Privacy Policy

TopCut London (“TopCut London”, “we”, “us” or “our”) is an independent platform built for UK Pokémon TCG players. The service is operated by Daniel, based in London, United Kingdom. We can be contacted at help@topcutlondon.com.

This Privacy Policy explains what personal information we collect when you use the TopCut London website and related services, why we collect it, how we store and protect it, and the rights you have over your data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using TopCut London you agree to the practices described in this policy.

When you create an account we collect basic account information: your email address, a username of your choice, and a password. Passwords are never stored in plain text; they are securely hashed by our authentication provider before they reach the database.

You may also provide optional profile information to personalise your experience, including a display name, your Pokémon TCG player ID, and your year of birth. You can edit or remove this information at any time from your account settings.

As you use the platform we store the activity data you create: the cards in your collection, the tournaments you log, the cards on your wishlist, your in-app preferences, and any feedback you submit through the feedback form. This data exists so the platform can show it back to you, and in some cases (for example public wishlists) so you can choose to share it with other users.

Like virtually all websites, our hosting provider records standard technical data in server and security logs. This typically includes your IP address, browser type and version, device and operating system information, and the pages you visit. We use this only for security, troubleshooting, and to keep the service running reliably.

We use the information described above to provide the platform and to keep your account working. That includes signing you in, displaying your collection and tournament history, and powering features such as your wishlist and stats.

We may also contact you about your account when it is necessary — for example, to send password reset emails, to confirm changes you have made, or to notify you of important security or service updates. We do not currently send marketing emails, and if we ever introduce them you will be asked to opt in first.

We look at aggregated usage information (for example, how many users use a particular feature) to understand what is working well and to decide what to build next. Aggregated reports do not identify individual users.

We do not sell your data to third parties, and we do not share it for advertising. Your data is used to run TopCut London and nothing else.

Your data is stored with Supabase in their EU region, and the application itself is hosted on Vercel. Both providers operate to recognised industry standards for security and uptime.

Passwords are hashed using a one-way algorithm and are never accessible to us in plain text. Database access is protected by Row Level Security policies, which means each user can only read and modify their own records; administrative access is limited to a small number of operators and is logged.

No system can be guaranteed to be 100% secure. While we take reasonable steps to protect your information, you also play a part: please choose a strong, unique password and keep your account credentials private.

As a user based in the United Kingdom you have a number of rights over your personal data. You have the right to access the personal data we hold about you, the right to correct data that is inaccurate or incomplete, and the right to request deletion of your account and associated data.

You also have the right to data portability— to receive a copy of the information you have provided to us in a structured, machine-readable format — and the right to withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, email us at help@topcutlondon.com from the email address associated with your account. We will respond within one calendar month, in line with the requirements of the UK GDPR. If you believe we have not handled your data appropriately you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

TopCut London uses a small number of essential cookiesto keep you signed in. These are set by our authentication provider (Supabase) and are required for the site to function — without them we cannot recognise you between page loads.

We do not currently use tracking, analytics or advertising cookies. If we introduce any non-essential cookies in the future, we will update this policy and ask for your consent first where required.

TopCut London is not intended for children under the age of 13. To create an account you must confirm that you are 13 years or older. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at help@topcutlondon.com and we will delete the relevant data as soon as reasonably practicable.

We may update this Privacy Policy from time to time, for example to reflect changes to the platform, to our service providers, or to applicable law. When we do, we will revise the “Last updated” date at the top of this page.

Where the changes are significant, we will let registered users know by email before they take effect, so you have an opportunity to review them and, if you wish, close your account.

For any questions about this Privacy Policy, your personal data, or how we handle it, please contact us at help@topcutlondon.com. You can also review our Terms of Service.