Legal
Privacy Notice
Last updated: 1 June 2026
This notice explains what personal data PTCG.co.uk collects, why we collect it, and your rights under UK GDPR. We've written it in plain English — if anything is unclear, contact us at ukptcg@gmail.com.
Data controller: PTCG.co.uk (operated as an independent hobby project, UK-based).
Contact: ukptcg@gmail.com
1. What we collect and why
| Data | Why we collect it | Lawful basis |
|---|---|---|
| Email address | Account creation, sign-in, stock alert notifications | Contract performance |
| Usage data (pages visited, features used) | Understanding how the site is used so we can improve it | Legitimate interest |
| User-generated content (sightings, favourites, collection data, reminders) | Providing the core service features | Contract performance |
| IP address / device/browser type | Security, fraud prevention, anonymous analytics | Legitimate interest |
We do not collect payment information — the service is currently free.
2. How we store your data
Account data (email, user preferences, collection data) is stored with Supabase, a US-based database service. Supabase participates in the EU–US Data Privacy Framework and provides appropriate safeguards for international data transfers. Their privacy policy is available at supabase.com/privacy.
Analytics data is processed by Google Analytics (Google LLC). Google's data processing terms apply. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.
We do not sell, rent, or share your personal data with any other third parties.
3. How long we keep your data
We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Anonymised, aggregated usage data (with no way to identify you) may be retained indefinitely for trend analysis.
4. Cookies
We use the following cookies:
- Authentication cookies — set by Supabase to keep you logged in. Essential for the service to function.
- Analytics cookies — set by Google Analytics to understand how visitors use the site. You can block these via your browser settings or the Google opt-out tool above.
- Advertising cookies — set by Google AdSense to show relevant ads. You can manage ad personalisation at adssettings.google.com.
We do not use tracking cookies for our own marketing purposes.
5. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your account and personal data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Restriction — ask us to restrict processing in certain circumstances
To exercise any of these rights, email ukptcg@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
6. Children
The service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has registered, please contact us so we can delete their account.
7. Changes to this notice
We may update this notice from time to time. The "last updated" date at the top will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised notice.
8. Contact
Any questions about this privacy notice or your data: ukptcg@gmail.com.