Privacy policy

Last updated 9 November 2026

This policy explains what personal information Trivial TCG collects, why, and how we look after it. We handle personal information in line with the Australian Privacy Principles.

What we collect

• Your account: your name, email address and password (stored only in encrypted, hashed form).
• Your orders: what you bought, your delivery name and address, phone number and email, and order and shipping status.
• Payments: handled by Stripe. We never see or store your full card number. If you use Afterpay or Zip, those providers handle your details under their own privacy policies.
• Email lists: your email address if you sign up for our newsletter or ask to be told when an item is back in stock.
• Your wishlist: the items you save, so we can email you if they come back in stock or drop in price. Remove an item from your wishlist to stop those emails.
• Your device: your cart and sign-in are kept in your browser's local storage so they survive a page refresh. We don't use advertising or tracking cookies.

Why we use it

To process and ship your orders, provide your account and order history, apply per-customer purchase limits fairly, answer your questions, send the emails you asked for, and meet our legal and tax obligations.

Who we share it with

Only the services we need to run the shop: Stripe (payments), Supabase (our database and accounts), Netlify (website hosting), Resend (order and shipping emails) and the courier delivering your parcel. Some of these providers may store or process data outside Australia. We don't sell your personal information.

Marketing emails

We only send newsletters if you sign up, and every newsletter includes a way to unsubscribe. Back-in-stock alerts are sent once and then removed.

Keeping it safe and how long we keep it

Access to customer data is limited to our staff through password-protected accounts. We keep order records for as long as we need them for tax and consumer-law purposes (generally at least 5 years), and delete other information when it's no longer needed.

Your choices

You can ask us to show you, correct or delete the personal information we hold about you by emailing [email protected]. If you're unhappy with how we've handled your information, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).