← Back to BEAUZAAR

Privacy policy

Last updated: July 27, 2026

BEAUZAAR ("we," "us") operates https://thebeauzaar.com and related websites and apps. This policy describes how we collect, use, and share information across our services.

Sign-in with Google

Some BEAUZAAR services (including TCGzaar, Tagzaar, and future BEAUZAAR apps) let you sign in with Google. When you do, we receive information from your Google account such as your name, email address, and profile picture, as permitted by your Google account settings. We use this to create and manage your account, authenticate you, and provide our services.

Google's use of your data is governed by Google's Privacy Policy. Authentication is handled through Supabase on our behalf.

https://thebeauzaar.com waitlists

When you join a product waitlist on https://thebeauzaar.com, we collect your email address and which product you are interested in (TCGzaar or Tagzaar). We use this to send you a one-time email when that product launches. We do not use waitlist emails for unrelated marketing.

Waitlist signups are stored in a Supabase database (hosted in the United States). We keep your email until we send the launch notification for that product, or until you ask us to delete it — whichever comes first. Waitlist email addresses are not sent to PostHog.

TCGzaar

TCGzaar (tcgzaar.com) is inventory and fulfillment software for TCGplayer sellers, operated by BEAUZAAR. If you use TCGzaar, we also collect and process:

  • Account data: seller type, onboarding status, subscription tier and status, Stripe customer and subscription identifiers, and promo code attribution
  • Inventory and operations: TCGplayer product identifiers, card names, quantities, conditions, prices, physical storage locations, import filenames, pull-sheet history, audit and repricing data, and related fulfillment records
  • Support: ticket subject, category, status, and message content when you contact us through in-app support
  • Technical data: a beta access cookie (tcgzaar_beta), session storage flags, and anonymous usage analytics via Vercel Analytics

TCGzaar does not connect to TCGplayer's API. Inventory and order data comes from CSV files you upload. You are responsible for complying with TCGplayer's own terms and policies. BEAUZAAR is not affiliated with or endorsed by TCGplayer.

Large imports may be stored temporarily in Supabase Storage. If you are on the free tier and do not sign in for an extended period (typically 60 days), we may archive your inventory data to cold storage and clear active database records. Archived data may be restored automatically when you return.

Tagzaar and future products

Tagzaar and other BEAUZAAR products listed on this site may not yet be available. When we launch them, we will describe product-specific data practices in updates to this policy.

Payment information

Paid TCGzaar subscriptions are processed by Stripe. We do not store your full payment card number. Stripe collects and processes payment details according to Stripe's Privacy Policy. We receive billing metadata such as subscription status and the last four digits of your card where Stripe provides it.

Service providers

We use trusted providers to operate our services, including:

  • Supabase — authentication, database, file storage, and related infrastructure
  • Stripe — subscription billing and customer portal
  • Google — OAuth sign-in
  • Vercel — website hosting
  • PostHog — product and web analytics on https://thebeauzaar.com (autocapture, heatmaps, and Web Vitals), using a pseudonymous browser/device ID rather than your real-world identity

These providers process data on our behalf under their own privacy policies and contractual obligations.

Cookies and analytics

On https://thebeauzaar.com, we use PostHog (US Cloud) for product and web analytics. Browser events are sent through a first-party /ingest proxy to PostHog. This includes frontend autocapture, heatmaps, and Web Vitals. Session recording and automatic client exception capture are turned off. We do not call posthog.identify, and we do not send email addresses to PostHog, so PostHog does not receive your real-world identity from this site. PostHog may still assign a pseudonymous distinct ID for your browser or device, and cookies or similar browser storage may retain that ID so a returning browser can be recognized across visits. This is not advertising or retargeting.

Separately from our custom event properties, PostHog automatically receives technical metadata with analytics events. That can include your IP address; IP-derived approximate location (which may include country, region, city, and approximate coordinates); browser, browser version, language, operating system, and device type; the current page URL and referring URL; screen and viewport dimensions; timestamps; and pseudonymous device, session, window, and pageview identifiers. We use this metadata for traffic attribution, device and browser reporting, geographic summaries, site usage, and performance measurement.

Custom waitlist analytics events include only the product you signed up for and, on failure, a generic closed reason code. Custom outbound-link event properties include only stable identifiers such as channel, shop, platform, or product — they omit destination URLs and display labels. That does not change PostHog's automatic page metadata, which may still include the current page and referring URLs described above. Waitlist emails remain in Supabase and are not sent to PostHog.

Vercel hosts https://thebeauzaar.com. We do not use Vercel Analytics or Vercel Speed Insights on this site.

TCGzaar may set a short-lived cookie to verify private beta access. We may use session storage for temporary in-app state. If we add other tracking tools, we will update this policy.

Your choices and deletion

You can manage TCGzaar billing through the Stripe Customer Portal in Settings. For account deletion, waitlist removal, or other data requests, email contact.beauzaar@gmail.com. Launch emails include instructions to opt out of future BEAUZAAR marketing messages.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above will change when we do. Continued use after changes means you accept the revised policy.

Contact

Questions about this policy or your data: contact.beauzaar@gmail.com

See also our terms of service.