
  • Law enforcement: If legally required by court order or law
  • Business transfers: In case of merger or acquisition (with advance notice to users)

5. DATA SECURITY

We use industry-standard security measures:

  • HTTPS encryption for all connections
  • Secure database hosting (Supabase)
  • Password hashing (never stored in plain text)
  • Regular security updates

However, no system is 100% secure. You are responsible for keeping your password safe and logging out on shared devices.

6. DATA RETENTION

  • Active accounts: Data kept while your account is active
  • Deleted accounts: Data removed within 30 days of account deletion
  • Listings: Removed when you delete them or your account
  • Some data may be retained longer if required for legal compliance or dispute resolution

7. YOUR RIGHTS (PDPO COMPLIANCE)

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your account and data

To exercise these rights, contact us at hello@topdeck.hk

8. COOKIES

Essential cookies: Required for login and session management. Cannot be disabled.

Analytics cookies: Help us understand how the site is used. You can opt out in your browser settings.

We do NOT use: Advertising cookies or tracking for ad targeting.

9. CHILDREN

TopDeck.hk is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13.

If we learn that a child under 13 has created an account, we will delete it promptly. If you believe a child has an account, please contact us.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a notice on the platform.

Continued use of TopDeck.hk after changes constitutes acceptance of the updated policy.

11. CONTACT

For privacy-related questions or requests: hello@topdeck.hk

TopDeck.hk is not affiliated with Wizards of the Coast or Hasbro.