Who we are
Snapcaster (Eppler Software, Victoria, British Columbia, Canada) operates snapcaster.ca: a price-comparison service and a marketplace for trading card game products in Canada.
Our Privacy Officer is responsible for personal information under this policy and under Canadian privacy law. Reach them at privacy@snapcaster.gg.
What we collect
Account data. Email address and password (stored hashed), display preferences, and optional security settings such as two-factor authentication.
Order data. When you buy on the marketplace: your name, email address, shipping address, the items you bought, and your order history. Guest checkout collects the same order data without creating an account.
Payment data. Payments are processed by Stripe. We never receive or store your card number; we receive confirmation of payment and the last transaction details needed to run orders and refunds.
Seller data. If you sell on Snapcaster: your business name and contact details, your listings and orders, and your payout ledger. Identity verification and banking details for payouts are collected and held by Stripe Connect, not by us.
Support communications. Emails you send us and messages in our public Discord.
Measurement data. Aggregate, cookieless usage measurement described in the next section, which is designed not to identify you.
Cookies, trackers, and measurement
Essential storage. Some storage is required for the site to work and runs without consent: your session and sign-in state, theme, cart contents, your consent choices themselves, dismissed announcements, and error monitoring (Sentry, without session replay) so we can fix crashes.
Optional trackers are opt-in. Trackers that could identify or profile you run only if you accept them in the consent banner, and stay fully dormant otherwise. They currently are: Google Analytics / Google Tag Manager, Meta Pixel, and Sentry Session Replay. You can change your mind at any time from the cookie settings link in the footer, and withdrawing consent stops them going forward.
Aggregate measurement without tracking. We count what happens on the site (page views, searches, clicks on buy links, checkout activity) using a self-hosted, cookieless system that runs without consent because it is built not to identify anyone:
- it sets no cookie and stores nothing on your device;
- it keeps no user identifier and no raw IP address or user agent;
- the only visitor key is a non-reversible hash that is re-salted every calendar month, so it cannot link your activity across months, across sites, or to your name, account, or contact details.
If we ever changed this system in a way that could identify you, it would move behind the consent banner first.
How we use personal information
- To run the Services: accounts, carts, checkout, order fulfilment, payouts, and support.
- To share order details with the Seller you bought from, so they can fulfil and ship your order (name, shipping address, email, and the order contents). Sellers may use your details only to fulfil the order and meet their legal obligations, not for their own marketing.
- To process payments, refunds, and payouts through Stripe.
- To collect and remit sales taxes where required, and to keep the transaction records the law requires.
- To secure the Services, prevent fraud and abuse, and enforce our Terms.
- To send transactional email about your orders and account. We do not send marketing email without your consent.
We do not sell personal information.
Where your data lives
Our infrastructure and service providers (including our hosting provider and Stripe) may store or process personal information outside your province and outside Canada, including in the United States. Where they do, the information is protected by contractual safeguards, but it may be accessible to the authorities of those jurisdictions under their laws.
How long we keep it
- Account data: for as long as your account exists. Ask us to delete your account and we will, subject to the point below.
- Transaction records (orders, payments, payouts, taxes): kept for six years from the end of the year they relate to, as Canadian tax law requires, then deleted. If you ask for deletion, we delete everything else and explain what must be retained and until when.
- Measurement data: the visitor key self-erases every month by design; what remains is aggregate statistics about the site, not about you.
Your rights
You can ask us to:
- access the personal information we hold about you;
- correct it;
- delete it (subject to the retention rules above);
- withdraw consent to optional trackers or marketing at any time.
Write to privacy@snapcaster.gg and we will respond within 30 days. We may need to verify your identity before acting on a request.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d'accès à l'information du Québec.
Children
The Services are for users 13 and older, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy@snapcaster.gg and we will delete it.
Changes to this policy
When we make a material change we will update the effective date and give reasonable notice, such as a notice on the site or an email to account holders.
Contact
Privacy Officer Eppler Software, Victoria, British Columbia, Canada privacy@snapcaster.gg