Privacy Policy — international version

TrocaFigurinhas is a digital platform for trading collectible stickers, operated from Brazil by its maintainers and reachable at privacidade@trocafigurinhas.com. We decide how the personal data collected on this platform is used.

This version applies to anyone using the site in a language other than Brazilian Portuguese. We process your data under the Brazilian data protection law (LGPD) and, where they apply to you, US state privacy laws such as the California Consumer Privacy Act as amended by the CPRA (CCPA). Section 8 describes the additional rights of US residents.

• Create and maintain your account.
• Show your profile to other collectors (username, country, city, ranking).
• Find partners and make trades by mail possible, including between countries.
• Send account notices (new trades, ratings received).
• Send the newsletter, only if you opted in.
• Measure audience and show ads: with cookies and personalization only if you consent; in aggregate and without cookies otherwise.
• Detect and prevent fraud, abuse and unauthorized access.

• Google — Sign in with Google, Google Analytics 4 and Google AdSense ads. Measurement and personalized-ad cookies are used only if you accept. See the Google Privacy Policy.
• Stripe — processes credit purchases made outside Brazil, with the data needed for payment. We do not store full card details.
• Paddle — receives your IP address to identify the country and currency of the price; it does not process the purchase.
• Amazon Web Services — delivers account emails and the newsletter.
• Hostinger — hosting of the servers that run the platform and its database, in Boston, United States.
• Mercado Pago — processes only purchases made in Brazil.
• We do not sell or rent your personal data. Your postal address is shown only to the partner of an accepted trade, for shipping.

We operate from Brazil, and our servers and several of our providers are located in the United States. Your data may therefore be processed outside the country where you live.

• Access — find out what data we hold about you and get a copy.
• Correction — correct incomplete or inaccurate data from your profile.
• Deletion — close your account and delete your personal data using the close-account option on your profile.
• Portability — download your data as JSON or CSV from the Privacy tab of your profile.
• Withdrawal of consent — change your email and cookie preferences at any time, without affecting what was done before.
• Automated decisions — some moderation measures, such as automatic suspension after negative ratings, are applied by the system; you can contest them through support and ask for human review.

To exercise any right, write to privacidade@trocafigurinhas.com.

If you live in a US state with its own privacy law, such as California, this section supplements the ones above.

• Categories collected in the last 12 months — identifiers (name, email, username, IP address), registration data and postal address, commercial information (purchases), internet activity (site usage) and approximate location (country and time zone, from your IP address and browser).
• Sources — you, your browser, and Sign in with Google.
• Sale and sharing — we do not sell personal information. Google’s personalized-ad cookies may be considered “sharing” for cross-context behavioral advertising; they are enabled only if you accept, and you can decline or turn them off at any time in the cookie notice or the Privacy tab of your profile.
• Sensitive personal information — we do not use sensitive personal information to infer characteristics about you. Date of birth and gender are optional.
• Your rights — to know what personal information we collect, use and disclose; to get a copy; to correct it; to delete it; and to opt out of its sale or sharing. We will not discriminate against you for exercising these rights.
• How to make a request — write to privacidade@trocafigurinhas.com from your account email, which we use to verify your identity. An authorized agent may also make a request on your behalf. We respond within 45 days.

Passwords stored with bcrypt hashing, HTTPS communication, a database on an isolated internal network and key-restricted access. If an incident affects your rights, we will notify the competent authorities and affected people within the deadlines required by applicable law.

We use essential cookies to keep your session, remember your language and record your browser’s time zone, which sets your account’s initial time zone.

Measurement cookies (Google Analytics 4) and personalized-ad cookies (Google AdSense) are set only if you accept. If you decline, we still count visits in aggregate, without cookies or a persistent identifier, through Google Consent Mode.

You can change your choice at any time in the cookie notice or the Privacy tab of your profile.

TrocaFigurinhas is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we did, we will delete it.

We will publish updates on this page with a new version and date. Significant changes will be announced by email or on the platform.

The official version of this policy is in English. Translations of the site interface are provided for convenience.

Privacy questions, requests or complaints: privacidade@trocafigurinhas.com.