PRIVACY
POLICY.

Effective date: July 15, 2026 · Last updated: October 25, 2026 Policy version 2026-10-25

1. Who we are

This website (the "Site") is operated by AtlantaTCG LLC ("AtlantaTCG", "we", "us", "our"), a trading card shop located at 626 Holcomb Bridge Rd, Unit 600, Roswell, GA 30076, USA. This policy describes what information the Site collects, how we use it, and the choices you have. For any privacy question or request, contact us at contact@atlantatcg.com or (470) 550-2481.

2. Information we collect

The Site has no user accounts of its own. We collect personal information in only these limited ways:

  • Contact form. If you send us a message, we receive the name, email address, and message text you choose to provide. We use it solely to respond to you. The suggestion box on the contact page works the same way, except name and email are optional; leave them blank and your suggestion reaches us anonymously.
  • Order information. When you buy through the Site, your order details (name, contact email, shipping address (for shipped orders), and the items purchased) are entered on the Site and passed directly to Square, our payment processor, which holds them on Square's systems. We access them there to fulfill your order, process refunds, and keep tax records. The Site passes them through to create your order and never stores them: no database, no logs. Your order confirmation email contains a private link to view your order status. The link works without any account or password, so treat it like a receipt; anyone you share it with can see the order.
  • Rewards program. If you choose to join or sign in to our TCGPoints rewards program at checkout, you enter your mobile number, and we send a one-time code to your email address to confirm it is you. The Site passes your mobile number (and, for a new member, the email you entered at checkout) directly to Square, which runs the program and holds your rewards account, points balance and contact details on Square’s systems. The Site stores none of it: no database, no logs; your mobile number is not written to your order, and the code itself is never stored anywhere. Square sends program text messages to members; reply END to any message to stop.
  • Sell to Us list. If you send us a card list ahead of a trade-in visit, we receive the name, email address, and phone number you provide plus the parsed card list. The Site regenerates the list as a clean file and emails it to our shop inbox so your quote is ready when you arrive; a copy of the list with your first name also reaches our staff on Discord (see section 4). We never store your original upload.
  • Store credit. If you get store credit from a trade-in, our staff record your name, phone number and email in Square’s customer directory, which holds them on Square’s systems. The Site’s own store credit record keeps only Square’s customer number for you, your balance, and a history of each change (when, how much, which staff member made it, and the order number for shop and online orders). It never stores your name, phone number or email. When staff use your credit at our register, the Site reads that sale from Square to take the credit off your balance, and it keeps your current balance on your Square customer record so staff can see it. When you check your balance or use credit on the Site, the phone number and email you type are checked against Square and not stored; wrong attempts are kept only as scrambled codes so we can stop someone guessing.
  • Abuse prevention. When you submit the contact form or a Sell to Us list, your IP address is checked momentarily to limit spam and automated abuse. We do not store it in any database of ours or use it for any other purpose.
  • Hosting logs. Like nearly every website, the Site is served by a hosting provider (Vercel Inc.), whose infrastructure automatically processes standard technical data, such as IP address, browser type, and pages requested, to deliver the Site and protect it from attacks. See Vercel's privacy policy.

Simply browsing the Site sends us nothing that identifies you personally. Beyond the routine hosting logs above, the Site collects anonymous, aggregate usage statistics through Google Analytics (see Sections 4 and 5), and, like any website, your browser fetches fonts and images from the providers listed below, which see standard request data such as your IP address.

3. How we use information

  • To reply to messages you send us.
  • To keep track of your store credit and let you use it.
  • To keep the Site secure and prevent spam or abuse.
  • To understand, in aggregate, how visitors use the Site so we can improve it.
  • To comply with the law, if we are ever legally required to.

We do not use your information for advertising or profiling, and we do not sell, rent, or share personal information with anyone for marketing purposes.

4. Who we share information with

We share personal information only with the service providers needed to run the Site, and only for the purposes above:

  • Resend (Resend, Inc.): delivers contact-form messages to our inbox, and sends your order confirmation emails to you. Resend's privacy policy.
  • Discord (Discord Inc.): when you submit a card list through Sell to Us, a copy of the list and your first name are posted to a private, staff-only channel so we can prepare your quote. Your email address and phone number are not sent to Discord. We use Discord only to notify our staff; nothing about you is posted anywhere public. Discord's privacy policy.
  • Square (Block, Inc.): processes payments when you check out, and runs our TCGPoints rewards program. If you join or sign in to the program at checkout, your mobile number, the email your code was sent to, and your order total are passed to Square to look up or create your rewards account, add your points, and apply any reward you redeem; Square holds the account and sends program text messages. Square also holds the customer record our staff create when you get store credit (your name, phone number and email) and your current store credit balance. If you only place an order, none of this is sent. Your card details are entered in Square's own secure form on our checkout page and go directly to Square; we never receive, see, or store card numbers. Your order details, contact email, billing address, and (for shipped orders) the delivery address are passed to Square when your order is created, and we view them in our Square dashboard to fulfill your order; the Site never stores them. Square's privacy policy.
  • Address lookup and verification services: if you choose shipping at checkout, the ZIP code you type is sent to Zippopotam (a free postal-data service) to fill in your city and state; the street address you type is sent to the US Census Bureau's public geocoder, which suggests completed addresses and tells us which county and city the address sits in so we can charge the correct Georgia sales-tax rate; and when you continue to payment the address is sent once to the United States Postal Service's address API to check that it is deliverable and to standardize it. All three receive only what you type into the address fields (never your name, email, or order contents), and the Site stores none of it. USPS privacy policy.
  • Neon: hosts the Site’s store credit record (Square customer numbers, balances and history; no names, phone numbers or emails). Neon's privacy policy.
  • Vercel (Vercel Inc.): hosts the Site. Vercel's privacy policy.
  • Google Fonts (Google LLC): serves the Site's typefaces. Your browser requests the font files directly from Google, which sees your IP address and browser details, as with any web request. No other information is sent.
  • Google Analytics (Google LLC): measures how the Site is used, in aggregate: which pages are visited, how visitors arrive, and what devices and browsers they use. It collects device and browser information and your on-site activity; per Google, Google Analytics does not log or store IP addresses. We use it only to understand and improve the Site; we have not enabled Google's advertising or ad-personalization features, and we never see data that identifies you personally. See how Google uses information from sites that use its services, or opt out entirely with the Google Analytics opt-out browser add-on.
  • OpenStreetMap (OpenStreetMap Foundation): the map on the order confirmation page loads its tiles from OpenStreetMap. Your browser requests the map images directly, which reveals your IP address to the tile server. For pickup orders the map shows our store's location. For shipped orders it shows an approximate, city-level pin near your delivery address, never your exact street address. Either way, your address itself is never sent to OpenStreetMap; the map only requests the background images for the area shown.

We may also disclose information if required by law, court order, or to protect our legal rights. We do not share information with third parties for their own marketing.

5. Cookies, local storage & "Do Not Track"

  • Cookies: the only cookies the Site sets are Google Analytics measurement cookies: _ga and _ga_*, first-party cookies that distinguish returning browsers and keep session state, lasting up to two years (browsers may shorten this). They are used solely for the aggregate usage measurement described in Section 4. We use no advertising cookies, and you can block or delete these cookies in your browser (the Site works fine without them) or use the Google Analytics opt-out add-on.
  • Anonymous page counts: we also use Vercel Web Analytics to count page views in aggregate (for example, how many people looked at the events page this week). It sets no cookies, uses no fingerprinting, and never identifies you or follows you to other websites; we only ever see anonymous totals. How Vercel Web Analytics handles privacy.
  • Local storage: your browser's local storage may hold a small list of products you've saved while browsing, plus your cart, and the contact email you entered at checkout so you don't have to retype it on your next order. All of this stays on your device; your cart's contents (which items, how many) are sent to us only when you start checkout, and your email only when you place an order. Your rewards mobile number and sign-in are kept in the page's memory only and are gone when you leave the checkout page.
  • Do Not Track: the Site does not follow visitors across other websites and does not change its behavior based on a "Do Not Track" signal. If you prefer not to be counted in our anonymous usage statistics, block the analytics cookies or use the opt-out add-on linked above.

6. Children's privacy

Trading cards are for everyone, but this Site is a general-audience website and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information through our contact form, email us at contact@atlantatcg.com and we will delete it promptly.

7. Your privacy rights

Depending on where you live, you may have legal rights to access, correct, or delete personal information a business holds about you. Because we keep so little, we make this simple: email us and we will honor any reasonable request to see or delete what we have about you (which, in almost every case, is just your own emails to us), regardless of which state you live in. We will never treat you differently for exercising a privacy right.

8. Data retention

Contact-form messages arrive in our business email inbox and are kept like ordinary correspondence: as long as needed to handle your inquiry and for routine business record-keeping, then deleted in the ordinary course. Order records are held by Square, not on the Site, and retained under Square's own policies (see Sections 2 and 4). Store credit history is kept for as long as you have a balance, and afterwards for as long as we need it for business and tax records. You can request earlier deletion of what we hold at any time (see Section 7).

9. Security

The Site is served exclusively over HTTPS (encrypted connections), collects the minimum possible information, and keeps no database of customer names or contact details. Its only database is the store credit record, which holds Square customer numbers, balances and history, never names, phone numbers or emails. No website can promise perfect security, but the most effective protection is not holding data in the first place, which is our approach.

10. Links to other sites

The Site links out to third parties such as Google Maps, OpenStreetMap and Instagram. Those sites have their own privacy practices, which we don't control; this policy applies only to our Site.

11. Changes to this policy

If our practices change (for example, if we add new features that collect information), we will update this page before the change takes effect and revise the "Last updated" date at the top. Material changes will be noted prominently on this page.

12. Contact us

AtlantaTCG LLC · 626 Holcomb Bridge Rd, Unit 600, Roswell, GA 30076
contact@atlantatcg.com · (470) 550-2481

This page is provided for general information and is not legal advice.