Draft — wording may still change
Privacy Policy
This is a placeholder version of our privacy policy so applicants have something real to review. It plainly describes what this site actually does today — the final wording, including a permanent contact address, is still being finalized.
What we collect
- Vendor applications: business name, contact name, email, phone, an optional store/social link, what you sell, and any notes you add — collected when you submit an application.
- Payment: handled entirely by Stripe. We never see or store your card number — we only keep the payment status, amount, and Stripe's own transaction reference.
- Admin accounts: email and password for the small number of people who run the show, stored by our login provider (Supabase Auth), never in plain text.
- General site visitors: we use privacy-friendly analytics (Umami) to understand overall traffic — page views, rough location, and which device/browser people use. It doesn't use cookies, doesn't track you individually across visits, and doesn't collect any personal information. The only cookie this site sets is a session cookie for a logged-in admin.
How we use it
- To email you your receipt when you pay, and your table assignment once it's confirmed.
- To coordinate day-of logistics for the event you applied to.
- We don't sell, rent, or share your information with anyone for marketing purposes.
Who else processes it
- Supabase — stores application and event data, with access locked down so only our admin team can read it.
- Stripe — processes vendor space payments. Read their privacy policy at stripe.com/privacy.
- Resend — delivers the emails listed above on our behalf. Read their privacy policy at resend.com/legal/privacy-policy.
- Vercel — hosts the website itself. Read their privacy policy at vercel.com/legal/privacy-policy.
How long we keep it
- Vendor application and payment records are kept as our record of past events. If you'd like your information removed after an event has passed, contact us and we'll take care of it.
Attendee tickets
- Ticket orders: your name, email, and ticket counts (adults and free kids) — we don't ask for kids' individual names or ages, just a headcount.
- Your ticket code is what you show at the door — it isn't scanned against anything beyond a staff member glancing at it.
- Payment for online orders is handled entirely by Stripe, same as vendor payments — we never see or store your card number.
Questions or a removal request
Email secretraretcgcardshow@gmail.com or call (347) 389-5531, reply to any email you've received from us, or reach out through our socials.