Privacy Policy

1. Introduction

TableTop Trades ("we," "us," or "our") operates the TableTop Trades platform, a board game trading service that helps users exchange games using a mathematical matching algorithm. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services.

If you are a California resident, please see the California Privacy Rights section below for additional disclosures required under the California Consumer Privacy Act (CCPA).

2. Information We Collect

We collect the following categories of personal information:

• Account information: Your username, email address, and hashed password when you register for an account.
• Trade data: Game listings you post, want lists you create, trade preferences you express, and trade history associated with your account.
• Shipping information: Mailing addresses you provide to facilitate physical game shipments between traders.
• Usage and analytics data: Pages visited, features used, browser type, device type, IP address, and referring URLs collected automatically when you use our site.
• Communications: Messages or support requests you send to us.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Match you with compatible trade partners using our mathematical algorithm
• Facilitate the exchange of games between users
• Send transactional emails (trade confirmations, results, shipping notifications)
• Improve and optimize the platform based on usage patterns
• Respond to your support requests and inquiries
• Enforce our Terms of Service and prevent abuse

4. How We Share Your Information

We do not sell your personal information. We may share it in the following limited circumstances:

• Other traders: Your username and shipping address are shared with your matched trade partner(s) to enable game shipment.
• Infrastructure providers: We use Microsoft Azure for hosting, storage, and email delivery. These providers process data on our behalf under confidentiality agreements.
• Analytics services: Aggregated or anonymized usage data may be processed by analytics tools to help us understand how the platform is used.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

5. Cookies and Tracking

We use cookies and similar technologies to maintain your login session, remember your preferences, and collect analytics data about how the site is used. You can configure your browser to refuse cookies, but some features of the site may not function correctly without them.

6. Data Retention

We retain your account information and trade history for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time (see Section 8). Anonymized trade data may be retained for historical and research purposes after account deletion.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed password storage, and access controls to protect your personal information. No system is completely secure, and we cannot guarantee the absolute security of your data.

8. Your Rights and Choices

You may:

• Access or update your account information through your profile settings
• Request a copy of the personal data we hold about you
• Request deletion of your account and personal data
• Opt out of non-essential communications

To exercise any of these rights, please contact us using the information in Section 10.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell personal information, so there is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a request, contact us at the address listed in Section 10. We will respond within 45 days as required by law.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or by posting a notice on the site. The "Last updated" date at the top of this page reflects when the policy was last revised.