Last updated 14 September 2026 (version 2026-09-14)
What we collect
Your account: email address, a username and display name, your first and last name, and a password stored only as a cryptographic hash. If you sign in with Apple or Google we store the identifier they give us instead of a password.
Your location, if you allow it: approximate coordinates used to show collectors near you and to sort listings by distance. You can decline, and the app still works without it. You can clear it at any time in the app.
What you put in the app: the cards in your collection, the cards you list for trade, any photos you attach to a listing, your profile picture, the offers you send and receive, and the messages you exchange with other collectors.
How you use it: when you were last active, your rating and completed trade count, your preferred game, and your notification settings.
If you asked us to email you at launch, the address you gave us on the website and the page you gave it on.
What we do not collect
We do not collect payment details, card numbers, or bank information. TraderPost does not sell cards or process payments.
We do not collect your shipping address. Trades are arranged between the two of you.
We do not track you across other apps or websites, and we do not run advertising.
Why we collect it
To run your account and keep you signed in.
To show you cards near you, and to show your listings to other collectors near them. Other collectors see the rough distance to you, never your coordinates or address.
To deliver messages and offers, and to notify you about them if you have turned notifications on.
To show both sides the current market value of a proposed trade.
To investigate reports, block abuse, and keep the service working.
What other collectors can see
Your username and display name, your profile picture, your rating and completed trade count, the cards you have listed for trade, and roughly how far away you are.
They cannot see your email address, your exact location, your full collection, or anything you have not listed.
Who else receives data
Apple and Google, if you choose to sign in with them.
Resend, which sends our transactional email such as verification and password resets.
Expo, which delivers push notifications to your device.
Sentry, which receives crash and error reports so we can fix faults.
Cloudflare, which stores images you upload and hosts our website.
We use TCGdex and Scryfall for card information and prices. They receive no information about you.
We do not sell your data, and we do not share it for anyone else’s advertising.
How long we keep it
Your account data for as long as the account exists. Delete your account in Settings and we remove your profile, collection, listings and messages.
Some records are kept longer where we have to: reports and moderation decisions, so a blocked account cannot simply be recreated.
Crash reports are kept for a limited period and are not linked to your collection or messages.
Your choices
See and change your details in the app, and export your collection from Settings.
Delete your account at any time from Settings. This is permanent.
Turn location off in your device settings; turn notifications off in the app or your device settings.
Depending on where you live you may have further rights over your data, including access, correction, deletion and portability. Ask us and we will help.
Children
TraderPost is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.
Changes, and contacting us
If we change this policy in a way that matters, we will update the date above and ask you to agree again in the app.
Questions, requests, or concerns: support@traderpost.app.