Privacy Policy

Last updated: 14 October 2026

This policy explains what personal data NamiTax (“we”, “us”) collects when you use the site and its features, how we use it, and the choices and rights you have. It applies together with our Terms of Service.

In short: we collect what we need to run NamiTax and keep it safe, your collection stays private to you, and we don't sell your data or use it for advertising.

Information we collect

Information you give us. When you create an account, we collect your email address and password, and a display name if you choose one. If you add a passkey, we keep only the part that lets us check it's yours; the passkey itself stays on your device. As you use NamiTax, we store what you add to it, such as the cards you own and what you paid for them, the cards you favorite and your wish prices, the decks you save, your collections and any images you upload for them, your profile picture and header image, your settings, and the community listings and photos you submit. We also receive whatever you send us through reports, feedback, or email.

Information collected automatically. Like any website, our servers receive technical information when your browser loads a page, such as your IP address, browser and device type, the page requested, the site that referred you, and the date and time. For signed-in users we also keep basic details about each sign-in, such as when it happened and the kind of device it was on, so you can review and end your sessions from your account page.

How we use it

We use personal data to:

• provide, maintain, and improve NamiTax and the features you use;
• keep NamiTax and its users safe, including preventing spam, fraud, and abuse, securing accounts, and enforcing our Terms;
• review reports and moderate community content;
• understand how the site is used, through aggregated statistics, so we can fix problems and decide what to work on;
• communicate with you about your account or the site, and reply when you contact us;
• comply with the law, and establish, exercise, or defend legal claims.

We don't sell your personal data, and we don't use it for advertising or to build advertising profiles.

If you are in the EEA, the UK, or Switzerland, we rely on these legal bases: performing our contract with you (running your account and the features you use); our legitimate interests in operating, securing, and improving NamiTax and preventing its misuse, balanced against your rights; your consent, where we ask for it, which you can withdraw at any time; and compliance with legal obligations.

Cookies and local storage

We use cookies and your browser's local storage only for things the site needs in order to work, or that you have asked it to remember, such as keeping you signed in and remembering your currency, sort order, and display settings. We don't use advertising cookies or third-party trackers, and nothing we set follows you to other websites. A marketplace you reach through one of our affiliate links may set its own cookies there, as described below. You can clear or block cookies in your browser; if you block them, signing in won't work.

When we share it

Your collection, purchase records, favorites, saved decks, and settings are private to your account. We share personal data only in these cases:

• Content you choose to make public. Community listings, including their photos and your display name, can be seen by anyone. So can your profile page, which shows your display name, the picture and header image you add to it, and your listings. When you crop an image for your profile, only the part you chose is shown; the rest is kept so you can adjust it later, and only you can see it. Your email address is not shown with any of these.
• Service providers who help us run NamiTax, such as hosting, infrastructure, and email delivery providers, who may use the data only to provide their services to us.
• Legal and safety reasons, where we believe in good faith that the law or a legal process requires it, or that it is needed to protect the rights, property, or safety of NamiTax, its users, or others, including to investigate fraud or abuse.
• A change of ownership. If NamiTax is transferred to someone else, for example in a merger or acquisition, your data may be transferred with it, and this policy will continue to apply to it.
• With your consent, or when you ask us to.

The marketplaces we collect prices from receive no personal data about you in the process. Links to sellers and other sites take you to services with their own privacy policies, which we don't control.

Some links to marketplaces, such as TCGplayer, are affiliate links. Following one takes you through the marketplace's affiliate service, which records the click, for example your IP address, browser, and the time, and may set cookies on the marketplace's site so that a purchase you make there can be credited to us. Their privacy policies cover this. What we see in return is how many clicks and purchases there were, not who made them.

Your data is stored on servers in the European Union, currently in Finland, which Swiss and EU law recognise as protecting personal data adequately. The emails we send go out through an email delivery provider in the United States, which receives the address and the content of each email in order to deliver it; for that transfer we rely on the safeguards the law requires, such as standard contractual clauses. If we ever store or send your data anywhere else, we will say so here.

How long we keep it

We keep personal data only for as long as we need it for the purposes above. Account data is kept while your account exists. Community listings expire automatically, as described in the Terms. Technical and security data is kept for a short time, unless we need it longer to look into a specific problem. Statistics that identify no one may be kept indefinitely.

When you delete your account, we delete the data held against it. We may keep some information afterwards where we have a reason to, for example reports you filed (no longer linked to you), records needed to enforce a ban or prevent abuse, anything we are required to keep by law, and copies in backups until they are overwritten in the normal course.

We may delete accounts that have been inactive for an extended period, and will give notice before we do.

Security

We use reasonable technical and organisational measures to protect personal data. For example, passwords are stored only in hashed form, never in a readable one, and connections to the site are encrypted. No service can be completely secure, so we can't guarantee the security of your data. Keep your password to yourself, and tell us if you think someone else has access to your account.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict how we use it, and to withdraw consent you have given.

• On your account page you can download a copy of your data and delete your account. Everything you have added can be edited in the app.
• For anything else, email us at the address below. We may need to confirm your identity before acting on a request, and we will respond within the time the law requires.
• If your browser sends a Global Privacy Control or Do Not Track signal, we leave your visits out of our usage statistics.
• You can also complain to your local data protection authority.

Children

NamiTax is made for a general audience and doesn't ask anyone's age. Younger users need a parent's or guardian's permission to use it, as the Terms explain. If we learn that we have collected personal data from a child without the permission the law requires, we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version here and change the date at the top. If a change is significant, we will take reasonable steps to let you know, for example with a notice on the site or by email.

Who we are and how to reach us

NamiTax is run by Tom Türker, Switzerland, who is responsible for the personal data described in this policy (the “controller”).

Questions about this policy or your data, or a request to use any of your rights: business@namitax.app