Privacy Policy

Last updated: July 16, 2026

Top Deck Cards ("we", "us", "our") is operated by Top Deck Cards, a sole proprietorship based in London, Ontario, Canada. This policy explains what personal information we collect when you place an order on topdeckcards.ca, how we use it, and the choices you have.

We are committed to handling your information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. What we collect

We collect only what's needed to process your order and stay in touch about it.

Information you give us at checkout — your name, email address, phone number (optional), shipping address (only if you choose shipping), and any notes you send with the order.
Order contents — the list of cards ordered, their prices, and the order total.
Anti-spam signals — if our bot-detection trigger fires on a submission, we log the IP address and browser identifier of that request for security purposes only.
Local-only browser storage — your cart is stored in your browser's localStorage so it survives reloads; this never leaves your device.
Usage analytics — we use Google Analytics to understand how the site is used (pages and cards viewed, add-to-cart, checkouts, and completed orders — order number, total, and items, never your name or address). This sets first-party cookies that store a random identifier, and may associate your visit with advertising audiences (see the Cookies section below).

2. How we use your information

To confirm your order, send payment instructions, and notify you of shipping or pickup.
To contact you if there's a problem with your order (e.g., an item sold out before payment arrived).
To keep accurate sales records for tax and recordkeeping purposes.
To understand how the site is used and to support our marketing, using Google Analytics and its advertising-audience features.

We do not sell your personal information. We do use Google Analytics, including its advertising-audience features (Google Signals), so Google may associate your visit with remarketing audiences under its own policies — you can opt out (see the Cookies section below).

3. Who we share information with

We share data only with the service providers needed to run the store. Each has its own privacy practices, which apply to any data they process on our behalf:

Cloudflare, Inc. — website hosting, content delivery, transactional email delivery, and our order database. Your order details (name, contact info, shipping address, items, and totals) are stored in Cloudflare's D1 database. Cloudflare may also process technical information (IP address, request headers) as part of normal web hosting.
Scryfall — card images and gameplay metadata shown on the site are loaded directly from Scryfall's public card database. No customer information is sent to Scryfall.
Google LLC (Google Analytics 4) — we use Google Analytics, delivered through Cloudflare Zaraz, to measure traffic, understand which cards and pages are popular, and build advertising audiences (Google Signals) for our own marketing. Google receives a randomly-generated identifier and technical data (approximate location from IP address, device and browser type). We do not send Google your name, email, or address. Google processes this data under its own privacy policy.
Stripe, Inc. — credit-card payments are processed by Stripe. Your card details are entered directly into Stripe's secure payment fields and are never seen or stored by us. Stripe handles your card and billing information under its own privacy policy.
Interac — Interac e-Transfer payments are made through your own bank to an account held at TD Canada Trust. Your bank will handle payment information per its own privacy terms.

4. Cookies and similar technologies

We use a small number of cookies:

Strictly necessary — Cloudflare sets a security cookie (cf_clearance) to protect the site from bots. Required for the site to work.
Analytics — Google Analytics, delivered through Cloudflare Zaraz, sets first-party cookies (cfz_google-analytics_v4 and cfzs_google-analytics_v4) that store a random identifier so we can count visits and sessions.
Advertising audiences — the same Google Analytics setup (Google Signals) may associate your visit with advertising audiences Google uses for remarketing.

Your cart is kept in localStorage (client-side only), not a cookie. You can opt out of Google's ad personalization at Google Ads Settings or install the Google Analytics opt-out add-on, and you can block or clear cookies in your browser settings — the site still works without the analytics ones.

5. How long we keep your information

Order records (name, email, address, items, totals, order timestamps) are retained for seven (7) years so we can honour returns, handle warranty claims, and meet tax recordkeeping obligations. Cart data stored in your browser is yours to clear at any time via your browser's site-data settings.

6. Your rights

Under PIPEDA you have the right to access the personal information we hold about you, request corrections, or request deletion (subject to legal retention obligations for completed sales). To exercise any of these rights, email orders@topdeckcards.ca from the address used to place your order. We aim to respond within 30 days.

7. Security

We use industry-standard transport encryption (HTTPS) for all traffic to this site. Our order database (Cloudflare D1) sits behind access-controlled Cloudflare infrastructure, and administrative access is protected by two-factor authentication. Despite reasonable safeguards, no online service can guarantee absolute security.

8. Children

The site is not directed to children under the age of majority in your province or territory. We do not knowingly collect personal information from minors without parental consent.

9. Changes to this policy

If we update this policy, we'll change the "Last updated" date at the top. Material changes (e.g., new categories of data collection, new service providers handling customer data) will be announced at the top of the site for at least 14 days.

10. Contact

Questions or privacy requests: orders@topdeckcards.ca
Mail: 64 Virginia Cres, London, Ontario, N5X 3E8