_Last updated 8 September 2026: added the section on sharing a delivery address, which is kept for 48 hours and then deleted._
_This is the current version of this Policy for the tradecards.gg beta. It is not legal advice, and we may update it as the Service grows; material changes are versioned and re-consented._
What we collect
Account. Your email address and account identifier, via your palworldtcg.gg account. We do not store a separate password for tradecards.gg.
Trader profile. Your chosen handle, country, an optional region, a short bio, whether you accept cash, and where you are willing to ship.
Approximate location. We store a postal prefix, not your full postal code. A US 3-digit ZIP prefix, a Canadian forward sortation area, a UK outward code, or a 2-digit Australian region. We store the geographic centre of that prefix's area, which is accurate to roughly 20 to 50 km. This is enough to estimate shipping and to sort matches by distance. It is not enough to locate you, and we designed it that way deliberately.
Trades and messages. The trades you arrange, their contents and status, and messages exchanged with the other party.
Acceptance records. Which version of which policy you accepted, when, and a salted hash of the IP address it came from. We do not store the address itself, and the hash cannot be reversed into a list of visitor IPs.
Collection data. Your binders and their contents, read from your existing palworldtcg.gg account. tradecards.gg does not keep a second copy.
A delivery address, only if you send one, and only for 48 hours. You can share a postal address with one trade partner from your conversation with them. When you do:
- Only that one person can open it, and only for 48 hours.
- After 48 hours it is permanently deleted from our database. This is done by a scheduled job that runs every 15 minutes, not by hand.
- You can delete it yourself at any point before that.
- We keep a line in the conversation saying that an address was shared and when. That line stays; the address does not.
- We never store an address you have not chosen to send this way, and we never attach one to your profile.
What we never collect
- Your full postal code (we keep only a coarse prefix, see above)
- A street address, except one you deliberately share with a trade partner, which is deleted after 48 hours
- Payment card numbers or bank details, we do not process payments
- Your precise location
What is visible to others
Your handle, country, region if you set one, bio, shipping reach, whether you accept cash, and your public trading history and reviews.
Never public: your email address, your payment handle, your postal prefix, and the coordinates derived from it. These are enforced at the database level: the public view of a trader profile does not contain those columns at all.
Who we share with
- Your trade partner, for an agreed trade, the details you choose to send them
- Service providers who host and operate the platform, bound to protect it
- Law enforcement, where legally required
We do not sell your personal information.
How long we keep it
Account and profile data for as long as your account exists. Trade records and acceptance logs are retained after account closure where needed as evidence of what was agreed, see the Terms.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal information, and to object to certain processing. Contact Nishan Poudel LLC, Hattiesburg, Mississippi, USA, happynishan30@gmail.com.
Some records, completed trades, acceptance logs, moderation actions, may be retained after a deletion request where we have a legal basis to keep them.
Children
The Service is not directed at children under 13. Users aged 13 to 17 require guardian consent, see the Terms.
Changes
Material changes are versioned and re-consented. The version you accepted, and when, is recorded.
Contact
Nishan Poudel LLC, Hattiesburg, Mississippi, USA, happynishan30@gmail.com