Last updated September 14, 2026

Privacy Notice

This notice covers tcgtapi.com account registration, sign-in, USPS shipper profiles, address verification, and billing. It is written for US visitors.

Information we collect

• Account email, password hash, and email one-time codes for verification and two-factor sign-in.
• Shipper identity you enter: name, company, phone, and return address.
• Technical logs: IP address, user agent, timestamps, and security events.
• Addresses you submit for verification, plus cached standardized results and operator overrides.
• Wallet and billing ledger rows for funding and API usage.
• Files you later store for postage (stamp PDFs) keyed to your account.

How we use it

• Create and secure your account, including email 2FA.
• Approve or suspend access, prevent fraud, and meet legal duties.
• Issue postage and keep an audit trail when that product is enabled.

Sharing

We may share information with USPS, the address-verification provider, payment processors, or law enforcement when required to provide the APIs, collect funds, or respond to lawful requests. We do not sell personal information or share it for cross-context advertising.

Retention

Account, shipper, and postage records are kept as long as needed to operate the service, reconcile funds, and meet postal or tax recordkeeping. You may request access or deletion where the law allows; postage and fraud records may be retained longer.

Security

Passwords are stored as salted hashes. Session cookies are HTTP-only. No method is perfectly secure.