Privacy Policy

Last updated: February 2026

What data we collect

• Wishlist data: Product URLs, names, images, and prices you save to your wishlist. This is stored locally in your browser and optionally synced to our secure cloud database when you create an account.
• Account information: If you create an account, we store your email address and an encrypted password hash.
• Alert preferences: Your price alert thresholds, stock alert settings, and notification preferences (email and optional SMS).
• Phone number (optional): If you enable SMS alerts, we store your verified phone number to send you price and stock notifications. We do not share your mobile number with third parties for marketing.
• Subscription status: Whether you have an active paid subscription, managed securely via Stripe.

How we use your data

• To provide wishlist functionality and display your saved items.
• To monitor prices and stock availability for items you've set alerts on.
• To send you email notifications when your alert conditions are met.
• To manage your subscription status.

Data sharing

• We do not sell your data to third parties.
• We use Supabase for secure database hosting and authentication.
• We use Resend for email delivery (only for alert notifications you've opted into).
• We use Stripe for payment processing. We never see or store your credit card details.

Data storage and security

• Local wishlist data is stored in your browser's extension storage.
• Cloud data is stored in Supabase's secure, encrypted PostgreSQL database.
• All communication uses HTTPS encryption.
• Row-level security ensures users can only access their own data.

Your rights

• You can delete your wishlist data at any time through the extension.
• You can delete your account by contacting us at info@tcgsherpa.com.
• You can disable all alerts at any time.

Contact

For privacy questions, contact us at info@tcgsherpa.com.