GEM11.TCG Privacy Policy

Effective date: August 3, 2026
Last updated: August 3, 2026

This Privacy Policy explains how GEM11.TCG, doing business as GEM11.TCG (“GEM11,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you visit gem11tcg.com, create an account, use our product-tracking and alert tools, contribute information, or otherwise communicate with us (collectively, the “Service”).

1. A plain-language summary

• You can browse product and retailer sightings without creating an account.
• We use first-party analytics to understand whether the Service is useful.
• If you sign in with Discord, Discord gives us basic account information such as your Discord user ID, username, avatar, and email address.
• If you create a profile, we may store a display name, province, and home city. We do not need your precise home address to provide local results.
• We use watchlists, alert rules, reports, confirmations, disputes, and outcome feedback to operate the Service and improve the reliability of sightings.
• We do not sell or rent personal information.
• You can request access or correction and can delete your account. When an account is deleted, identifying account information is removed or de-identified. Factual sighting information may remain without being linked to your identity so the shared dataset is not corrupted.

This summary does not replace the complete Policy below.

2. Who is responsible for your information

GEM11 is operated by:

GEM11.TCG
gem11.tcg@gmail.com

Our Privacy Officer is responsible for our privacy program and can be contacted at:

gem11.tcg@gmail.com

3. Scope

This Policy applies to personal information handled through the Service and our related support and business operations. It does not govern a retailer, Discord, or another third-party service that has its own privacy practices.

“Personal information” means information about an identifiable individual. It may include information that identifies you directly and information, such as an online identifier or IP address, that can identify or be associated with you when combined with other information.

4. Information we collect

4.1 Information you provide

Depending on how you use the Service, we may collect:

• Profile information: display name, province, and home city.
• Preferences: watchlisted products, followed retailers, alert rules, maximum-price preferences, preferred locations, and notification choices.
• Community contributions: store or online sightings, product and retailer details, observation time, price, estimated quantity, confirmations, disputes, photographs, notes, and whether a product was found or purchased.
• Support communications: the contents of messages you send us and the information required to investigate and respond.
• Consent and agreement records: the version and time at which you accepted our Terms or made a privacy or communication choice.

Please do not submit precise home-location information, payment-card details, government identification, or personal information about another person in a sighting, photograph, note, or support request.

4.2 Information received from Discord

When you choose “Continue with Discord,” Discord authenticates you. Subject to the permissions displayed by Discord, we receive your Discord user ID, username, avatar, and email address. We do not receive your Discord password and do not obtain permission to post as you.

Discord processes information under its own privacy policy. You can review the permissions requested by GEM11 before authorizing the connection.

4.3 Information collected automatically

When you use the Service, we may automatically collect:

• A randomly generated first-party anonymous identifier stored in your browser.
• A session identifier that normally resets when the browser session ends.
• Page views, searches, products and retailers viewed, retailer-link clicks, watchlist and alert actions, notification interactions, and feedback about whether a product was found or purchased.
• The date and time of an action and identifiers for the relevant product, retailer, location, sighting, and browsing session.
• Technical and security information such as IP address, browser and device type, operating system, requested URL, referring page, response status, and server-log events.
• Authentication and session information needed to keep you signed in and protect the account.

We operate first-party product analytics rather than embedding a third-party advertising analytics service. If you later sign in, the anonymous identifier may be associated with your account so we can understand the path from an anonymous visit to account creation and avoid counting one person as unrelated visitors.

4.4 Retailer and public-source information

We collect product, price, availability, store, and source information from retailer systems, store reports, and public sources. This information is usually business or product information rather than personal information. It may become personal information if, for example, a report identifies an individual store employee or community member. We limit the use of such information to what is reasonably necessary to operate and verify the Service.

5. Why we use personal information

We use personal information to:

• Provide, maintain, personalize, and secure the Service.
• Authenticate accounts and maintain sessions.
• Show locally relevant products, retailers, and sightings.
• Maintain watchlists and match sightings to alert rules.
• Deliver in-app notifications and any separately authorized notification channel.
• Receive, evaluate, verify, rank, correct, and moderate sightings.
• Calculate confidence and community-reputation indicators.
• Detect duplicate, false, manipulated, abusive, or fraudulent activity.
• Understand whether users found or purchased a product after following a sighting.
• Measure feature use, reliability, conversion, and overall Service performance.
• Provide support and respond to privacy, legal, and data-correction requests.
• Debug failures, protect our systems, enforce our Terms, and establish or defend legal claims.
• Meet legal, tax, accounting, security-incident, and regulatory obligations.

We will not use personal information for a materially new purpose without providing notice and obtaining consent when required by law.

6. Consent and your choices

We seek consent in a manner appropriate to the sensitivity of the information and the reasonable expectations associated with the Service.

Some information is necessary to provide a feature. For example, we need an account identifier to maintain a watchlist, and we need an alert rule to notify you about a matching product. If you do not provide required information, that feature may not be available.

Display name, province, and home city are optional unless the interface clearly states otherwise. You may update them from your account settings.

You may withdraw consent to optional uses, subject to legal or contractual restrictions and reasonable notice. Withdrawal does not affect processing that occurred lawfully before the withdrawal. Contact gem11.tcg@gmail.com if a control is not available in the Service.

Commercial electronic messages

In-app service notifications are part of the features you request. Before we send promotional email, text, Discord direct messages, or similar commercial electronic messages, we will obtain consent where required, identify the sender, and provide a working unsubscribe method. You may still receive necessary account, security, legal, or transaction-related communications where permitted by law.

7. When we disclose information

We do not sell or rent personal information. We may disclose it as follows:

Service providers

We use organizations that help us operate the Service, such as hosting, content delivery, authentication, database, infrastructure, monitoring, backup, support, and communication providers. Current or expected providers include:

• Discord, for account authentication.
• Vercel, for website hosting and delivery.
• Cloudflare, for network, domain, and security services.
• Hetzner Online GmbH (server located in Ashburn, Virginia, United States).
• Vercel Inc. (website hosting, United States); Cloudflare, Inc. (network routing and protection, United States); Discord Inc. (sign-in and community alerts, United States); Google LLC (email we receive at our support address, United States).

These providers may process information only for the services they provide to us, subject to their contracts and applicable law. We remain accountable for personal information transferred to a provider for processing.

Retailer links

When you follow a link to a retailer, your browser communicates directly with that retailer. The retailer may receive standard request information such as your IP address, browser information, and possibly the referring page. The retailer’s privacy policy governs its collection. We do not provide your Discord email or GEM11 profile to a retailer merely because you follow a link.

Legal, safety, and enforcement reasons

We may disclose information when we reasonably believe it is necessary to comply with law or valid legal process; protect a person’s safety, rights, or property; investigate fraud or abuse; secure the Service; or establish, exercise, or defend legal claims.

Business changes

Information may be disclosed as part of due diligence for, or transferred in, a financing, reorganization, merger, sale, or other business transaction. We will require appropriate confidentiality and provide any notice or choice required by law.

With your direction

We may disclose information for another purpose when you direct us or provide valid consent.

8. Public and de-identified information

Product, retailer, price, availability, and confidence information is intended to be shared through the Service. A contribution may also be displayed with the display name or community-reputation information identified at the point of submission. Do not include information that you do not want others to see.

We may aggregate or de-identify information so it no longer identifies an individual. We use such information to operate, analyze, and improve GEM11 and may retain it for those purposes. We will not attempt to re-identify information that has been de-identified, except to test and maintain the effectiveness of our de-identification safeguards or as permitted by law.

9. Retention and account deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy and to meet legal, accounting, security, and dispute-resolution requirements.

Our intended retention schedule is:

• Active account and profile: while the account remains active.
• Authentication credentials: until they expire, are rotated, you sign out, or the account is deleted, subject to short-lived security records.
• First-party analytics: no fixed automatic deletion schedule yet; analytics tied to an account are removed or de-identified when the account is deleted from collection.
• Routine technical logs: no fixed automatic deletion schedule yet; we delete logs when they are no longer needed for security and troubleshooting, unless required longer for an active security or legal investigation.
• Support records: for as long as needed to handle your request and for a reasonable period afterwards for our records after the matter closes.
• Agreement and consent records: for as long as needed to demonstrate the applicable agreement or consent and resolve related claims.
• Privacy-breach records: for at least the period required by applicable law.
• Backups: removed or overwritten within 14 days after deletion from active systems.

You can delete your account through account settings or by contacting us. When the deletion process is complete, we remove or de-identify your profile, Discord connection, email, watchlist, alert rules, notification data, and other account-linked personal information, except information we must retain for a limited legal, fraud-prevention, security, or compliance purpose.

Factual sightings and related confidence history may remain after account deletion, but they will be detached from your account and will not identify you. This preserves the integrity of the community availability record. Aggregated or de-identified information may also remain.

10. International processing

Some providers may store or process information outside your province or outside Canada, including in the United States. Information in another jurisdiction may be subject to that jurisdiction’s laws and may be accessible to courts, law-enforcement agencies, or national-security authorities in accordance with those laws.

Contact gem11.tcg@gmail.com for more information about our providers or the countries in which personal information is processed.

11. Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity and amount of information, including access controls, encrypted network connections, credential controls, logging, software maintenance, and provider oversight. Only people who need personal information for an authorized purpose should have access to it.

No Internet transmission or storage system is completely secure. If a breach occurs, we will contain and investigate it, keep required records, and notify affected individuals and privacy regulators where required by law.

12. Your privacy rights

Subject to applicable law, you may ask us to:

• Confirm whether we hold personal information about you.
• Provide access to that information and an account of its use and disclosure.
• Correct inaccurate or incomplete information.
• Delete information that is no longer required or was collected unlawfully.
• Withdraw consent to an optional use.
• Provide eligible computerized information in a structured, commonly used technological format where a portability right applies.
• Explain a decision based exclusively on automated processing where applicable.
• Address a concern or complaint about our privacy practices.

We may need to verify your identity before fulfilling a request. We will respond within the period required by applicable law. A legal exception may limit a request; if so, we will explain the reason unless prohibited from doing so.

Send requests to gem11.tcg@gmail.com or the mailing address in section 2.

If we do not resolve a concern, you may contact the privacy regulator with jurisdiction, such as the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec. We would appreciate the opportunity to address your concern first.

13. Children and young people

The Service is not intended for children under 13, and we do not knowingly collect personal information from a child under 13. If we learn that we have done so, we will delete or de-identify it unless applicable law requires otherwise. Contact gem11.tcg@gmail.com if you believe a child under 13 has provided personal information.

If you are at least 13 but have not reached the age of majority where you live, you should review this Policy and the Terms with a parent or legal guardian. We use age-appropriate language and safeguards where we know a user is a young person.

14. Third-party services and links

The Service links to retailers and may refer to Discord, payment services, map providers, or other independent services. We do not control their availability, security, content, or privacy practices. Review their policies before providing them with personal information.

15. Changes to this Policy

We may update this Policy as the Service or law changes. We will update the “Last updated” date and make prior versions available on request. If a change is material, we will provide prominent notice and seek renewed consent where required before applying the change to previously collected information.

16. Contact us

Questions, access or correction requests, deletion requests, and privacy complaints can be sent to:

Privacy Officer
GEM11.TCG
gem11.tcg@gmail.com

Version 2026-08-03. Questions about this document go to gem11.tcg@gmail.com.