Privacy Policy

1. Introduction and Scope

This Policy applies to personal information processed by TC Cache through the Services. It should be read together with the TC Cache Terms and Conditions and any policy or Official Rules that apply to a particular transaction or program.

This Policy does not control the independent privacy practices of third parties that operate their own websites, payment systems, delivery networks, social-media platforms, grading services, or other independent services. When TC Cache uses a third party to help us operate our business, the sections below explain the types of disclosures that may occur.

2. Categories of Information We Collect

The information TC Cache processes depends on how you use the Services. Categories may include:

• identifiers and contact information, such as name, email address, shipping address, and account identifiers;
• account and profile information, such as Collector nickname, program preferences, account status, and opt-in choices;
• commercial and transaction information, such as products ordered, quantities, prices, discounts, refunds, shipping method, order status, and transaction references;
• authentication and security information, such as password-derived records, verification-code records, sessions, trusted-device tokens, rate-limit records, and security events;
• program information, such as Build selections, Collector participation, points or ranking information, Fully Loaded eligibility, and promotional fulfillment records;
• technical information, such as IP address, browser or device characteristics, request timestamps, requested pages, network/security signals, and error information;
• communications, including support requests, order inquiries, complaints, fraud reports, and other correspondence; and
• preferences and browser-stored information, such as cart state, Build progress, interface preferences, and cookie/session state.

TC Cache does not intentionally request information that is unnecessary for the applicable service merely because it may be available to collect.

3. Account and Profile Information

When you create or maintain My Cache, TC Cache may process information including your:

In this Policy, My Cache means TC Cache’s customer account service. A Vault Password is the branded name for the password credential used to authenticate a My Cache account; “vault” terminology is part of the account’s visual theme and does not describe a separate financial or custodial account.

• first and last name;
• email address;
• Collector nickname, if selected;
• Collector of the Month participation preference;
• optional marketing preference;
• account creation and verification status;
• profile-change history where reasonably necessary for account integrity; and
• other account settings you choose to provide.

TC Cache may display limited profile or program information publicly only when a feature is designed to be public. For example, a Collector leaderboard may display a Collector nickname, ranking, points or score, and other limited information described in the applicable Official Rules. TC Cache does not intend to display a customer's private email address, street address, complete legal name, or purchase amount on a public leaderboard unless the customer separately authorizes the disclosure or the law requires it.

You should not place private or sensitive information in a Collector nickname or another field intended for public display.

4. Authentication and Security Information

TC Cache processes authentication and security information to create accounts, verify email addresses, sign customers in, recognize trusted browsers, recover access, prevent credential attacks, and protect customer and business information.

This may include:

• one-way password-derived hashes and salts;
• temporary verification-code hashes and related purpose, timing, and attempt records;
• session identifiers and server-side session records;
• trusted-browser or trusted-device tokens;
• password-change and account-recovery records;
• rate-limit and failed-authentication information; and
• fraud, abuse, or account-security events.

For certain login-rate-limiting functions, TC Cache may create a one-way attempt identifier based on an email address and network source rather than retaining the raw network address in the applicable D1 authentication record. Infrastructure providers may separately process network addresses as part of normal security, delivery, and logging functions.

5. Orders and Transaction Information

When you place or receive an order, TC Cache may process information reasonably necessary to complete and document the transaction, including:

• customer and recipient name;
• email address;
• shipping address;
• products, variants, quantities, and prices;
• discounts and promotional eligibility;
• shipping method and cost;
• tax calculations where applicable;
• payment and transaction references supplied by the payment processor;
• order, fulfillment, cancellation, refund, and return status;
• tracking information;
• support PINs or secure guest-order access records where applicable;
• legal document versions associated with the transaction; and
• order events reasonably necessary for support, fraud prevention, accounting, disputes, and recordkeeping.

Guest checkout does not prevent TC Cache from retaining transaction records associated with the order. Deleting cookies or browser storage does not delete an order record that TC Cache is legally required or reasonably permitted to retain.

6. Payment Information

Payments may be processed by independent payment providers such as PayPal. The payment provider may collect payment credentials directly and may provide TC Cache with limited information necessary to complete, document, refund, or investigate the transaction.

Depending on the provider and transaction, TC Cache may receive information such as:

• transaction or order reference numbers;
• payment status;
• payer or purchaser name and email;
• limited billing or shipping information;
• refund, dispute, or chargeback information; and
• fraud or risk information made available to merchants.

TC Cache does not intend to store complete payment-card numbers, card security codes, or your PayPal password. Payment providers process the credentials they collect under their own privacy policies, security systems, and legal obligations.

7. Shipping and Fulfillment Information

TC Cache may process and disclose fulfillment information as reasonably necessary to validate an address, calculate shipping, produce postage, tender merchandise to a carrier, provide tracking, investigate delivery problems, process returns, or make an insurance or carrier claim.

This information may include:

• recipient name and delivery address;
• shipping service and package characteristics;
• address-validation results or suggested corrections;
• postage and shipment identifiers;
• tracking numbers and carrier events;
• delivery status;
• returned-to-sender information; and
• damage, loss, or claim information.

TC Cache may disclose appropriate fulfillment information to postal, carrier, shipping-software, postage, and address-validation providers, including providers such as USPS and Pitney Bowes, where those services are used.

8. Build Program, Collector, and Promotion Information

Build Program

If you use a TC Cache Build Program, TC Cache may process the selections and configuration needed to assemble and fulfill the product, such as selected cards or products, quantity, packaging or artwork choice, optional additions, build stage, and fulfillment status.

Some in-progress Build information may remain only in first-party browser storage until the Build is submitted or another action causes information to be sent to TC Cache.

Collector of the Month

If you opt into Collector of the Month, TC Cache may process your Collector nickname, qualifying transactions, points or score, ranking, eligibility status, prize information, and records reasonably necessary to administer the program, prevent abuse, verify winners, and fulfill prizes. Public information is limited as described in the applicable Official Rules.

Fully Loaded and other promotions

For a Fully Loaded Eligible order or another promotion, TC Cache may maintain information about eligibility, the applicable promotional version or board, promotional gift outcome, fulfillment status, and related fraud-prevention or recordkeeping information. A roll or promotional activity may be recorded for internal or public use when TC Cache chooses to do so, but a public video is not guaranteed.

9. Information Collected Automatically

When you use tccache.com, TC Cache and providers that operate website-delivery or security infrastructure may automatically process technical information such as:

• IP address or other network information;
• browser and operating-system characteristics;
• device or screen characteristics;
• requested URL or page;
• request time and response information;
• referrer information where supplied by the browser;
• security, bot, abuse, or rate-limit signals; and
• technical errors and diagnostic information.

Cloudflare or another infrastructure provider may process this information to deliver the website, mitigate attacks, identify malicious traffic, route requests, cache content, and maintain service reliability.

TC Cache does not represent that every piece of technical information handled by an infrastructure provider is copied into TC Cache's own D1 database.

10. Cookies and Browser Storage

TC Cache may use first-party cookies, local storage, session storage, and similar browser technologies to provide requested functionality and protect the Services.

Functional and security cookies

Current or planned uses include:

• My Cache authenticated sessions;
• recognizing a trusted browser for a limited period when the customer chooses that option;
• temporary account-verification or password-recovery state;
• shopping-cart persistence;
• site or interface preferences;
• fraud prevention and security; and
• other functionality requested by the user.

Local and session storage

Browser storage may be used for information better suited to local persistence than a cookie, including cart data, an in-progress Build configuration, interface preferences, and similar functional state.

Cookies are not the legal record

Blocking essential or functional browser storage may prevent portions of My Cache, cart, trusted-device, or Build functionality from working correctly.

11. How We Use Information

TC Cache may use personal information for legitimate operational purposes including to:

• provide, operate, maintain, and improve the Services;
• create, verify, secure, and administer My Cache accounts;
• authenticate customers and maintain trusted-device or session functionality;
• process purchases and payments;
• validate addresses and fulfill orders;
• send order, shipping, refund, security, and account communications;
• provide customer support;
• assemble customer-directed Build products;
• administer Collector of the Month, Fully Loaded, and other programs;
• apply purchase limits and prevent program manipulation;
• detect, prevent, investigate, and respond to fraud, security threats, abuse, chargebacks, or policy violations;
• maintain tax, accounting, audit, legal-acceptance, and transaction records;
• investigate disputes and enforce applicable agreements;
• comply with legal obligations, recalls, court orders, or lawful requests; and
• send optional marketing where the customer has elected to receive it or where otherwise permitted by law.

TC Cache does not use a Vault Password or one-time verification code as an advertising profile.

12. Marketing and Transactional Communications

Transactional and security communications

TC Cache may send messages reasonably necessary to operate an account or transaction, such as:

• verification codes;
• account-security alerts;
• account creation or password-change notices;
• order confirmations;
• shipping and tracking notices;
• refund or cancellation notices;
• customer-support responses; and
• material legal or account notices where appropriate.

Automated account messages may come from confirmation@tccache.com. That mailbox may not be monitored for replies. TC Cache will never ask you to reply with a Vault Password, verification code, complete payment-card information, or third-party payment password.

Optional marketing

Marketing enrollment is separate and optional. If you choose to receive marketing, TC Cache may send product updates, restocks, promotions, offers, program news, or similar commercial communications.

You may unsubscribe using the method included in a marketing email or through another preference control TC Cache makes available. Opting out of marketing does not stop necessary account, security, transaction, or relationship messages.

13. How We Disclose Information

TC Cache may disclose personal information when reasonably necessary for the purposes described in this Policy. Categories of recipients may include:

• website, infrastructure, and security providers, such as Cloudflare;
• payment processors, such as PayPal;
• shipping, postage, carrier, and address-validation providers, such as USPS and Pitney Bowes;
• email-delivery providers, such as Resend;
• technology, fraud-prevention, storage, or support providers used to operate TC Cache;
• professional advisers, such as attorneys, accountants, insurers, or consultants where reasonably necessary;
• government, regulatory, court, or law-enforcement authorities when disclosure is legally required or reasonably necessary to protect rights, safety, or evidence; and
• a successor or transaction participant in connection with a merger, acquisition, financing, reorganization, asset sale, or transfer of the TC Cache business, subject to applicable law.

TC Cache seeks to limit disclosures to information reasonably related to the service, transaction, legal obligation, or business purpose involved.

14. Third-Party Services and Embedded Content

Some pages may link to or embed content operated by third parties. Examples may include PayPal checkout, carrier tracking, TikTok media, manufacturer resources, or other external content.

A third-party service may receive technical information directly from your browser when its content loads or when you interact with it. Depending on the service, this may include IP address, browser information, cookies or identifiers, the page containing the embed, and interaction information. The third party may process that information under its own privacy policy and settings.

For example, a TikTok embed may cause information to be communicated directly between your browser and TikTok even though the media appears inside a TC Cache page. TC Cache does not control TikTok's independent cookies, identifiers, retention, or account-level data practices.

Following a link away from TC Cache also places you on a service governed by that third party's policies. TC Cache does not adopt the independent privacy practices of an external site merely by linking to it.

15. Sale, Targeted Advertising, and Tracking Choices

No sale of personal information for money

As of the planned Version 1.0 launch, TC Cache does not sell customer personal information for money.

TC Cache also does not intend to disclose customer personal information to unrelated third parties for those third parties to independently market their products to TC Cache customers.

Cross-site behavioral advertising

As of the planned Version 1.0 launch, TC Cache does not intend to use Meta Pixel, TikTok Pixel, Google Ads remarketing, or similar third-party advertising technology to build cross-site behavioral advertising audiences from TC Cache visitors.

If TC Cache later introduces advertising pixels, cross-context behavioral advertising, targeted advertising, or another practice that creates additional notice, consent, or opt-out obligations, TC Cache will update this Policy and implement required choices before or when the practice is introduced.

Do Not Track and privacy preference signals

Because TC Cache does not currently engage in cross-site behavioral advertising through the TC Cache site, a browser Do Not Track signal does not cause a separate change to TC Cache's current advertising practices. Third-party embedded services may respond to browser signals according to their own policies and technologies.

If applicable law later requires TC Cache to recognize a browser-based privacy preference signal for a practice TC Cache conducts, TC Cache will implement the legally required response.

16. Data Retention

TC Cache retains personal information for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, security, accounting, fraud-prevention, operational, or dispute-resolution needs.

Different information has different retention needs. For example:

• temporary verification or authentication credentials may expire on short operational schedules;
• sessions and trusted-device authorizations are intended to expire or be revoked according to their security settings;
• an abandoned in-browser cart or Build may remain only on the customer's browser unless submitted;
• order, refund, tax, payment-reference, and fulfillment records may need to be retained for substantially longer periods;
• fraud, chargeback, abuse, security, and legal-acceptance records may be retained when reasonably necessary to protect the Services or document legal events; and
• records may be retained when required by law, court order, tax rules, accounting obligations, product-safety obligations, or another legitimate requirement.

Closing My Cache does not require TC Cache to immediately delete every record associated with the customer when retention is required or permitted for one of these reasons.

17. Privacy Choices and Requests

TC Cache provides practical privacy choices appropriate to the Services and will honor additional rights when applicable law requires them.

Depending on the request and applicable law, you may ask TC Cache to:

• correct inaccurate My Cache information;
• close a My Cache account;
• change optional marketing preferences;
• change Collector participation where permitted by the applicable rules;
• provide information concerning personal information associated with you;
• delete qualifying personal information;
• provide a portable copy of qualifying personal information; or
• honor an applicable opt-out or appeal right.

TC Cache may need to verify the identity or authority of the person making a request before disclosing, correcting, or deleting information. Verification helps prevent an attacker from using a privacy request to obtain or erase another person's information.

Some information may be excluded from a request where permitted by law, including records TC Cache must retain for completed transactions, taxes, accounting, fraud prevention, security, legal claims, product safety, or another lawful purpose.

Privacy requests may be sent to support@tccache.com unless TC Cache publishes a dedicated privacy-request method.

18. Children and Minors

My Cache accounts are intended to be owned and controlled by adults who are at least 18 years old and have reached the age of majority where they live. TC Cache does not intentionally design My Cache account registration for children under 13 and does not knowingly permit a child under 13 to create a My Cache account.

TC Cache operates a general-audience collectibles website. If TC Cache obtains actual knowledge that it collected personal information online from a child under 13 in circumstances subject to the Children's Online Privacy Protection Act or another applicable child-privacy law, TC Cache will take appropriate action, which may include deleting information or obtaining legally required parental authorization.

An eligible parent or guardian may purchase merchandise for a minor using the adult's own account or transaction information, subject to the Terms and Conditions.

A parent or guardian who believes a child under 13 provided personal information to TC Cache should contact support@tccache.com.

19. Data Security and Security Incidents

TC Cache uses reasonable technical and organizational measures intended to protect customer information in light of the nature of the Services. Measures may include:

• HTTPS encryption in transit;
• one-way password processing;
• temporary purpose-specific verification codes;
• secure, HttpOnly account-session cookies where appropriate;
• server-side session and trusted-device validation;
• rate limiting and bot protection;
• access controls;
• session and trusted-device revocation;
• fraud and abuse monitoring; and
• security infrastructure provided by services such as Cloudflare.

No website, database, transmission method, payment system, or security control can guarantee absolute security. Customers should protect their email account, Vault Password, devices, and one-time verification codes.

If TC Cache becomes aware of a data-security incident requiring notice under applicable law, TC Cache will provide legally required notifications to affected individuals or authorities as applicable.

20. State-Specific and California Disclosures

Privacy laws vary by jurisdiction and some comprehensive state privacy laws apply only when a business meets statutory thresholds. TC Cache will honor non-waivable privacy rights that apply to Trading Card Cache LLC and the applicable consumer.

New Hampshire

New Hampshire law provides qualifying consumers with rights concerning access, correction, deletion, portability, and certain opt-outs when the state's comprehensive privacy statute applies to a controller. TC Cache will provide applicable rights and request procedures when required by that law.

California online privacy disclosure

TC Cache operates a commercial website that may collect personally identifiable information from California residents. This Policy identifies the categories of information TC Cache collects, the categories of third parties with whom information may be disclosed, the process for requesting review or correction, how material changes are communicated, the Policy's effective date, and TC Cache's current treatment of browser Do Not Track signals and cross-site collection.

As described in Section 15, TC Cache does not currently use the TC Cache site for cross-site behavioral advertising. However, other parties may collect technical information when third-party content, such as an embedded social-media player, loads through your browser. Those parties determine their own cross-site collection and Do Not Track practices.

California consumer privacy statutes

Certain California privacy rights apply only when the statutory definition and thresholds for a covered business are met. If TC Cache becomes subject to those requirements, or another California privacy provision applies independently, TC Cache will provide the legally required access, correction, deletion, opt-out, limitation, appeal, or other rights and notices.

Third-party direct marketing

As of Version 1.0, TC Cache does not intend to disclose customer personal information to unrelated third parties for those third parties' own direct-marketing purposes.

Nothing in this section is intended to limit a privacy right that applicable state or federal law makes non-waivable.

21. Changes to This Policy

TC Cache may update this Policy as its Services, technologies, providers, security practices, business operations, or legal obligations change.

Each published version will identify its version number, effective date, and last-updated date. TC Cache intends to retain historical legal versions so that prior disclosures can be reconstructed when reasonably necessary.

Material changes may be communicated through tccache.com, My Cache, email, or another reasonable method depending on the nature of the change and applicable law.

If a future practice requires affirmative consent rather than notice or acknowledgment, TC Cache will obtain that consent where legally required rather than treating continued browsing as consent to a practice that requires a different form of authorization.

22. Contact

The operator responsible for this Policy is:

Before sending sensitive information to TC Cache, consider whether it is actually necessary for the request. Do not email your Vault Password, one-time verification code, complete payment-card number, card security code, or third-party payment password.