Privacy Policy
Effective date: September 25, 2026
Who we are
disclose.gg is a trading-card pricing and community sales registry operated by Alexander Chen in San Marino, California, USA. This policy covers the pricing site, including its Weiss Schwarz and Riftbound pages. It does not cover the separate Twitch break queue.
For privacy questions or requests, email alexchenac888@gmail.com.
Information we collect and why
- Accounts: Auth0 sign-in identifiers, username, email address, verification status and account timestamps support sign-in, account access and moderation. Auth0 and your selected sign-in provider handle authentication.
- Contributions: Sale details, prices, dates, notes, source links, images, submission history and verification status support the public registry. Your submitter name and sale information may be visible publicly. Do not submit private messages, contact details or other people’s personal information without appropriate permission.
- Collections and reports: Saved collection items and grades support your collection. Report details and reporter identity help administrators investigate incorrect or inappropriate listings.
- Site activity: We record browser and session identifiers, page paths, selected button clicks, successful collection additions and sale submissions, detail views, sign-in events and referral-source categories to understand use of the site. When signed in, activity can be associated with your internal account ID. These identifiers are pseudonymous, not a guarantee of anonymity. The first observed referral source in a tab session is carried through later activity. Only known source categories are kept, not full referrer URLs, campaign text or page query strings.
- Page performance: We measure loading, interaction responsiveness and layout stability, grouped by page type and mobile or desktop viewport. These samples have temporary metric identifiers to update measurements during a page visit; they do not include account IDs, persistent browser IDs, entity queries, clicked text or DOM details. They are stored by disclose.gg and are not sent to Google Analytics.
- Searches: We record search terms and timestamps to provide popular searches. Popular terms can be displayed publicly. Avoid entering personal or sensitive information in search boxes.
- Requests and correspondence: Hosting and service providers receive connection information such as IP address, browser information and request details to deliver and secure the service. If you contact us, we receive your email and the information you provide.
Service providers and external sites
We use Auth0 for authentication, Railway for application hosting, and database and image-storage services to operate the site. Authorized administrators can access information needed to operate and moderate the registry. Providers process the information needed to deliver their services.
Pages that load Google Fonts or externally hosted images send requests to those providers, which receive connection information. External sign-in providers, image hosts and linked sites have their own privacy practices and may recognize you across sites or sessions.
Some eBay and TCGplayer links are affiliate links. If you follow them, the marketplace or affiliate network may use tracking parameters, cookies and other technologies to attribute a purchase, and we may earn a commission. Those services may collect information about activity across websites under their own policies. We do not control their storage or tracking.
We may disclose information when required by law or as needed to investigate abuse and protect the service or its users. Public sale records and public search trends can be viewed by anyone.
Cookies and browser storage
We use cookies, local storage and session storage. Local storage generally remains until cleared; session storage generally lasts for the browser tab’s session.
| Purpose | Storage and duration |
|---|---|
| Sign-in | Auth0 cookies and the discloseAuth0Cache: local-storage entries maintain and renew sign-in. Token expiry and provider sessions follow Auth0 configuration; local cached entries may persist until removed or sign-out. Account and return-navigation state also use session storage. |
| Display preferences | discloseBrowseView and discloseDisplayCurrency cookies last up to one year after being saved. Local-storage preferences remember currency, list/grid view and the collapsed sale panel. |
| Usage analytics | discloseActivityAnonymousId persists in local storage without an automatic expiry. discloseActivitySessionId and discloseActivitySessionStarted use session storage. discloseActivitySource stores the source category in session storage. |
| Temporary interface state | Session storage preserves pending sign-in actions, navigation and notification messages. |
| Restricted development access | When a development password gate is enabled, an HTTP-only disclose_dev_access cookie records access for the configured gate session. |
Your choices and requests
You can browse public pricing without an account. Browser settings can block or clear cookies and site storage, although this may reset preferences or prevent sign-in. Clearing storage does not delete records already held by us, and visiting again may create new identifiers. Blocking cookies alone does not disable local storage or all analytics requests.
The site currently has no analytics opt-out control and does not change its first-party analytics behavior in response to Do Not Track or Global Privacy Control signals. This statement describes current behavior; it is not a request for consent or a waiver of any rights.
You can review your account details in Account Settings and manage saved items in My Collection. For access, correction, deletion or privacy questions, contact the email above with enough information to identify the relevant account or record. We may need to verify your identity before handling account information; do not send passwords or sign-in tokens.
Retention and account deletion
Search-event cleanup removes records older than 30 days when new searches are recorded for that game; older records can remain if no new searches arrive. Activity events currently have no automatic deletion schedule. Performance samples are excluded from reports after 90 days and deleted during subsequent performance ingestion, at most once per hour; old samples can remain stored if no new samples arrive. Browser identifiers can remain until you clear site storage.
Deleting an account removes its internal account, collection entries and internal account tokens. Submitted sales remain in the registry with the submitter changed to “Deleted User.” This does not remove all personal information that may appear in sale notes, source links or images, and does not automatically delete activity records, reports, previously archived account data, correspondence, provider logs or backups.
Account deletion on disclose.gg does not itself delete your Auth0 identity or external sign-in provider account. Contact us for remaining data or provider-deletion requests. Other retained records do not currently have a uniform automatic expiry; provider records and backups follow the applicable provider settings. We may retain information where required by law.
Younger users
The pricing site is intended for a general audience aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us. Registered California users under 18 may contact us to request removal of content they posted; removal may not remove copies held by others or information that must be retained by law.
Changes to this policy
We will post updates here and update the effective date. For material changes, we will also place a prominent notice on the site before the change takes effect.