Privacy Policy

This Privacy Policy describes how BulkGoblin ("we", "us", or "our") collects, uses, and discloses your personal information when you visit or use bulkgoblin.com (the "Site") or otherwise communicate with us (collectively, the "Services"). By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site and update the "Last updated" date.

The information we collect depends on how you interact with the Services.

Information you provide directly:

• Account information: email address, username, and password
• Communications: information you include when contacting us for support
• Waitlist: email address submitted to join the waitlist

User-uploaded data:

BulkGoblin allows you to upload CSV files exported from your TCGplayer account (such as MyPricing exports). These files contain your own inventory and pricing data. We store this data to provide the Services. We do not store buyer names, mailing addresses, or other buyer PII from TCGplayer orders.

Usage data collected automatically:

We may collect information about how you access and use the Site, including device information, browser information, IP address, and interaction data. We use session cookies solely for authentication — we do not use advertising or tracking cookies.

• Providing the Services: to create and maintain your account, operate the application, and respond to your requests
• Communications: to send account-related notifications and respond to support inquiries
• Security: to detect and prevent fraudulent or malicious activity
• Legal compliance: to comply with applicable legal obligations

We may disclose your personal information to third parties in the following circumstances:

• With infrastructure and hosting providers who support the operation of the Site
• With email delivery services when sending account or waitlist communications
• In connection with a business transaction such as a merger or acquisition
• To comply with applicable legal obligations, enforce our Terms of Service, or protect our rights and the rights of our users

We do not sell or share your personal information with business or marketing partners for advertising purposes.

The Services are not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are the parent or guardian of a child who has provided us with their personal information, please contact us and we will delete it.

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We take reasonable measures to protect your personal information, but no security system is impenetrable. We retain your personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations, and resolve disputes.

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or receive a copy of the data we hold about you. To exercise any of these rights, contact us using the details below.

If you visit our Site with the Global Privacy Control (GPC) opt-out preference signal enabled, we will treat this as a request to opt out of any data sharing for targeted advertising purposes (not currently applicable, as we do not engage in targeted advertising).

California (CCPA) and Virginia (VCDPA) residents may have additional rights. We do not sell personal information. To submit a data request, contact us at the email below.

If you have concerns about how we handle your personal information, please contact us first using the details below. If you are not satisfied with our response, you may escalate to your local data protection authority (for EU/UK users: the ICO for the UK, or the DPC for Ireland).

Questions about this Privacy Policy or requests regarding your personal information: