Privacy policy

This page covers the JupiterTCG website and the collection submission process. It is written to be read rather than to be defensible, so if something here is unclear, ask.

JupiterTCG is a trading name of Jupiter Coastal Media LLC, Jupiter, Florida, and the company is responsible for the information described below.

What we collect

Submission details: your name, email, phone if you give one, how you would like to be contacted, the city and ZIP code where the collection is, and your answers about what you have. If you tell us how you found us, and who sent you, we keep that too. We also note the time you ticked the box saying we can contact you.
Photographs you upload with a submission.
Order details if you buy from the store: what you bought, the shipping address, and the email address you checked out with.
Messages you send us through the contact form or by email. The contact form keeps your name, your email, what you wrote, and which item you were asking about if you wrote from a product page.
Our own notes while we deal with a submission: when we replied, the time and place of any appointment (which may be your address), any valuation fee, and how it ended.
A few technical details the forms record on their own, described below.
Usage measurement, described below.

We do not ask for a date of birth, and we never see or store your full card number - the payment happens on Stripe’s own checkout page, not ours. Consignors are the exception: to pay you we need account details, and where we are required to we need your taxpayer details as well. The consignment terms say what and why. A taxpayer identification number is never stored on this website or in the system behind it: it stays on your signed agreement and in our accounting software, and all this site records is that we have it.

Details the forms record on their own

When you send a collection submission, these are recorded alongside your answers without you typing them:

The address of the page the form was on, and of the page you were on just before it if your browser passes that on - usually another page of this site, sometimes the site that sent you here, such as a search engine. This tells us which pages lead people to the form.
Your browser’s description of itself: roughly, what kind of phone or computer and which browser version. We use it to tell an automated script from a person, and to work out what went wrong if the form fails on a particular device.
A scrambled code made from your internet (IP) address, a secret key and that day’s date. The address itself is not kept with your submission. The code shows us when several forms came from the same connection on the same day, which is how a flood of automated submissions shows up. Codes from different days do not match, so it cannot be used to follow anyone over time.
When the anti-spam check on the form ran, and which of our web addresses it ran on.

The contact form records only the scrambled code, and which of our web addresses its anti-spam check ran on.

Photographs of your collection

Photographs you upload with a submission go into a private store that is not reachable from the web, is not indexed, and has no public address. They are not part of the website’s image hosting, which is where product photographs live.

Location data is stripped on your device when we convert a photo; location data may remain in a photo we could not convert.

That distinction matters, so here is the detail: your phone shrinks and converts the photo in the browser before anything leaves it, and that conversion drops the camera’s embedded data, including GPS coordinates. A photo in a format the converter cannot read is uploaded as it is, and may still carry that data.

The owner is the only person who looks at them. They are used to prepare for your appointment and for nothing else: never published, never used in marketing, never shown to another customer, never sold.

We keep submission photographs for about 12 months after your submission is closed, then delete them. A submission is closed when we mark it finished after we have met, or mark it as not going ahead. The months are counted from that day, and a later note or piece of paperwork on it does not start them again. The deleting happens on its own - an overnight job does it, so it does not depend on anybody remembering. If you want yours gone sooner, at any point, email us and we will remove them and tell you when it is done.

A submission we never close does not keep its photographs forever. If nothing at all happens on it for 6 months - no reply from you, no note from us, no appointment - it closes itself as not going ahead, and the 12 months above start from that day. So the longest we hold a photograph you sent is about 18 months from the last time anything happened on your submission. Getting in touch again reopens it and starts the clock over; you can also just ask us to delete them.

How we use what we collect

To reply to your submission or message, and to arrange an appointment.
To prepare an offer, a consignment agreement or a valuation.
To fulfil and ship an order, and to send you tracking.
To keep the records a business has to keep, including consignment ledgers and statements.
To keep spam and automated abuse out of our forms, and to see which pages lead people to them.

We email you about your own submission or order. We do not run a marketing list off the back of a submission, and we do not add you to one without asking.

Who else sees it

A small number of services do specific jobs for us and see only what that job needs:

Stripe processes payments and holds the payment details. We never receive them.
Cloudflare hosts the site, its database and its storage, sends the emails the site sends you, and provides the anti-spam check on our forms.
Google Analytics measures how the site is used, described below.
Sentry receives a report when something on the site breaks, or when your browser blocks something the page tried to load. A report carries the page address and technical details of your browser and connection, not your name or payment details.
Pirate Ship, which we use to buy postage, receives the name and shipping address on an order that ships tracked.
Postal carriers receive the shipping address on an order.

We do not sell your information, we do not trade it, and we do not hand it to anyone for their own marketing. If we are ever legally required to disclose something, we will say so where we are allowed to.

Cookies and measurement

A cart cookie, so the store remembers what you put in your basket. It holds an identifier and an item count, nothing about you.
Google Analytics, which sets its own cookies and tells us which pages get read and where visitors arrive from. On the collection form it is told how far people get through the questions, what they want to do (sell, consign, a valuation, or not sure), how many photos they add and whether they are inside the area we cover - never a name, contact details, city, ZIP code, reference number or anything typed in. When you buy from the store it is told the order number, what was in it and the total, so that a sale can be matched to the visit that led to it.
A saved draft of the collection form, kept in your own browser - your answers so far and any photos you have added - so that a locked phone or a closed tab does not lose them. It stays on your device, and nothing in it reaches us until you press Submit. It is deleted once the form has finished sending your submission and its photos, or when you choose Start over. A draft left untouched for more than seven days is thrown away, photos included, the next time the form is opened in that browser; until then it stays on your device.
Cloudflare Web Analytics, which counts page views without cookies and without tracking you between sites.
Cloudflare Turnstile on the submission and contact forms, which checks that a form was filled in by a person rather than a script.

There is no advertising network on this site, no remarketing pixel, and no profile built about you across other websites.

How long we keep it

Submission photographs are the one thing we delete on a timer: about 12 months after your submission closes, and at the outside about 18 months after the last thing that happened on it, as described above.

Everything else that comes from a submission or a message is kept until you ask us to delete it, with the limits explained under “Your choices” below. Nothing deletes it automatically - there is no overnight job for it the way there is for photographs, and we would rather say so than print a date nothing enforces. That covers your answers and contact details, the technical details recorded with them, our notes and any appointment details, contact-form messages, the copy of each that arrives in our email inbox, and a note of each email the site sends you: the address, which email it was, and when.

Deleting something removes it from our live records straight away. Copies outlast that in two places. Our database host keeps an automatic history so that a mistake can be undone: for 30 days after a deletion the database could still be put back to a moment before it, and after that it cannot. We also make our own backup copies of the whole database from time to time and keep them on our own computer. We keep the 30 most recent and delete the oldest each time a new one is made, so a copy made before your deletion lasts until 30 newer copies have been made. How long that takes depends on how often we make them, so we cannot give you a date, and it is often longer than 30 days. We use a backup copy only to put the database back after something has gone wrong, and if we ever do that from a copy made before your deletion, we delete your information again.

One record stays after a deletion: a bare log of what happened to each submission and message - that it arrived, when its status changed, when its photographs were deleted, and that it was deleted - kept so that how it was handled can be checked later. That log never holds your name, contact details or photographs, the time or place of an appointment, or anything we have written about you in our own words.

Your choices

Email us and we will tell you what we hold about you, correct it, or delete it.

Deleting a collection submission removes your name, email address, phone number, town and ZIP code, everything you wrote about the collection, the time and place of any appointment, the technical details the form recorded, and every photograph. Contact-form messages sent from the same email address are deleted with it, and the notes we made on it are wiped. Our note of each email the site sent about it loses your address, and any delivery error that repeated it. What is left is a record with no name on it: its reference number, your tick-box answers (what kind of cards, roughly how many, how old) and the dates, so that our count of enquiries stays true and we can confirm to you that it was deleted.

Deletion has limits, and we will tell you exactly which apply to you. Records tied to money are kept for accounting and tax. If you consigned cards with us, your consignor record, the signed agreement, the ledger of sales and payouts and any statements stay, together with our record of the changes made to them, because we have to be able to show what we paid you, including on a tax form such as a 1099. An order you placed with the store stays for sales tax and payment records. If we bought your cards, we keep your name with the record of that purchase, because it is our only record of who we paid; everything else about you is still deleted. And the bare log of what happened to your submission and messages, described above, stays; nothing in it names you.

We act on a deletion request within 30 days of receiving it, usually much sooner, and email you when it is done. The copies in our email inbox are deleted by hand as part of the same request. If you are partway through a sale, consignment or valuation with us, we settle the money side first and delete the rest as soon as it is settled. Copies in backups can outlast the deletion for the times described above.

Ask us to delete your submission photographs at any time, including while your submission is still open. That request is never a problem and never changes how we deal with you.

Children

This site is not aimed at children, and we do not knowingly collect information from anyone under 13. If a submission looks like it came from a child we will ask for a parent or guardian before going any further.

Changes

If this policy changes we update the date at the top of the page. A change that materially affects how we handle submission photographs will also be emailed to anyone with an open submission.