Privacy Policy

The Hobby Dojo Ltd., an Ontario company based in Ottawa, trading as The Hobby Dojo. We are the organisation responsible for your personal information under this policy. Our privacy contact is thehobbydojotcg@gmail.com.

• Account. If you sign in with Google, we receive the name, email address and profile picture that Google shares, and we store them with your account. We never see your Google password. If we offer sign-in by email and password, we store the email address and a hash of the password, never the password itself.
• Cart. What you have added to your cart. As a guest this stays in your own browser; once you sign in it is saved to your account so it follows you between devices.
• Orders. When you buy, we keep what you ordered, the price you paid, your email address, and, for a mailed order, the name, shipping address and phone number you give us for the carrier. You do not need an account to order; a guest order is kept under the email address you give.
• Payment.You pay on Square's page. Square tells us whether the payment succeeded, the amount and its fee. We never see or store your card number.
• Packing photos. Before a card is mailed we photograph it, front and back, and keep the photos with the order as a record of its condition when it left us. They are photos of the card, not of you.
• Reviews. If you review an order, we keep the stars you gave, what you wrote and the name you chose to show, linked to that order. We read every review before it goes on the site; once we publish it, the review and that name are public on our reviews page and home page. Your email address and order are never shown.
• Newsletter and email. If you join the newsletter on the home page, we store your email address and the date you joined, and nothing else, and we send you one welcome email. The welcome email and every issue carry a one-click unsubscribe link that works without signing in. We have not sent an issue yet; when we do, we will first ask you to confirm. Any email you send us sits in our mailbox until you ask us to delete it.
• Technical.Our hosting provider keeps standard server logs (IP address, browser, pages requested) for a short period to keep the site running and secure. Product images load directly from TCGplayer's image servers and from our own storage, so those servers see your IP address and browser the way any image host does. We do not run advertising trackers or third-party analytics.

• To let you sign in, keep a cart, place orders and receive them.
• To email you a receipt when you pay and a dispatch note when your order ships, with a link to review the order if you want to.
• To show the reviews customers have chosen to leave.
• If you joined it, to send you the newsletter, and only until you unsubscribe.
• To answer your questions and resolve problems with an order, including a dispute about a card's condition.
• To keep the site secure and meet our legal and tax obligations.

We do not use your information for profiling or automated decisions, and we do not sell it. We do not use artificial-intelligence tools on your information, and no part of this site is an AI chatbot. If either of those ever changes, this policy will say so before it does.

Only the services that run the shop, and only what each one needs to do its job:

• Supabase — our database, sign-in service and image storage. Holds your account, cart, orders and reviews.
• Vercel — hosts the website and keeps its server logs.
• Google — sign-in. Google tells us who you are; we tell Google nothing about your orders.
• Square— takes your payment on its own page and processes refunds. Square's own privacy policy covers what it collects there.
• Resend — delivers our order emails and the newsletter welcome email to your address.
• Canada Post — receives your name, address and phone number on the label of a mailed order.
• TCGplayer — hosts the catalogue images your browser loads.

These providers may store data outside Canada, including in the United States, where it is subject to local law. We also disclose information when the law requires it. We do not share your information with anyone else, and nobody advertises to you through us.

We use the cookies needed to keep you signed in and to remember your cart. There are no advertising or tracking cookies. Blocking cookies will sign you out and empty a guest cart.

Your account and cart for as long as you keep the account. Order records, including packing photos, for seven years, to cover the six that tax law requires. A review for as long as it is useful on the site, or until you ask us to remove it. Emails you send us until the matter is closed, or until you ask. Server logs for a matter of days.

• You can delete your account yourself from your account page. Your profile and cart go at once; records of orders you placed are kept for the period above but are no longer linked to an account.
• You can see and correct the information we hold about you by emailing us.
• To change or remove a review you left, email us with the order number and we will.
• The welcome email and every newsletter issue carry a one-click unsubscribe link. Or write to us, and we will delete your address.
• If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner of Canada.

The shop is for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will remove it.

When this policy changes we update the date at the top. A material change will also be announced on the site before it takes effect.