Privacy Policy

What we collect

Giraffe Trendz is operated by Giraffe Gym LLC, which is responsible for any personal data described here. Reading the site requires no account and collects no personal data. If you create an account, we store:

• Your email address — used to sign you in and to send password-reset emails. Nothing else is sent to it.
• A display name — shown to you in the header. It can be anything; it does not need to be your real name.
• Your password, as a salted hash — we never store the password itself and cannot recover it, only reset it.
• Your favorites — the singles, products, sets, Pokémon, and artists you star, so your Favorite list works.

Separately from accounts, we measure how the site is used: which pages are viewed and which buttons and links are clicked, with a random session identifier that exists only until you close the tab. This usage data is collected by us alone, is not linked to your account or identity, does not include your IP address or device fingerprint, and is never shared or sold. We honor your browser's Do Not Track setting.

If you subscribe to Pro, payment is handled entirely by Stripe, our payment processor — card numbers never reach our servers. We store only your subscription status and a Stripe customer reference so your account knows it is Pro. Stripe's handling of your payment data is covered by Stripe's privacy policy.

We do not collect names, addresses, or advertising identifiers, and we never see payment card details.

Cookies

One cookie exists: a session token that keeps you signed in for up to 30 days. It is HttpOnly (page scripts cannot read it) and strictly necessary — it is only set when you sign in, and signing out removes it. There are no tracking or third-party cookies.

The data-collection opt-out

At signup you can check a box declining optional data collection. The account itself still needs your email, display name, password hash, and favorites to function — those are not optional. The checkbox covers everything beyond that: while you are signed in to an opted-out account, the usage measurement described above is switched off entirely, and any future optional collection will exclude your account automatically.

Advertising

We have applied to show ads through Google AdSense, and the site carries the ownership markers that application requires (an ads.txt file and a verification meta tag). Those markers are static text: today no advertising script loads on any page, no ads display, and no data is shared with advertisers.

If the application is approved and we launch ads, this policy will be updated first to describe what the ad network collects, and visitors in regions that require it (including the EEA, UK, and Switzerland) will see a consent choice before any ad personalization happens.

Sharing

We do not sell, rent, or share your personal data with anyone. Password-reset emails are delivered through an email-sending provider, which processes your email address solely to deliver that message.

Your rights

You can ask for a copy of the data attached to your account, or ask for the account and everything in it to be deleted, by emailing grassisgreengg@gmail.com from the address on the account. Deletion removes your email, display name, password hash, and favorites.

Market data is not personal data

The prices and trends shown on Giraffe Trendz are aggregated market reporting about trading cards, drawn from public marketplace pricing. They contain no information about you or any other user.

Changes

If this policy changes, the date above changes with it. Material changes to what we collect will be announced on the site before they take effect.