Privacy Policy

1. Who we are

Tauros Trading Company ("we," "us," or "our") is a small business based in Colorado, operating at taurostrading.com. We sell Pokemon trading cards, sealed products, 3D printed items, and handmade crafts.

Questions about this policy: privacy@taurostrading.com

2. Information we collect

When you place an order

We collect your name, email address, and shipping address to fulfill your order. Payment information (card number, CVV) is entered directly into Stripe's secure form and is never transmitted to or stored on our servers.

When you create an account

We store your display name, email address, and a hashed (non-reversible) version of your password. We never store your password in plain text.

Automatically collected information

When you visit our site we log your IP address, the page you visited, your device type (mobile, tablet, or desktop), and referring website. This information is used only for internal analytics and is automatically deleted after 90 days. We do not sell, share, or use this data for advertising.

3. Cookies and local storage

We use a small number of cookies and browser local storage entries to operate the site. These are described below.

Session and cart cookies are essential to operating the site and cannot be declined. You may opt out of analytics tracking via the cookie banner or the cookie settings link below. Local storage is cleared when you clear your browser data.

4. Third-party services

We use the following third-party services to operate this site. Each has its own privacy policy governing how they handle data.

Stripe (payment processing)

All payment card information is collected and processed by Stripe, Inc. When you check out, you are submitting your payment details directly to Stripe. We receive only a confirmation of payment success and your order total. Stripe may set cookies for fraud prevention.
Privacy policy: stripe.com/privacy

Shippo (shipping and labels)

We use Shippo to calculate shipping rates and purchase postage. When you enter a shipping address, it is transmitted to Shippo to obtain rate quotes and, after purchase, to generate a shipping label. Shippo receives your name and address for this purpose.
Privacy policy: goshippo.com/privacy

Cloudflare Turnstile (bot protection)

We use Cloudflare Turnstile on the account registration form to distinguish human users from automated bots. Turnstile may collect browser signals including IP address and browser characteristics. It does not use behavioral tracking cookies.
Privacy policy: cloudflare.com/privacypolicy

Google Fonts (typography)

Our site loads fonts (Zilla Slab, Public Sans, IBM Plex Mono) from Google's servers. When your browser requests these fonts, Google may receive your IP address and browser information.
Privacy policy: policies.google.com/privacy

ip-api.com (geolocation)

When you visit the site, your IP address may be sent to ip-api.com to determine your approximate country and region for internal analytics. No personally identifying information is shared beyond the IP address. Results are cached and not linked to your account.
Terms: ip-api.com/docs/legal

pokemontcg.io (card data)

We use the Pokémon TCG API to retrieve card images and pricing data. Your IP address may be logged by this service when card images are loaded on product pages.
pokemontcg.io

5. How we use your information

We use your information solely to:

• Process, fulfill, and ship your orders
• Send order confirmation and shipping notifications
• Maintain your account
• Prevent fraud, abuse, and spam
• Understand which pages are popular so we can improve the site

We do not sell your personal information. We do not use your information for targeted advertising. We do not share your information with third parties except the service providers listed above, who are bound by their own privacy policies.

6. Your Colorado privacy rights

If you are a Colorado resident, the Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., grants you the following rights:

• Right to know — You may request a copy of the personal information we hold about you.
• Right to correct — You may request correction of inaccurate personal information.
• Right to delete — You may request deletion of your personal information, subject to legal retention requirements (such as tax records).
• Right to data portability — You may request your personal information in a portable, machine-readable format.
• Right to opt out — You may opt out of the processing of your personal information for targeted advertising or the sale of personal data. We do not engage in either of these activities.

To exercise any of these rights, email privacy@taurostrading.com with the subject line "Colorado Privacy Request." We will respond within 45 days as required by the CPA. We will not discriminate against you for exercising these rights.

If you believe we have not adequately addressed your privacy rights, you may file a complaint with the Colorado Attorney General at coag.gov.

7. Data retention

Order records (name, address, items purchased) are retained for 7 years to comply with federal and state tax and accounting requirements. Account information is retained until you request deletion. Analytics (page views, IP, device type) are automatically deleted after 90 days. Cart reservation data is deleted after 30 minutes of inactivity.

8. Data security

We implement industry-standard security measures to protect your information, including encrypted connections and secure password storage. No internet transmission is 100% secure; we cannot guarantee absolute security but take reasonable precautions to protect your information.

9. Children's privacy

Our site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

Tauros Trading Company
Colorado
Email: privacy@taurostrading.com