Your data: what stays on your device and what we keep
The short answer, in plain words. The Privacy Policy is the full version, and its storage table lists every item we keep in your browser.
Your order files stay with you. The file you drop in is read by your browser, and the labels, slips and pull sheet are made there too. Your buyers' names, addresses and the cards they ordered are not sent to our server. The one exception is an optional paid feature you would turn on yourself that needs a single order's address; the Privacy Policy names it and says exactly what it sends.
What stays on your device
Saved in this browser only. We can't see it, and clearing this site's data in your browser settings erases all of it.
- The order file you're working on, and your last 10 order files for 30 days (
tcgss_recent_batches_v1), so you can reopen or reprint a batch. These include buyer addresses, so they never leave the browser. - Your "shipped" checkmarks and the tracking numbers you paste, and which labels of a batch you already printed.
- Your settings: return address, label design (and your logo, if you add one), label format, printer, packing slips on or off, and the stamp and batch-check numbers you type.
- Your free-plan label count for the month when you're not signed in.
- An offline copy of our own pages and code, so the label tool still opens on a bad connection.
A few items are kept only if you press Accept in the cookie bar: the broad source of your visit, for example "reddit" (tcgss_src, tcgss_ev_*), where your first visit came from (tcgss_first_touch), and a creator's partner code if you arrived by their link (tcgss_pending_affiliate). Press Reject, or send Global Privacy Control, and they're never written. Every tool works the same either way.
What our server keeps
| What | When | How long |
|---|---|---|
| Your account: email, plan, subscription status, Stripe customer ID, referral code and a monthly label count (never the orders behind it). Your password is held by our sign-in provider, hashed. | Only if you create an account | While your account exists |
| Your return address, label format and packing-slip choice, so another computer gets the same ones | Only while you're signed in | While your account exists |
| Daily totals of a few actions (a visit, a file loaded, a PDF downloaded). No cookie, no ID, no IP address | Every visit, unless you opened a page with ?nostats=1 | Daily totals only |
| Error reports: the error message, the page and your browser type. Never your file or addresses | When a page hits an error | 30 days |
| The column titles of a file that looks like a TCGplayer export but can't be read (never an order row) | When that happens | 30 days |
| Newsletter: your email, which box you used, when, and a one-way hash of your IP address (plus, on the waitlist, your two optional answers) | Only if you sign up | Until you unsubscribe |
| Feedback box: your message, the page, and your email only if you type it | Only if you send feedback | Until we've dealt with it |
| Speed Agent: daily usage totals (requests and cost), not your conversations. Your request goes to an AI provider to write the answer, never street addresses | Only if you use it (paid plans) | Daily totals |
Card payments go straight to Stripe; we never see your card number.
How to erase it
- On your device: clear this site's data in your browser settings. That also clears your saved settings and return address.
- Your account: sign in, open the account area and tap Delete my account and data. It takes effect right away. Stripe keeps the payment records the law requires.
- Anything else (newsletter, feedback, a copy of your data): email privacy@tcgspeedshipper.com from the address on your account. We answer within 30 days.