Privacy Policy

Only what the product actually needs to work:

• Account: your email address, username, display name and avatar. If you sign in with Google, we receive your email, name and profile picture from Google, never your Google password.
• Marketplace activity: listings, bids, orders, saved cards, follows, likes and messages you send.
• Shipping: the postal address you enter at checkout, passed to the seller so they can ship your card.
• Payments: handled by our payment processor. Card numbers go to them directly and never touch our servers; we store only the last four digits and the result.
• Technical: IP address, browser and device type, and basic error logs, used to keep the service up and to detect fraud.

• We do not sell your personal information.
• We do not share it with advertisers or data brokers.
• We never see or store your Google password, and we never store full card numbers.

If you choose Google sign-in, we request only your basic profile and email address. We use them to create your account and to show your name and picture on your profile. We do not request access to your Gmail, Drive, Contacts or Calendar, and we could not read them if we tried. You can disconnect Rackzy at any time from your Google Account permissions page.

Only the companies that make the service run, and only the part each one needs:

• Our hosting and database providers, which store your account and marketplace data.
• Our payment processor, which handles payments and payouts.
• Sellers you buy from, who receive your name and shipping address so they can post your order.

We may also disclose information where the law requires it, or where it is necessary to investigate fraud or protect someone from harm.

Some things are public because a marketplace does not work otherwise: your username, avatar, listings, ratings, and anything you type into a live stream chat. Treat stream chat as public. Your email address and shipping address are never shown publicly.

Traffic is encrypted in transit. Access to the database is restricted per user at the database level, not only in the app. You can add two-factor authentication from your security settings, and we recommend it for anyone holding a balance.

• You can view and edit your profile information at any time from your account settings.
• You can ask for a copy of your data, or ask us to delete your account, by emailing us.
• Some records, such as completed orders and payment history, are kept after account deletion where tax and anti-fraud law requires it.
• You can turn off notification emails from your settings without closing your account.

Rackzy is not for people under 18. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.

Rackzy operates in Canada and the United States, and your information is stored and processed in those countries. If you use Rackzy from elsewhere, you are sending your information there.

If we change this policy in a way that materially affects you, we will say so in the product rather than quietly editing this page. Questions, data requests and deletion requests go to support@rackzy.gg.