← Back to ignosis TCG

ignosis TCG — Privacy Policy

Effective date: July 12, 2026 Operated by: ignosis LLC ("ignosis", "we", "us"). Contact: support@ignosistcg.com · 300 Delaware Ave, Ste 210, Wilmington, DE, United States

This Policy explains how ignosis handles data on the ignosis TCG platform (ignosistcg.store and store subdomains). ignosis hosts storefronts for independent sellers ("Merchants"). It is important to understand the two different roles data can have on our platform.

1. Two roles: your Customers' data vs. our platform data

(a) A Merchant's Customers' data — the Merchant controls it; ignosis only processes it. When someone buys from a Merchant's store, the Merchant collects information needed to fulfill and support that order: name, email address, shipping address, order contents (and, if added in the future, phone number). The Merchant is the controller of this data. ignosis stores and processes it only on the Merchant's behalf — so the Merchant can deliver orders, communicate with their Customers (including via the in-app Emails inbox), and administer their shop. ignosis acts as the Merchant's service provider / processor for this data.

Our commitments regarding a Merchant's Customers' personal information (PII):

  • We will never sell it.
  • We will never use it for our own purposes.
  • We will not retain it for ourselves or repurpose it beyond operating the Service

for the Merchant.

  • We treat full street address, name, email address, and (future) phone number as

PII that ignosis does not use, analyze, or monetize.

(b) ignosis's own platform/analytics data — ignosis controls it. To run and improve the product, ignosis collects sales data about transactions on the platform, specifically:

  • order amount,
  • order volume / counts,
  • the state and ZIP code associated with orders,
  • which cards are sold.

We use this sales data to analyze trends and make the product better (e.g., understanding demand, pricing, and regional patterns). This dataset is kept separate from the Customer PII described in (a) and is used in aggregate/de-identified form. We do not include name, email, full street address, or phone in this analytics use.

2. Our value-sharing commitment

If aggregated sales data or other user-generated data on the platform ever financially benefits ignosis, we commit to finding a way to return part of that benefit to the user base that helped generate it. We are not committing to a specific amount or form, but we are committing that if this data helps us financially, we will share value back with the Merchants (and their community) who produced it.

3. Data about Merchants (our account holders)

When you sign up as a Merchant, we collect and use, as the controller:

  • account and profile details (name, email, store name, and the seller-signup info you

provide such as which TCGs you sell and how you heard about us);

  • authentication data via our identity provider (Auth0);
  • your connected payment account identifiers via Stripe (we do not store full card

numbers);

  • support communications;
  • usage and device/log data needed to operate, secure, and improve the Service.

We use this to provide the Service, bill you, secure the platform, provide support, and communicate with you about your account.

4. How data is shared (sub-processors)

We use trusted third parties to operate the Service. They process data only as needed to provide their function:

  • Stripe — payments and Stripe Connect.
  • Shippo — shipping rates and label purchasing.
  • Resend — sending and receiving store email.
  • Auth0 (Okta) — authentication.
  • Neon — database hosting.
  • Vercel — application hosting.

We do not sell personal information. We may disclose data if required by law, to protect rights and safety, or in connection with a corporate transaction (with continued protection of the data).

5. Security

We use reasonable technical and organizational measures to protect data, including tenant isolation (each Merchant can access only their own store's data), encryption in transit, access controls, and signed webhooks. No system is perfectly secure; we cannot guarantee absolute security.

6. Retention

  • Customer order data is retained for as long as the Merchant's account is active and as

needed for the Merchant to operate, for legal/accounting requirements, and per the Merchant's instructions. When a Merchant closes their store, we delete or de-identify data within a reasonable period, subject to legal retention obligations.

  • ignosis's aggregate sales/analytics data may be retained in de-identified form.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing.

  • Merchants can exercise these by contacting us at support@ignosistcg.com.
  • A Merchant's Customers should contact the Merchant they purchased from, because

the Merchant controls that data; ignosis will support the Merchant in responding.

8. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

9. International users

Data may be processed in the United States and other countries where we or our sub-processors operate. We rely on appropriate safeguards where required.

10. Changes

We may update this Policy. Material changes will be communicated through the Service or by email, and take effect as stated in the notice.

11. Contact

Privacy questions or requests: support@ignosistcg.com, ignosis LLC, 300 Delaware Ave, Ste 210, Wilmington, DE, United States.