Privacy Policy
Effective September 8, 2026 · Last updated October 1, 2026
Tabletop Treasures, LLC (“Tabletop Treasures,” “TT,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit the Tabletop Treasures website, create or use a Tabletop Treasures account, communicate with us, or otherwise interact with the website (collectively, the “Site”). By using the Site, you acknowledge the practices described in this Privacy Policy. This Privacy Policy should be read together with the Tabletop Treasures Website Terms of Use and End User Agreement.
01 Information We Collect
The information we collect depends on how you interact with Tabletop Treasures.
1.1 Account Information
When you create or maintain a Tabletop Treasures account, we may collect:
- email address;
- Character Name;
- unique Tabletop Treasures Handle;
- a profile picture, if you upload one;
- account authentication and security information;
- email-verification status;
- account creation date;
- last-login information;
- account status; and
- records relating to account settings and changes.
Passwords should be stored using appropriate secure authentication methods. Tabletop Treasures does not intend to store passwords in readable plain-text form.
1.2 Character Preferences
You may voluntarily provide information that helps Tabletop Treasures understand the games and tabletop experiences that interest you. This may include:
- games or game categories you select;
- whether you identify your interest in a selected game as New / Interested, Casual, Competitive, or a combination of those options; and
- other preferences you choose to provide through available account settings.
This information may be used to personalize your experience and, as additional Site functionality becomes available, help provide more relevant content or recommendations. The games you select and your interest level for each are shown on your public profile (see Section 7.2).
1.3 Business Account Information
If you create a Business Account, we collect information you provide to operate and publicly display that account, including:
- business name and unique Tabletop Treasures Handle;
- hosted-games list, including any games you add that are not part of our standard catalog;
- business address, city, state, and ZIP code;
- business phone number;
- business website address; and
- business social-media links you choose to provide.
If you sell through the Shop (see Section 1.10), we also collect your store's name, description, and logo.
Unlike a Player's contact and location information, which is treated as private, information collected from a Business Account is intended to be displayed publicly on that business's Site profile. See Section 7.3 for more detail.
1.4 Location Information
You may voluntarily provide a ZIP code and time zone. Your saved ZIP code is intended to help Tabletop Treasures provide geographically relevant functionality, and your time zone lets us send event reminders at the right local time.
- providing a ZIP code is optional;
- your ZIP code is treated as private account information;
- your ZIP code is not intended to be publicly displayed as part of your Character identity; and
- Tabletop Treasures does not require a precise street address for general account or location-preference purposes.
Location searches. When you search for events or stores near a ZIP code or a city and state, our servers look up approximate coordinates for that place using the U.S. Census Bureau's public geocoding service. The search text is sent from our servers, not your device, and is not saved to your account.
Device location. If you choose "Use my location," your browser asks for your permission and then shares your device's approximate location with the page. It is used in your browser only to sort nearby results, and it is not sent to Tabletop Treasures or saved to your account.
Shipping addresses for purchases are described in Section 1.9.
1.5 Communications With Tabletop Treasures
If you contact us, submit a support request, complete a contact form, or otherwise communicate with us, we may collect:
- your name;
- email address;
- subject or category of your inquiry;
- the contents of your message;
- attachments or other information you voluntarily provide; and
- records of our communications with you.
1.6 Technical and Usage Information
When you access the Site, certain information may be collected automatically by Tabletop Treasures or service providers acting on our behalf. This may include:
- Internet Protocol (IP) address;
- browser type;
- device type;
- operating system;
- approximate geographic information derived from IP address;
- pages viewed;
- links clicked;
- dates and times of access;
- referring website or domain;
- landing page;
- session information;
- cookie or similar technology identifiers;
- Site errors or performance information; and
- other information relating to how the Site is used.
We may use this information to operate, secure, analyze, and improve the Site.
Installable app and browser storage. The Site can be installed to your device's home screen. To support this, it uses a "service worker" that stores parts of the Site on your device, such as app code, icons, and an offline page, so it loads quickly and can tell you when you're offline. It does not store your account data or messages. The Site also keeps small amounts of information in your browser's local or session storage to make features work, such as a deck you are building before you sign in.
1.7 Acquisition and Referral Information
Tabletop Treasures may collect information that helps us understand how visitors discover the Site. This may include:
- referring website or platform;
- search-engine referral;
- organic-search traffic source;
- campaign identifiers;
- UTM parameters;
- convention or event referral identifiers;
- QR-code campaign identifiers;
- social-media referral information;
- advertising campaign identifiers, where applicable; and
- the first page through which you entered the Site.
For example, this information may help us understand whether users discovered Tabletop Treasures through organic search, a social-media post, a convention, or another marketing effort. Where technically available, Tabletop Treasures may associate first-touch acquisition information with an account after registration so that we can evaluate the effectiveness of our outreach, marketing, and search-engine optimization efforts. We may also use session-level attribution information to understand how users later return to the Site.
1.8 Marketing Preferences
If Tabletop Treasures offers optional marketing communications, we may collect your preference regarding whether you wish to receive them. Agreeing to receive promotional or marketing communications is separate from accepting the Website Terms of Use or receiving communications necessary to operate your account.
1.9 Purchases and Orders
When you buy something through the Shop, whether signed in or as a guest, we collect:
- your name, email address, and shipping address;
- the items you ordered, prices, discounts, shipping, taxes, and totals;
- order, shipping, tracking, cancellation, and refund records; and
- for signed-in Players, purchase XP earned on the order.
Payments are processed by our payment processor, Stripe. Your card details are entered directly with Stripe; Tabletop Treasures does not receive or store your full card number. We receive payment confirmations and limited payment information from Stripe, such as the payment status and an identifier for the payment.
1.10 Selling in the Shop
Business Accounts and Players may open a store and sell through the Shop. If you do, we collect your store details, product listings, product photos, prices, inventory, and records of your orders, shipments, shipping labels, and refunds. Actions taken in a store, such as shipping an order or issuing a refund, are recorded in an activity log that includes the email address of the account that took the action.
1.11 Messages and Community Features
When you use the Site's community features, we collect the information involved, including:
- messages you send to and receive from other players, and messages stores send to their patrons;
- Companion requests and connections, event invitations, and players you block;
- events you save, plan to attend, or check in to, and feedback surveys you complete;
- decks you build, along with the visibility you choose for each one; and
- your choices about who can find you, message you, or see your calendar.
1.12 Notification Settings and Devices
We collect your notification preferences, such as which emails, text messages, and push notifications you want to receive. If you provide a phone number for text-message options, we treat it as private account information. If you turn on push notifications on a device, your browser gives us a push address and encryption keys for that device, which we store with a short description of the browser or device. We use them only to deliver the notifications you turned on.
02 How We Use Information
Tabletop Treasures may use personal information for the following purposes.
2.1 Provide and Maintain the Site
We may use information to:
- create and maintain your account;
- authenticate you;
- provide your My Character experience;
- save your preferences;
- maintain account settings;
- provide available Site functionality; and
- respond to actions you request.
2.2 Secure Accounts and the Site
We may use information to:
- verify email addresses;
- authenticate account access;
- process password resets;
- assist with account recovery;
- detect suspicious activity;
- prevent fraud or abuse;
- enforce Site restrictions;
- investigate security incidents; and
- protect Tabletop Treasures, our users, and others.
2.3 Personalize Your Experience
We may use information such as selected games, play preferences, and voluntarily provided ZIP code to tailor available portions of the Site to your interests or location.
2.4 Communicate With You
We may use your email address to send necessary service or account communications, such as:
- email verification;
- password-reset communications;
- account-recovery communications;
- security notices;
- notification of changes to your email address;
- material account-status notices; and
- other communications reasonably necessary to provide functionality you use.
If you choose to receive them, we also send notifications by email or as push notifications on your devices about new messages, Companion requests, event invitations and reminders, feedback surveys, and order updates (for example, when an order ships, or when your store receives an order). You control these in your notification settings. Tabletop Treasures does not intend to send an email merely to duplicate every action or status already available within your account. Additional notification types may be added as Site functionality expands and this Privacy Policy may be updated accordingly.
2.5 Analytics and Site Improvement
We may analyze usage information to:
- understand how people use the Site;
- identify popular or underused functionality;
- improve usability;
- diagnose technical problems;
- measure Site performance;
- understand account-registration and return behavior; and
- guide future development.
2.6 Search-Engine and Marketing Effectiveness
We may use referral, campaign, and analytics information to understand:
- which search engines or websites send visitors to TT;
- how organic-search traffic performs;
- which landing pages attract visitors;
- which campaigns lead to account creation;
- whether convention or event outreach produces new users;
- whether social-media activity generates Site engagement; and
- whether investments in marketing and search-engine optimization are effective.
This information may be analyzed at both aggregate and account-attribution levels where technically available and legally permitted.
2.7 Respond to You
We may use information submitted through contact or support channels to:
- respond to questions;
- resolve account issues;
- provide support;
- investigate complaints; and
- maintain appropriate records of our communications.
2.8 Marketing
If you choose to receive promotional communications, we may use your contact information to provide news, updates, promotions, or other Tabletop Treasures communications. You may withdraw from optional marketing email at any time through an unsubscribe link or available communication settings. Withdrawing from marketing does not prevent us from sending necessary account, security, or service-related communications.
2.9 Legal and Business Purposes
We may use information when reasonably necessary to:
- comply with applicable law;
- respond to lawful legal process;
- establish, exercise, or defend legal claims;
- enforce our agreements;
- investigate misuse;
- protect rights, safety, and property;
- maintain business records; and
- complete a lawful corporate transaction.
2.10 Process Purchases
We use order information to take payment, fulfill and ship orders, provide tracking, process cancellations and refunds, calculate and report taxes, prevent fraud, keep accounting records, and award purchase XP.
04 Search Analytics
Tabletop Treasures may use search-engine analytics tools, including services such as Google Search Console or similar services, to understand the performance of TT pages in search results. Such tools may provide aggregated information such as:
- search queries that caused TT pages to appear;
- search impressions;
- clicks;
- click-through rates;
- approximate search position; and
- pages receiving search traffic.
Search-engine reporting may not identify the precise search phrase used by an individual registered Character. Tabletop Treasures may combine aggregate search-performance information with Site analytics to evaluate the effectiveness of search-engine optimization efforts.
05 How We Disclose Information
Tabletop Treasures does not disclose personal information indiscriminately. We may disclose information in the following circumstances.
5.1 Service Providers
We may provide information to vendors or contractors that perform services on our behalf, such as:
- website hosting;
- cloud infrastructure;
- authentication;
- email delivery;
- analytics;
- security;
- spam prevention;
- customer support;
- database management;
- payment processing;
- shipping labels and package tracking; and
- other technical or operational services.
Our current providers include Vercel (website hosting), Supabase (database, sign-in, and file storage), Resend (email delivery), Stripe (payment processing), and Shippo (shipping labels, which requires the recipient's name and shipping address). Push notifications are delivered through the push service run by your browser or device maker, such as Apple, Google, or Mozilla; the content of each notification is encrypted for your device. Location searches use the U.S. Census Bureau's public geocoding service as described in Section 1.4. These providers may access information only as reasonably necessary to provide services to Tabletop Treasures and are subject to their applicable contractual or legal obligations.
5.2 At Your Direction
We may disclose information when you direct us to do so or when disclosure is necessary to carry out an action you request. For example:
- Sellers. When you place an order, we share your name, shipping address, email address, and the details of your order with each store you bought from, which may be Tabletop Treasures, a Business Account, or a Player selling through the Shop, so it can ship and support your order. Sellers may use this information only to fulfill and support that order.
- Other users. Messages, Companion requests, and event invitations are shared with the people you send them to. Information you choose to make visible, as described in Section 7, is shared accordingly.
5.3 Legal Requirements and Protection
We may disclose information if we reasonably believe disclosure is necessary to:
- comply with applicable law;
- respond to lawful subpoenas, court orders, or government requests;
- investigate fraud or abuse;
- enforce our agreements;
- protect the rights or safety of Tabletop Treasures, users, or others; or
- establish or defend legal claims.
5.4 Business Transactions
If Tabletop Treasures is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, information may be disclosed or transferred as part of that transaction subject to applicable law.
5.5 Aggregated or De-Identified Information
We may use or disclose information that has been aggregated or reasonably de-identified so that it is not reasonably linked to an identifiable individual. For example, TT may report that a particular convention generated a certain number of account registrations without identifying the individual users.
06 Sale and Sharing of Personal Information
Tabletop Treasures does not intend to sell personal information to third parties in exchange for money. Certain privacy laws use terms such as "sale," "sharing," or "targeted advertising" more broadly than ordinary usage and may treat some advertising or analytics practices as regulated disclosures. If Tabletop Treasures engages in practices that trigger applicable opt-out or disclosure requirements, we will provide the notices and choices required by applicable law. Where legally required, Tabletop Treasures will honor applicable recognized browser-based opt-out preference signals.
07 Public and Private Account Information
Your account contains information with different privacy characteristics.
7.1 Private Account Information
Information such as the following is treated as private account information and is not intended to be publicly displayed:
- email address;
- password or authentication information;
- saved ZIP code and phone number;
- shipping addresses and order details, except as shared with the Sellers you buy from;
- security information; and
- other information designated as private within the Site.
7.2 Character Identity
Your Character Name and Handle identify your TT Character. They may be displayed in portions of the Site where identifying the user is necessary or appropriate to the functionality being used. Your email address is not displayed alongside your Character Name or Handle.
Each Player has a public profile page showing their Character Name, Handle, and game interests. Depending on the settings you choose, other players may also see:
- that you are open to connecting with players who share your interests;
- that you have saved or plan to attend an event;
- your event calendar, if you share it with your Companions; and
- decks you mark as public, or decks you share by link.
You can change these settings at any time. If you open a store, its name appears as the seller on your products.
7.3 Business Profile Information (Public by Design)
A Business Account's profile page is intentionally public. Information displayed there may include:
- business name and Handle;
- hosted-games list;
- business address, city, state, and ZIP code;
- business phone number;
- business website address; and
- business social-media links.
Storefront pages for stores in the Shop, including stores run by Players, are also public and show the store's name, description, logo, and products.
A field left blank by the Business Account is not displayed. A Business Account's login email address and authentication information remain private and are not displayed on its public profile. Business Accounts can add, edit, or remove this information at any time through available account settings.
08 Data Retention
Tabletop Treasures retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- maintain an active account;
- provide requested Site functionality;
- maintain security;
- resolve disputes;
- enforce agreements;
- satisfy legal or accounting requirements; and
- maintain legitimate business records.
Retention periods may vary depending on the type of information and reason it was collected. When information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it. Some information may remain temporarily in backup systems or be retained where required or permitted by law.
8.1 When You Delete Your Account
You can delete your account yourself from Account Settings. When you do:
- Deleted right away: your profile, profile picture, preferences, Companions, saved and attended events, check-ins, survey responses, decks, notification settings and devices, and other account content.
- Messages: people you have exchanged messages with continue to see those conversations, with you shown as "Deleted user," and they cannot reply. So that we can respond to lawful requests, such as a subpoena, we keep your messages linked to a sealed record containing your former account identifier, email address, and deletion date. Only Tabletop Treasures administrators can access this record. The record and those messages are deleted automatically one (1) year after your account is deleted, unless we are legally required to keep them longer.
- Purchases: order records are kept for accounting and tax purposes, with your name, email address, and street address removed. We keep the state, ZIP code, and country of the shipping address for sales-tax records. If an order has not shipped yet, its shipping details are kept until it ships, so it can be delivered, and are then removed. You can cancel unshipped orders for a refund before deleting your account.
- Stores: if you run a store, you must ship, or cancel and refund, all of its open orders first. Your store is then closed and its products and events are removed. Records of its past orders are kept for accounting.
Payment and shipping providers, such as Stripe and Shippo, keep their own records of transactions under their own privacy policies and legal obligations.
09 Data Security
Tabletop Treasures uses reasonable administrative, technical, and organizational safeguards intended to protect personal information. Depending on the information and systems involved, safeguards may include:
- encrypted communications;
- secure authentication;
- password hashing;
- access controls;
- monitoring and logging;
- backups;
- service-provider security controls; and
- other reasonable security measures.
No website, network, storage system, or method of electronic transmission can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your password and for notifying Tabletop Treasures if you believe your account has been compromised.
10 Your Privacy Choices
You may be able to manage certain information directly through your account. Depending on available Site functionality and your account type, you may:
- update your Character Name or business name;
- change your Handle;
- update your email address;
- change your password;
- change game preferences or your hosted-games list;
- update or remove your ZIP code (Player accounts) or your business address, phone, website, and social-media links (Business accounts);
- choose which email, text-message, and push notifications you receive, and turn push notifications on or off for each device;
- control who can find you, message you, and see your calendar, and set the visibility of each deck;
- allow or deny the Site access to your device's location through your browser;
- manage optional marketing preferences; and
- delete your account from Account Settings, as described in Section 8.1.
11 Privacy Rights
Depending on where you live and which laws apply to Tabletop Treasures, you may have certain rights regarding your personal information. These may include the right to:
- request access to certain personal information;
- request information about how personal information is used or disclosed;
- request correction of inaccurate personal information;
- request deletion of certain personal information;
- obtain a portable copy of certain information;
- opt out of certain sales, sharing, or targeted advertising activities where applicable;
- limit certain uses of sensitive personal information where applicable;
- withdraw consent where processing depends on consent;
- appeal certain decisions regarding a privacy request where applicable; and
- exercise applicable privacy rights without unlawful discrimination.
Not every right applies in every jurisdiction or circumstance. Tabletop Treasures may need to verify your identity before fulfilling certain requests. To submit a privacy request, contact tabletoptreasuresllc@gmail.com or use another privacy-request mechanism made available through the Site. Authorized agents may submit requests where permitted by applicable law and subject to appropriate verification.
12 Children's Privacy
Tabletop Treasures accounts are intended for individuals who are at least thirteen (13) years old. Tabletop Treasures does not knowingly intend to collect personal information through registered accounts from children under 13. Account registration may require the user to confirm that they are at least 13 years old. If Tabletop Treasures learns that a particular account belongs to a child under 13 and we have collected personal information from that child without legally sufficient authorization, we may suspend or close the account and take appropriate steps to delete the child's personal information unless retention is legally required. A parent or legal guardian who believes that a child under 13 has provided personal information to Tabletop Treasures may contact us at tabletoptreasuresllc@gmail.com. Tabletop Treasures may request information reasonably necessary to verify the request.
13 Users Under the Age of Legal Majority
Users who are at least 13 but have not reached the age of legal majority where they live should use Tabletop Treasures with the involvement and permission of a parent or legal guardian as described in our Terms of Use.
14 Third-Party Websites
The Site may contain links to websites or resources operated by third parties. This Privacy Policy does not govern third-party websites, services, businesses, or platforms. Tabletop Treasures is not responsible for the privacy practices of third parties. You should review the privacy policies of third parties before providing personal information to them.
15 International Users
Tabletop Treasures is based in the United States. If you access the Site from outside the United States, information may be transferred to, stored in, or processed in the United States or other locations where Tabletop Treasures or its service providers operate. Applicable privacy protections may differ from those in your country of residence. Where required, Tabletop Treasures will use legally appropriate mechanisms for international transfers of personal information.
16 Changes to This Privacy Policy
Tabletop Treasures may update this Privacy Policy as our Site, business, technology, or legal obligations change. When we update the Policy, we will revise the "Last Updated" date. If changes materially affect how we collect, use, or disclose personal information, we may provide additional notice through the Site, email, or another appropriate method. Where applicable law requires consent to a new practice, we will request that consent before applying the practice.
17 Contact Tabletop Treasures
If you have questions about this Privacy Policy, privacy practices, or a privacy request, contact:
Tabletop Treasures, LLC
Privacy Email: tabletoptreasuresllc@gmail.com
General Contact: tabletoptreasuresllc@gmail.com or our Contact page