Privacy policy

TCSell (“we”) is a European marketplace for Magic: The Gathering and One Piece singles. This policy explains what we collect, why, and your rights under the GDPR.

Who is responsible

Until the operating company is fully registered, you can reach the controller at hello@tcsell.com. Statutory name and address will appear on the imprint as soon as they exist.

What we process

• Account: name, username, email, country, password hash or linked Google/Apple id.
• Selling: TOTP secret (encrypted), listings, shipping address you save.
• Orders: items, amounts, status, tracking, and the address used to ship.
• Technical: session cookie, IP used only for rate limits and security logs.

Why (legal bases)

• Contract — create your account, list cards, checkout, ship, and support an order.
• Legal obligation — invoices, tax, and marketplace reporting when those rules apply.
• Legitimate interest — keep the site secure, prevent fraud, improve the catalog.
• Consent — only if we later add optional analytics or marketing. We do not do that today.

Processors

Payments go through Stripe. Transactional email goes through Resend. Hosting is Vercel. The database is Neon. Google or Apple only if you choose those sign-in buttons. Each acts as a processor or independent controller under their own terms.

How long

Account data until you delete the account. Orders and invoices for the statutory bookkeeping period (usually 7 years in the EU). Sessions expire after 30 days of inactivity.

Your rights

You may access, correct, delete, or export your data, object to processing, and lodge a complaint with your local data-protection authority (in the Netherlands: Autoriteit Persoonsgegevens). Write to hello@tcsell.com.

Cookies

See the cookie notice. We only set what the site needs to run.