Privacy Policy

XPGames is a video-game buyback business based in Whitby, Ontario, serving the Durham region and the Toronto GTA. This policy describes what we collect when you use xpgames.ca and how we use it.

If you have questions about anything in this policy, email us at xpgames4less@gmail.com.

We collect three buckets of information:

• Account info: your email and password (or your Google account, if you sign in with Google). Used to let you log back in and see your submission history.
• Submission info: your name, phone, shipping or pickup address, the items you're selling, any photos you upload, and any optional notes you write. We need this to pay you and to send your shipment / arrange your pickup.
• Basic technical data: your IP address and browser type, as part of normal web server logs and to keep your login session active. We don't run analytics trackers or advertising cookies.

• Credit-card or bank information. Payment goes out as Interac e-Transfer or cash on pickup, handled outside this website.
• Government IDs or anything related to identity verification.
• Anything we don't actually need to complete your buyback.

• To process your submission and quote it accurately.
• To contact you about your submission, by email, phone, or pickup-time confirmation.
• To send you the final pricing email after we receive your items.
• To pay you out by e-Transfer.
• To keep your account secure and let you log back in.

We don't use your information for marketing, retargeting, ad networks, or profile-building. We don't sell or rent it to anyone, ever.

We use a few well-known service providers to actually run the website. They see the minimum needed to do their job and are bound by their own privacy policies:

• Supabase: stores your account, submissions, and photos. Hosted in the United States.
• Vercel: hosts the website and processes web requests. Hosted in the United States.
• Resend: sends you transactional email (account verification, final-pricing emails). Hosted in the United States.
• Google: handles “Sign in with Google” if you choose that option. Google sees only that you signed into XPGames; we see your email and name.

We don't share your data with anyone else, except where the law requires (e.g. a court order).

We use a small number of essential cookies to keep you signed in and to remember your shopping batch between page loads. We do not use analytics cookies, advertising cookies, or third-party trackers. You can clear cookies from your browser settings at any time; if you do, you'll be signed out.

We keep your account and submission history as long as your account is active. If you ask us to delete your account, we remove your personal information and the submissions tied to it from our active records within ~30 days. We may keep anonymized transaction records (e.g. “a Switch was bought on this date for $X”) for our own bookkeeping.

Photos uploaded with a submission are removed when the submission itself is deleted.

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:

• Know what information we hold about you.
• Get a copy of it.
• Correct anything that's wrong.
• Ask us to delete your account and personal information.
• Withdraw consent at any time (we'll let you know what that affects).

To exercise any of these, email us at xpgames4less@gmail.com from the address on your account. We aim to respond within 5 business days.

We use HTTPS for everything, store passwords salted and hashed (handled by Supabase Auth), and only allow logged-in admin staff access to submission records. No system is perfectly secure, but we take reasonable steps to keep your data safe and we don't collect more than we need in the first place.

XPGames is not directed at children under 14. If you're under 14, please don't create an account. Ask a parent or guardian to handle the sale for you.

If we change how we handle your data, we'll update the “last updated” date at the top and, for material changes, email registered users so you know. Continued use of the site after a change means you accept the updated policy.

Questions or requests: xpgames4less@gmail.com.