VALUETRAINERPRO PRIVACY POLICY

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

• Account Information: When you create an account, we collect your username, email address, display name, and password (stored in encrypted form using scrypt hashing). If you sign in with Google OAuth, we collect your Google profile information including email, name, and profile picture.
• Portfolio Data: Information about your Pokémon card collection, including card names, set names, card numbers, quantities, conditions, variants, acquisition dates, and acquisition prices.
• Trade Information: Details about trade proposals you create or participate in, including card offerings, trade messages, and trade history.
• Friend Connections: Information about friend requests sent and received, and your friend list.
• Wishlist Data: Cards you've marked as wanted for your collection.
• Communications: Messages you send to us through support requests or feedback forms.

1.2 Information Collected Automatically

• Usage Data: Information about how you interact with our Service, including pages viewed, features used, search queries, and time spent on pages.
• Device Information: Device type, operating system, browser type and version, IP address, and unique device identifiers.
• Session Data: Login times, session duration, and authentication tokens stored in httpOnly cookies.
• Performance Data: Error logs and crash reports to help us improve our Service.

1.3 Information from Third-Party Sources

• Card Pricing Data: We retrieve real-time market pricing from TCGPlayer API and TCGCSV for card valuation purposes.
• Card Images: Card images are sourced from pokemontcg.io and GitHub repositories.

2. HOW WE USE YOUR INFORMATION

We use the collected information for the following purposes:

2.1 Service Delivery

• Create and manage your account
• Provide portfolio management and card tracking features
• Display real-time market pricing and price trend analysis
• Facilitate trade proposals and trade fairness calculations
• Enable social features including friend connections
• Generate portfolio analytics and historical value tracking

2.2 Service Improvement

• Analyze usage patterns to improve user experience
• Develop new features based on user behavior
• Optimize platform performance and fix technical issues
• Conduct research and analytics

2.3 Communication

• Send transactional emails (trade notifications, password resets, account updates)
• Provide customer support and respond to inquiries
• Send important service announcements and policy changes

2.4 Security and Legal Compliance

• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to lawful requests
• Protect our rights, privacy, safety, and property

3. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We only share your information in the following limited circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Database Hosting: Neon (PostgreSQL database services)
• Email Services: Resend (transactional email delivery)
• Cloud Infrastructure: Replit (application hosting and deployment)
• Image Storage: Google Cloud Storage (card image hosting and caching)
• Card Data Providers: TCGPlayer (pricing data), TCGCSV (supplemental pricing data)
• Payment Processing: PayPal (donation processing)

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

3.2 With Other Users

• Your display name may be visible to friends you've connected with
• Trade proposals and trade history are shared with trade participants
• Portfolio information is only visible to you unless you choose to share it

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Requests from government authorities
• Protection of our legal rights or those of others
• Investigation of fraud, security issues, or policy violations

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change.

4. COOKIES AND TRACKING TECHNOLOGIES

4.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our Service. We use cookies and similar tracking technologies to track activity and maintain your session.

4.2 Types of Cookies We Use

Type	Purpose	Duration
Essential Cookies	Required for authentication, security, and core functionality (httpOnly, secure)	Session/24 hours
Performance Cookies	Analyze how users interact with our Service to improve performance	Persistent
Session Cookies	Maintain your login state and preferences during a browser session	Session

4.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies will prevent you from logging in and using our Service. To learn more about cookies, visit www.allaboutcookies.org.

5. DATA SECURITY

We take the security of your personal information seriously and implement appropriate technical and organizational measures:

• Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS protocols
• Password Protection: Passwords are hashed using industry-standard scrypt key derivation function with random salts
• Timing-Safe Comparisons: Password verification uses timing-safe comparison to prevent timing attacks
• Access Controls: Strict access controls limit who can access personal information
• Secure Hosting: Data is stored in secure, professionally managed data centers (Neon, Replit)
• Session Security: Sessions use httpOnly cookies to prevent XSS attacks

Important: While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. DATA RETENTION

We retain your personal information for as long as your account is active and as necessary to provide our Service:

• Account Data: Retained while your account is active
• Portfolio Data: Retained while your account is active
• Trade History: Retained for record-keeping purposes while your account is active
• Analytics Data: Aggregated analytics data may be retained in anonymized form

To delete your account and associated data, please contact us at support@valuetrainerpro.com. We will process account deletion requests within 30 days.

7. YOUR RIGHTS AND CHOICES

You have the following rights regarding your personal information:

7.1 Access and Review

• Access your personal information through your account dashboard
• View your portfolio, trade history, and friend connections at any time
• Request information about data we hold about you by contacting us

7.2 Correction and Update

• Update your account information at any time through account settings
• Correct inaccurate or incomplete information
• Edit or remove cards from your portfolio

7.3 Deletion

• Delete individual cards from your portfolio through the portfolio interface
• Clear your entire collection using the collection management tools
• Request full account deletion by contacting us at support@valuetrainerpro.com
• Right to be forgotten (where applicable under GDPR)

7.4 Communication Preferences

• You can opt out of marketing emails via unsubscribe links (if we send them)
• Note: You cannot opt out of essential service communications (password resets, trade notifications)

7.5 Data Portability

To request a copy of your data in a portable format, please contact us at support@valuetrainerpro.com. We will provide your data within 30 days.

7.6 Cookie Management

• Control cookies through browser settings
• Note: Disabling essential cookies will prevent you from using our Service

8. CHILDREN'S PRIVACY

Our Service is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13.

• By using our Service, you represent that you are at least 13 years old
• If we discover we have collected information from a child under 13, we will delete it immediately
• Parents who believe we may have collected information from a child under 13 should contact us immediately

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@valuetrainerpro.com.

9. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your personal information internationally, we work with service providers (Neon, Replit, Google Cloud) that implement appropriate safeguards to protect your data in accordance with applicable data protection laws.

10. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You have the right to request information about the personal information we have collected about you in the past 12 months.

10.2 Right to Delete

You have the right to request deletion of your personal information. Contact us at support@valuetrainerpro.com to request account deletion.

10.3 Right to Opt-Out of Sale

We do not sell your personal information. We have not sold personal information in the past 12 months and have no plans to do so.

10.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

To exercise your California privacy rights, contact us at support@valuetrainerpro.com with "California Privacy Rights" in the subject line.

11. EUROPEAN PRIVACY RIGHTS (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request access to your personal data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request restriction of processing under certain circumstances
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing (GDPR)

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Service (account management, portfolio tracking, trade facilitation)
• Legitimate Interests: Processing necessary for our legitimate business interests (service improvement, fraud prevention)
• Legal Obligation: Processing required to comply with legal requirements

To exercise your GDPR rights, contact us at support@valuetrainerpro.com.

12. THIRD-PARTY LINKS AND AFFILIATE PROGRAMS

Our Service may contain links to third-party websites, services, or affiliate programs.

• Amazon Associates: We participate in the Amazon Associates affiliate program. Clicking affiliate links may result in us earning a commission, but does not affect your privacy or the price you pay.
• TCGPlayer: We link to TCGPlayer for card purchases. TCGPlayer has its own privacy policy.
• External Links: We are not responsible for the privacy practices of third-party websites

We encourage you to read the privacy policies of any third-party sites you visit.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

• We will post the updated policy on this page with a new "Last Updated" date
• Material changes will be communicated via email or prominent notice on our Service
• Continued use of the Service after changes become effective constitutes acceptance of the updated policy
• We encourage you to review this Privacy Policy periodically

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@valuetrainerpro.com
Subject Line: "Privacy Policy Inquiry"

We will respond to your inquiry within 30 days. For urgent privacy matters, please indicate "Urgent" in your subject line.

Data Requests

For data access, portability, or deletion requests:

• Account Deletion: Email us with "Delete My Account" in the subject line
• Data Export: Email us with "Data Export Request" in the subject line
• GDPR/CCPA Requests: Email us with "GDPR Request" or "CCPA Request" in the subject line

15. CONSENT

By using our Service, you consent to:

• The collection, use, and sharing of your information as described in this Privacy Policy
• The transfer of your information to the United States and other countries where our service providers operate
• The use of cookies and similar tracking technologies as described in this policy

If you do not agree with this Privacy Policy, please do not use our Service.