Last updated: August 5, 2026
This Privacy Policy explains what information Outpost ("we," "us," or "our") collects when you use the website at outpost.cards and related services (the "Service"), why we collect it, how we use it, who can see it, and the choices you have. Outpost is operated by Outpost Cards LLC.
This policy applies only to information collected through this website. By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
In plain terms, this notice tells you:
1. What information we collect from you, how we use it, and who can see it.
2. The fact that we do not sell or rent your information.
3. What choices and control you have over your information.
4. The steps we take to protect it, and how you can correct or delete it.
Outpost is a local marketplace for Magic: The Gathering cards. To make it work, we collect the information you give us (like your email, display name, ZIP code, and a contact method) and use it mainly to run your account, show your listings to nearby users, and let buyers reach you. Your chosen contact method is shown to other logged-in users on purpose, that is how deals happen. We do not sell or rent your personal information to anyone. The sections below give the details.
We only collect information that you give us or that is needed to run the Service. That includes:
Account information. When you sign up, we collect your email address, a password, and a display name. Passwords are handled by our authentication provider (Supabase) and are stored in hashed form; we do not see or store your plain-text password.
Profile information. To power local search and let buyers reach you, we collect:
Listing information. When you list a card, we collect the card details, condition, price, and quantity you provide.
Card data (not about you). We display Magic card information and images pulled from the Scryfall API to help identify cards. This is card reference data, not personal information about you.
Automatically collected usage data. We use Vercel Analytics, a privacy-friendly analytics tool that does not use cookies and does not track you across other sites. It collects aggregated, limited technical information (such as page views and general device or browser type) to help us understand how the Service is used. Our hosting and infrastructure providers may also process standard technical data, such as IP addresses, as part of delivering and securing the Service.
We do not collect payment card numbers, bank details, or other financial account information, because Outpost never processes payments. All money changes hands directly between users, off-platform.
We use the information we collect to:
We want to be completely clear about this: Outpost does not sell, rent, trade, or otherwise hand over your personal information to third parties for their own marketing, advertising, or commercial purposes. We have no advertisers, we do not run ad networks, and we do not make money by sharing your data.
Specifically, we do not:
Your information goes to only two places: (1) to other Outpost users, in the limited ways described in Section 5 (mainly your public listings and the contact method you choose to display), and (2) to the small set of service providers that help us operate the Service, described in Section 6, who are only permitted to use it to provide their service to us. That is it.
Outpost is a marketplace, so some of your information is shown to others by design:
Your contact information is shown to other logged-in users so they can arrange a transaction with you. This is the core function of the Service. Only share a contact method you are comfortable giving to other users. If you do not want a particular contact detail visible, do not enter it.
We are not responsible for how other users treat information you make available through the Service. Please review the safety guidance in our Terms of Service before arranging any meetup.
We share information only with the providers that help us run Outpost, and only so they can perform their service for us. They are not permitted to use your information for their own purposes. These providers are:
These providers process data on our behalf or under their own terms and privacy policies. We do not control, and are not responsible for, their independent practices. We encourage you to review their policies.
We may also disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, or property of Outpost, our users, or the public.
The Service may contain links to other websites, and users may list contact methods (such as a Discord username) that lead you off Outpost. We are not responsible for the content or privacy practices of any site or platform we do not operate. When you leave Outpost, we encourage you to read the privacy policy of any site that collects your information.
Outpost aims to be low-tracking. We use Vercel Analytics, which does not use cookies and does not follow you across other websites. Our authentication provider may use essential, first-party storage (such as a session token) needed to keep you logged in. We do not use third-party advertising cookies or cross-site tracking.
We keep your information for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we need to retain certain data to comply with legal obligations, resolve disputes, prevent abuse, or as retained in routine backups for a limited time.
We take reasonable steps to protect your information, and we rely on the security practices of established providers like Supabase and Vercel, including encryption of data in transit over HTTPS. You can confirm a secure connection by looking for "https" and the lock icon in your browser's address bar.
No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You play a part too: please keep your password confidential, use a strong and unique password, and contact us right away if you believe your account has been compromised.
You have control over your information. At any time you can:
For any request you cannot complete yourself, contact us and we will help.
If you are a California resident, you have the right to:
We do not sell or "share" (as those terms are defined under California law) your personal information for cross-context behavioral advertising. To make a request, contact us at the address in Section 15. We will verify your request using the information associated with your account.
The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.
Outpost is based in the United States, is directed to a United States audience, and stores and processes all information in the United States. We do not target or market the Service to people outside the United States.
We do not restrict who can create an account, so it is possible to sign up from outside the United States. If you access or use the Service from outside the U.S., you do so on your own initiative and at your own risk. You are responsible for complying with any laws that apply where you are located, and you understand and agree that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. If you do not want your information handled this way, please do not use the Service.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and take reasonable steps to notify users. Your continued use of the Service after changes take effect means you accept the updated policy.
Questions, concerns, or requests about your privacy? Contact us at:
support@outpost.cards
Outpost Cards LLC
We are committed to handling your personal information responsibly and keeping it confidential, consistent with this policy.