Privacy Policy

TCG Compass collects as little personal information as possible. There are no player accounts, and we do not sell or rent personal information to anyone.

Event submission form. Organiser name, the submitter's contact name, email address and optional phone number, an optional organiser reference link, the public contact link for the event, and the event details you enter (title, game, type, format, date, time, venue, address, entry fee, description). We also record the submitting device's IP address to limit abuse.

Contact form. Your name, email address, chosen subject and the content of your message.

We may also collect basic technical information such as browser type and pages visited, in aggregate.

Submitter contact details are used to verify that a listing is genuine, to ask questions before publishing, to notify you if a listing is edited, declined or removed, and to contact you if a player reports incorrect information. They are not used for marketing.

Published publicly: event title, game, event type, format, date, time, entry fee, description, organiser or store name, venue name and address, and the public contact link you nominate for players to use.

Kept private: the submitter's contact name, email address, phone number, the recorded IP address, and any internal moderation notes. These fields are restricted at the database level and are not readable through our public interface — only TCG Compass moderation can access them.

If you nominate an email address or phone number as the public contact for an event, it becomes public by your choice.

The store directory can show how far each store is from you. This only happens if you tap "Use my location" and allow your browser to share your position. Your coordinates are used in your browser to sort and label stores by distance — they are never sent to our servers, stored, or shared. You can browse by city instead at any time, and revoke the permission in your browser settings.

The site and its database are operated on managed cloud infrastructure (including Supabase for the database and a managed hosting and email delivery provider). These providers process information on our behalf, under their own security and privacy commitments, and some may store data outside South Africa.

Aside from these providers, we share personal information only where required by law.

Published event records are retained while they remain useful as a record of local play. Private submitter contact details are retained for as long as the listing is live plus a reasonable period afterwards for moderation history, and are then deleted. Declined or spam submissions are deleted routinely. Contact form messages are kept only as long as needed to resolve your enquiry.

Under the Protection of Personal Information Act (POPIA) you may request access to the personal information we hold about you, ask us to correct or delete it, object to its processing, or ask us to remove a listing and its associated contact details. You may also lodge a complaint with the Information Regulator of South Africa.

We apply reasonable technical safeguards, including database access rules that keep private submission fields unreadable through the public interface. No online service can guarantee absolute security, but we take reasonable steps to reduce risk.

Privacy requests can be sent to privacy@tcgcompass.co.za or through our contact form. Please describe your request clearly so we can identify the relevant records. We aim to respond within a reasonable period, and may ask you to verify your identity first.