Privacy Policy

1. Introduction

This Privacy Policy describes how NerdyScore ("we," "us," or "our") collects, uses, and protects your personal information when you use our website and services. NerdyScore is operated by an individual based in California, United States.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Age Restrictions

Our service is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use our service or provide any personal information. If we discover that we have collected personal information from a child under 13, we will delete such information immediately.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at the email address provided below.

3. Information We Collect

Personal Information

When you create an account, we collect:

• Email address
• Username
• Password (encrypted and hashed)

Third-Party Account Integrations

If you choose to connect a third-party account, such as an eBay account, we may collect and store information necessary to maintain that connection and provide related features.

• Third-party account identifiers
• Authorization codes
• Access tokens and refresh tokens
• Marketplace or listing data retrieved from the connected service as needed to provide requested functionality

Usage Information (Analytics)

We operate our own privacy-focused, cookieless analytics to understand which pages are viewed. This system does not use cookies and does not store your IP address. For each page view we record:

• the page (URL path) that was viewed
• the referring page, if any
• a daily, non-reversible visitor identifier
• whether the request appears to come from an automated bot

The visitor identifier is a one-way hash generated from your IP address, browser user agent, a value that rotates each day, and a secret key. It cannot be reversed to identify you, and because it changes daily it cannot be used to track you across days. We retain raw page-view records for a limited period (approximately 30 days) and keep only aggregated daily counts after that.

Cookies

We use essential cookies that are necessary for authentication and the proper operation of our service. These cannot be disabled while using the site. We do not use analytics, advertising, or other non-essential cookies, and our analytics is cookieless.

4. How We Use Your Information

We use your personal information to:

• Provide and maintain our service
• Create and manage your user account
• Enable you to track your video game collection
• Improve our website and user experience
• Communicate with you about service updates or issues
• Ensure security and prevent fraud
• Support connected third-party account features, including listing verification, marketplace data retrieval, and integration health
• Maintain third-party account connections and refresh expired access credentials when authorized

We analyze cookieless usage data from our own analytics to understand how users interact with our site and to improve our services.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following limited circumstances:

• Service Providers: We may share information with vendors and service providers that help us operate our services, such as hosting, infrastructure, database, analytics, monitoring, authentication, and security providers. These providers may process information on our behalf only as needed to provide their services to us.
• Legal Requirements: If required by law, court order, or government regulation
• Safety: To protect the rights, property, or safety of our users or others

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encrypted password storage using industry-standard hashing
• Secure authentication systems
• Secure storage of third-party integration credentials
• Regular security updates and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Your Rights and Choices

Account Management

You may update your account information at any time through your account settings.

Data Deletion

You have the right to request deletion of your personal information. When you delete your account, we will delete or de-identify your personal information from our active systems within a reasonable period, subject to legal, security, fraud-prevention, backup, and operational retention requirements.

Third-Party Integrations

If you disconnect a third-party integration, we will stop using that connection for future access. We may retain limited records related to the integration as needed for security, legal compliance, fraud prevention, dispute resolution, backup, and internal recordkeeping.

California Residents (CCPA Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and share
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to non-discrimination for exercising your rights

European Users (GDPR Rights)

If you are located in the European Union, you have rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to data portability
• Right to object to processing

8. Third-Party Services

Connected Third-Party Services

If you connect a third-party service such as eBay, we may use data provided through that service to operate features you request, including verifying listing status, retrieving marketplace data, maintaining the connection, and refreshing access credentials.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account, we will delete or de-identify your personal information from active systems within a reasonable period, subject to legal, security, fraud-prevention, backup, and operational retention requirements.

We may retain anonymized usage data for analytical purposes to improve our services.

We may also retain limited information related to connected third-party accounts for security, audit, dispute resolution, backup, and compliance purposes.

10. International Data Transfers

Our service is operated from the United States. If you are accessing our service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

We recommend reviewing this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us at:

We will respond to your inquiry within 30 days of receipt.

13. Legal Basis for Processing (EU Users)

For users in the European Union, our legal basis for processing your personal information includes:

• Contract: To provide our services as agreed in our Terms of Service
• Legitimate Interest: To improve our services and ensure security
• Consent: Where you have given explicit consent for specific processing