Privacy Policy

Draft notice. This policy is a working draft adapted from the original 2017 TradingOutPost privacy policy and has not yet been reviewed by a lawyer. Please consult qualified legal counsel before treating it as final.

Welcome to TradingOutPost (“we”, “us”, “TradingOutPost”). By accessing the TradingOutPost website at tradingoutpost.co, whether through a mobile device or a computer (the “Service”), you agree to be bound by this privacy policy (the “Policy”), whether or not you create a TradingOutPost account. We have written this Policy to explain our privacy practices in plain language. By using the Service you confirm that you have read, understood, and agreed to this Policy and our Terms of Service, and that you give TradingOutPost permission to use and store your information as described below.

Information we collect

Personal information. When you sign up we collect your email address, a username you choose, and the password you set (which is stored only as a one-way hash — we never see or store your plain-text password). To match you with nearby traders we also collect the city, country and approximate coordinates you provide on your profile, plus the matching radius you choose.

Activity data. When you use the Service we collect the cards you add to your binders, the trade offers you send and receive, the messages you exchange with other users, and the ratings you give and receive after a trade.

Anonymous and aggregated data. We collect aggregated, non-identifying data about how the Service is used to help us improve it (for example, how many trades close per week, or which cards are most-wanted in a region).

Cookies and similar technologies. We use a small number of strictly-necessary cookies to keep you signed in and to protect the Service against abuse. We do not use third-party advertising cookies and we do not sell your data to advertisers.

IP address. Our servers automatically log the IP address you connect from, along with the time of your visit and the pages you visited. We use this information to monitor security, prevent abuse, and debug problems.

How we use your information

We use your information to:

• provide, operate and improve the Service,
• identify and authenticate you, and prevent fraud or abuse,
• match you with other TradingOutPost users based on your location, your binders, and your matching preferences,
• contact you with administrative notices that are relevant to your use of the Service (for example, password resets and email verification),
• analyse usage patterns to fix bugs and design new features,
• enforce our Terms of Service.

We do not run advertising on the Service and we do not sell your personal information to third parties.

Communications

You can opt out of non-essential communications from us at any time by following the unsubscribe link in any email we send, or by contacting support@tradingoutpost.co. We will still send you essential transactional emails (for example, password resets and trade-related notifications) for as long as you have an account.

How long we keep your information

We keep your account data for as long as your account is open. If you ask us to delete your account, we will delete your personal information from our active databases within 30 days, except where we are required by law to retain it for longer (for example, audit logs related to fraud investigations).

You can request deletion or correction of your account information at any time by emailing support@tradingoutpost.co.

How we keep your information secure

Your TradingOutPost account is password-protected. Passwords are stored as one-way hashes, and our database connections are encrypted in transit. We use modern web framework defaults to protect against common attacks (CSRF, XSS, SQL injection). No system is 100% secure: while we make every reasonable effort to protect your data, you use the Service at your own risk and we cannot guarantee absolute security.

If you share a device with someone else, please log out of TradingOutPost when you finish so that nobody else can access your account.

Who we share information with

We share information only with service providers that we need to operate the Service (for example, our cloud hosting provider, our transactional email provider, and the geocoding API we use to convert your city into coordinates). These providers are bound by contract to use your information only on our behalf and to keep it confidential.

We may disclose information if we are required to do so by law, by a court order, or by a binding regulatory request, or if we have a good-faith belief that disclosure is necessary to protect the rights, property or safety of TradingOutPost, our users, or the public.

If TradingOutPost is acquired by or merged with another company, your information may be transferred to the new owner. We will use reasonable efforts to ensure the new owner honours this Policy.

Editing your information

You can view and update your username, email address, location and matching radius at any time from the Profile page in your account.

Changes to this policy

We review this Policy from time to time and may update it as the Service evolves. If we make a material change, we will notify you by email at the address associated with your account before the change takes effect.

Contact us

If you have questions about this Policy or about our privacy practices, please email us at support@tradingoutpost.co.