Privacy Policy

This English translation is provided for convenience. The German version is authoritative.

This privacy policy explains how personal data is processed on the website tcg1.net and in the iOS app TCG Vault.

1. Controller

Marketingberatung Hannes Wirtz
Forsmannstraße 14b
22303 Hamburg, Germany
Email: mail@hanneswirtz.de

2. Website tcg1.net

The website is a static site with no accounts, forms, or tracking. It sets no cookies, embeds no analytics services, and loads no content from third-party servers (fonts are self-hosted).

Hosting (Cloudflare)

The website is delivered via Cloudflare Pages (Cloudflare Germany GmbH, Rosental 7, 80331 Munich, and Cloudflare, Inc., USA). When you visit the site, Cloudflare processes technically necessary connection data (in particular IP address, date and time of access, requested page, user agent) to deliver the site and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, performant operation). Cloudflare is certified under the EU-US Data Privacy Framework; EU standard contractual clauses are also in place.

3. The TCG Vault app

Account (Sign in with Apple)

Sign-in uses "Sign in with Apple". This processes a pseudonymous Apple identifier and — depending on your choice with Apple — your email address or an Apple relay address, in order to create your account and associate device sessions. The legal basis is Art. 6(1)(b) GDPR (performance of contract).

Collection and usage data

The content you create is stored with your account: portfolio positions (including purchase prices), wishlist, price alerts, and related events. This data is required for the app's core functionality (Art. 6(1)(b) GDPR) and is not shared with third parties.

Card scans

When you scan a card, the camera image is transmitted to the server for recognition and stored together with the recognition result. Scans without a rating are automatically deleted after 90 days. Scans you have rated in the app are retained to improve recognition quality (Art. 6(1)(f) GDPR). Please photograph cards only — the images should not show any people.

App server hosting

The app servers are operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany); data processing takes place in Germany.

No ads, no tracking

The app contains no advertising or tracking SDKs and does not build usage profiles.

4. Retention and account deletion

Your account data is stored for as long as your account exists. You can delete your account at any time in the app (Settings → Delete account). This irrevocably deletes the account, portfolio, wishlist, price alerts, events, and all scan photos associated with your account.

5. Your rights

Under the GDPR you have, in particular, the right to:

• access to the data processed about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17) and restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21).

To exercise these rights, simply contact mail@hanneswirtz.de. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Hamburg Commissioner for Data Protection and Freedom of Information.