Privacy
Policy

The Information We Actually Keep

We collect:

• Account information(username, email, and an optional default ZIP code). Sign-in is handled by Auth0, which holds your password; PlayerLots never sees or stores it.
• Payment information(processed by Stripe; card numbers go to Stripe directly and are never stored by PlayerLots)
• Seller payout information(identity, bank, and tax details sellers give to Stripe Connect to get paid, plus the ship-from address a seller provides)
• Transaction and shipping information(addresses, tracking numbers, invoices)
• Listings, card photos, and collections(the lots you list, the card photos you upload, and the cards you track in your Collection)
• Platform activity(pages and lots viewed, searches, saved lots, alerts, shares, lot questions, and ratings). Searches are logged with your device’s browser details and a general location (country, region, city) worked out from your IP address; the IP address itself is not stored.
• Sign-up signals(when you create an account we keep a salted, one-way hash of your IP address and the general location it maps to, to spot duplicate or abusive accounts; the IP address itself is not stored)
• How you found us(the campaign tags, such as utm_source, on the link that brought you here, saved with your account and your claims)
• Support conversations(anything you send us through the help widget or by email)

Why the data exists in our database

We use information to:

• Process purchases and sales between buyers and sellers
• Calculate shipping, buy labels, and verify shipment and delivery
• Identify cards from the photos you upload
• Prevent fraud, spot duplicate accounts, and enforce platform rules
• Improve product reliability and user experience
• Measure which campaigns and ads bring people to PlayerLots
• Send important account, transaction, and policy updates
• Send the alert, digest, and featured-lot emails you can unsubscribe from

The third parties who see your data

We share data only with the other party to a sale and the services that help us run PlayerLots, and only what each one needs:

• The seller of a lot you buyreceives your username, shipping name and address, and email so they can ship the lot and reach you about that order. Buyers see the seller’s username, not their email.
• Stripeto take payments, pay sellers, run memberships, and calculate sales tax
• Auth0to sign you in and keep your account secure
• Shippo and the carriers (USPS, UPS, FedEx)to quote shipping, buy labels, and check tracking numbers
• Twilio SendGridto deliver our emails
• Microsoft Azure, including Azure OpenAIto host the platform and its data, and to identify cards in the photos you upload
• Zendeskto run the help widget and answer support requests
• Google Analytics, Meta (Facebook), and Redditanalytics and advertising pixels that measure site usage and ad results (see Cookies & tracking below)
• Social networks (Facebook and Instagram directly, X via Publer)public lot listings and their photos may be posted to PlayerLots social accounts; seller spotlight posts name the seller’s username unless the seller turns them off in their profile
• Legal authoritieswhen required by law

We never sell personal data for money.

The Meta and Reddit pixels described below do let those companies see how you use PlayerLots so we can measure and target our ads. Some state privacy laws treat that as “sharing” personal data for targeted advertising. You can opt out of it at any time: see Your privacy choices.

How the Information Is Protected

We take reasonable measures to protect user information, including encryption for sensitive data and secure infrastructure. No system is perfectly secure, but protection is treated seriously.

What you can ask us to do

Users may request:

• Access to their stored data
• Correction of inaccurate information
• Account deletion (subject to legal and operational retention requirements)

You can delete your account yourself from your profile page, or email us and we will do it for you. Every marketing email (alerts, digests, and featured lots) carries a one-click unsubscribe link; account and transaction emails do not, because they are part of using the platform. Sellers can turn off seller spotlight posts from their profile.

The cookies in play, and why

We use essential cookies and browser storage for sign-in and session management, and to remember things like your unfinished lot drafts and display preferences. If you arrive through a tagged campaign link, we keep those campaign tags in your browser for up to 30 days so we can credit the right campaign when you sign up or claim a lot.

On the live site we also load these third-party tools, which set their own cookies:

• Google Analytics 4counts page views and key actions (viewing a lot, starting a claim, purchases, sign-ups) so we can see how the site is used
• Meta (Facebook) Pixelreports page views and the same key actions to Meta so we can measure and target our Facebook and Instagram ads
• Reddit Pixelreports page views and the same key actions to Reddit so we can measure and target our Reddit ads
• Zendeskloads the help widget

To opt out, you can install the Google Analytics opt-out add-on, manage ad settings in your Meta ad preferences and Reddit privacy settings, or block third-party cookies and trackers in your browser. PlayerLots works normally with these tools blocked.

Opt out of ad tracking

You can stop PlayerLots from loading the Meta and Reddit pixels in this browser. We also stop sending Google Analytics data for ad personalization. Site analytics, sign-in and your account keep working.

If your browser sends the Global Privacy Control signal, we treat it as this opt-out automatically and the pixels never load.

Checking this browser’s setting.

The choice is saved in this browser only. Clearing your browser data, or using another browser or device, resets it.

Questions about any of this?

If you have questions about this policy, please contact us.