Privacy Policy

This Privacy Policy explains how MXYYC (“we”, “us”) collects, uses, and protects your information when you use Pokémon MVP (the “Service”).

1. Information We Collect

We collect the following information:

• Account information: email address, username, and a hashed (never plaintext) password.
• Listing content: card photos and descriptions you upload when creating a listing.
• Transaction data: purchases, offers, bids, and order history associated with your account.
• Payment data: handled directly by Stripe — we do not receive or store your full card number or bank details.
• Usage data: basic technical information (such as your IP address) used for security purposes like rate-limiting against abuse.

2. How We Use Your Information

We use your information to:

• Operate your account and the marketplace itself;
• Process payments and transfers of card ownership;
• Send transactional notifications (offers, bids, sales, etc.);
• Detect and prevent fraud, abuse, and security incidents.

We do not sell your personal information to third parties.

3. Who We Share Information With

We share information only with the service providers needed to run the Service: Stripe (payment processing), Supabase (database and image storage), and Resend (transactional email delivery). Each of these providers only receives the information necessary to perform their function.

4. Cookies & Sessions

We use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

5. Data Retention

We retain your account and transaction information for as long as your account is active, or as needed to comply with legal obligations (e.g. financial record-keeping) and resolve disputes.

6. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at mxyyc@mxyyc.community. Note that we may need to retain certain transaction records even after an account deletion request, where required for legal or accounting purposes.

7. Security

We take reasonable technical measures to protect your information, including password hashing, encrypted connections (HTTPS), and access controls on our database. No system is completely secure, and we cannot guarantee absolute security.

8. Children’s Privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from children under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after an update constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy can be sent to mxyyc@mxyyc.community.