Privacy Policy — TCG Booth
Last updated: October 21, 2026. This policy covers the TCG Booth website (tcgbooth.com) and the TCG Booth Android app (package com.tekjeep.tcgbooth), published by St. Pete Web Co. TCG Booth is free, has no ads, and does not sell or share personal data.
1. Shop data stays on your device
Inventory, sales, customers, store credit, preorders, events, staff names and PINs, settings and payment handles are stored only on your device (browser storage on the web; app storage on Android). We do not upload or collect this data. If you uninstall the app or clear browser data, it is deleted unless you made a backup with “Backup all data”.
Microphone (optional voice questions)
The help chat has an optional “Hold to talk” button. The microphone is used only while you hold it, and permission is asked only when you first tap it. Speech is turned into text by your browser or your phone’s built-in speech service (for example Google on Android), and only the resulting text question is sent to the help chat, the same as a typed question. We do not record, store or share audio. “Read replies aloud” uses your device’s text-to-speech.
2. Camera
The camera is used only when you tap scan: to read a card's name and number, or to read a barcode. Photos are processed on your device (text recognition and Google ML Kit barcode scanning run locally). Photos are not saved to your gallery, not uploaded, and not shared. Only the recognized text (for example a card name) is used to search the public card catalogs. You can deny camera permission and still type searches or upload a photo yourself.
3. Card prices and catalogs
Searches (card names, set codes, numbers) are sent to our API at tcgbooth.com, which fetches public data from pokemontcg.io, TCGdex, Scryfall, YGOPRODeck, Lorcast, OPTCG API and tcgcsv.com. These requests contain no personal information.
4. Optional accounts, chat, feedback, help chat and card photos
These optional features are provided by St. Pete Web Co.'s shared accounts service (nick-sites-hub.tekjeep.workers.dev):
- Accounts: passkey sign-in. We store a display name you choose, your passkey's public key (never your fingerprint, face or device PIN), plus cards you save and pages you view while signed in. You can delete your account and this data from the Account page.
- Chat: messages are public to other visitors, filtered for abuse and rate-limited.
- Feedback: the text you submit (and a contact address only if you choose to add one) is stored so we can read it.
- Help chat: your question is sent to a third-party service that generates the answer on our behalf. It is used only to answer you and is not used for ads. Don't include personal information.
- Card photos: see section 4a below.
- Visit counter: uses a random session id, not tied to your identity.
4a. Card photos you upload (optional)
- Who can upload: only signed-in users can add photos to card pages, listings and shop pages. Guests can view photos but can't upload.
- What is stored: the photo (JPEG, PNG or WebP, up to 5 MB), an optional caption, the page it was added to, and your account id. Uploaded photos are public once approved.
- Location and camera data removed: EXIF, GPS, XMP and other metadata are stripped on our server before a photo is stored.
- Moderation: every photo goes through an automated safety check before it appears. Photos that fail are deleted right away; some are held for review.
- Report button: anyone can tap Report on a photo. A photo reported by several people is hidden automatically until it is reviewed, and we can remove any photo.
- Deletion: you can delete your own photos at any time, or email [email protected] and we will remove any photos linked to your account (including when you delete your account). Removed or rejected photos are purged from storage.
- Photos taken with the Scan button are different: they are processed on your device and never uploaded (see section 2).
5. Public storefront (optional)
If you sign in and tap “Publish public storefront”, your shop name, logo, about text, payment handles and in-stock items are made public on the Marketplace. Nothing is published unless you choose to. To remove a storefront, email [email protected].
6. Payments
TCG Booth does not process payments or collect card numbers. Venmo, PayPal, Cash App, Zelle and X Money buttons simply open those services, whose own privacy policies apply.
7. Service providers and logs
- Cloudflare hosts the site and API. It processes IP addresses briefly for security and rate limiting, and provides cookieless, aggregate Web Analytics.
- If you choose a language, Google Translate processes page text.
We use no advertising or tracking cookies.
8. Security, retention and children
All connections use HTTPS. Account, chat and feedback data are kept until you delete them or ask us to. TCG Booth is a business tool and is not directed to children under 13.
9. Your choices and contact
To access, delete or ask about your data, email [email protected] (or see our contact page). If this policy changes, we will update this page and its date.