Privacy Policy

TCGHaulTracker LLC ("we," "us," or "our") operates the TCGHaulTracker service at tcghaultracker.com. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and your rights regarding that information. By using TCGHaulTracker you agree to the practices described here.

Information We Collect

Account information — When you register, we collect your name and email address. This is used to identify your account, deliver processed files, and send transactional communications.

Packing slip and order data — When you upload a TCGplayer packing slip PDF or CSV file, we extract and store the following data for each order: buyer name, shipping address, order number, and order value. This data is necessary to generate barcodes, validate delivery addresses, and track shipments. Your original uploaded file is not retained after processing.

Barcode and tracking data — We store the unique barcode identifier assigned to each order, along with USPS scan events (facility name, event type, timestamp, geographic coordinates where available) as they are returned by USPS Informed Visibility. Scan events are stored for the life of the order record in your account.

Mailing date — You may optionally record the date you physically mailed a job batch. This date is stored with the job record and used to calculate transit times.

Buyer email addresses — If you choose to enable delivery notifications, you may provide a buyer's email address for a specific order. That address is used solely to send a single delivery notification email when the order confirms delivered. Immediately after the notification is sent, the email address is deleted from our system. We do not retain buyer email addresses beyond the moment of delivery notification.

Return address — You may optionally enter a return address in Settings. This is stored with your account and printed on your envelope PDFs. It is not shared with third parties.

Usage and analytics data — We collect standard server logs including IP addresses, browser type, and pages visited. We also use Microsoft Clarity, a behavioral analytics tool, to understand how users interact with the service (page navigation, clicks, scroll depth). Clarity may record session replays. No personal order or buyer data is included in Clarity sessions. See Microsoft's privacy statement for details on how Clarity handles data.

Payment information — Payment is processed by Stripe. We do not store credit card numbers or payment details on our servers. We receive and store basic transaction records (plan type, billing date, amount) from Stripe.

How We Use Your Information

• To generate USPS Intelligent Mail Barcodes for your orders
• To validate buyer shipping addresses through the USPS API
• To deliver your processed PDF and make it available in your dashboard
• To retrieve and display USPS scan events for your shipments
• To calculate shipment metrics including scan rate, delivery rate, and average transit time
• To send transactional emails (processing complete, processing failed, delivery notifications, billing receipts)
• To operate, maintain, and improve the service
• To enforce our Terms of Service and prevent abuse

We do not use your data for advertising. We do not sell, rent, or share your personal data with third parties except as described in this policy.

Buyer address data is used exclusively for order fulfillment. Shipping addresses extracted from your packing slips are used solely to generate USPS barcodes, validate deliverability, and track shipment status on your behalf. We do not use buyer addresses to contact buyers directly, build marketing lists, conduct outreach, or for any purpose unrelated to fulfilling the specific order from which the address was obtained. This is consistent with the data use obligations applicable to sellers on third-party marketplaces including TCGplayer.

Third-Party Services

USPS — Buyer addresses are submitted to the USPS Address Validation API for standardization and deliverability verification. Barcode data is registered with USPS under our Mailer ID. USPS Informed Visibility scan events are retrieved on your behalf. USPS data use is governed by the USPS API license agreement.

Stripe — Payment processing. Stripe's privacy policy governs the handling of your payment information. See stripe.com/privacy.

SendGrid — Transactional email delivery. Processed PDFs, delivery notifications, and account emails are sent via SendGrid.

Render — Cloud hosting provider where TCGHaulTracker runs and data is stored. Servers are located in the United States.

Microsoft Clarity — Behavioral analytics and session recording. Clarity collects anonymized usage data to help us improve the product. No personal order or buyer data is transmitted to Clarity. See Microsoft's privacy statement.

Data Retention

We retain your account information for as long as your account is active. Your job and order data — including barcode IDs, scan events, address data, and shipment history — is retained until you delete a job, close your account, or request deletion. We do not automatically purge your processing history.

When you delete a job from your dashboard, the job record is initially hidden from your view but retained for administrative audit purposes. You may request permanent deletion of any job record by contacting us at hello@tcghaultracker.com.

Buyer email addresses collected for delivery notifications are deleted immediately after the notification is sent, as described above.

USPS scan events continue to be collected for active shipments for up to 45 days after the order is processed, reflecting the IV-MTR tracking window. Scan events already collected are retained as part of your order history indefinitely unless you delete the order or request account deletion.

You may request full deletion of your account and all associated data at any time by emailing hello@tcghaultracker.com. We will action verified deletion requests within 30 days.

Security

All data is transmitted over HTTPS. Account passwords are hashed and never stored in plaintext. Two-factor authentication (TOTP) is available on all accounts and recommended. We use industry-standard practices to protect your information.

In the event of a data breach that affects personal information, we will notify affected users and relevant authorities as required by applicable law and within the timeframes required by our data processing agreements.

No system is completely secure. We cannot guarantee the absolute security of your data.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@tcghaultracker.com. We will respond to verified requests within 30 days.

You may also delete individual jobs from your dashboard at any time, which removes them from your active view. For permanent deletion of underlying records, contact us directly.

Children's Privacy

TCGHaulTracker is available to users aged 13 and older. Users between 13 and 17 must have parental or guardian consent to use the service. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email at least 14 days before they take effect. The date at the top of this page reflects the most recent update. Continued use of TCGHaulTracker after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy? Email us at hello@tcghaultracker.com.