Palworld TCG

Privacy

Last updated: July 29, 2026

The short version

Palworld TCG Play Hub is an unaffiliated fan project for the Palworld Trading Card Game. Running it costs money, so the site carries advertising and some affiliate links. That means our advertising partner and its exchanges do set cookies and similar identifiers in your browser, and may use them to show you more relevant ads. We don't sell your email address, and we don't hand your data to anyone outside the partners listed below.

If you'd rather not have that, you can opt out at any time using the links in Your choices below, or the two consent links in the site footer.

What we collect

  • Email address, only if you submit it via the launch-list signup form. Stored in our Supabase database. Used to email you when major Palworld TCG reveals drop. One-click unsubscribe in every email.
  • Anonymized site analytics via Cloudflare Web Analytics. Cookie-free. Aggregates pageviews, country-level location, referrer, and device type. We use this to see which pages are useful and which are broken.
  • Google Analytics 4, which does set cookies and measures pageviews, sessions, and roughly where visitors come from. We use it to understand which parts of the site earn their keep. IP addresses are handled by Google in line with their privacy policy.
  • Advertising data. Our ad partner NitroPay and the exchanges it works with set cookies and similar identifiers to serve, cap, and measure ads, and in some regions to personalise them. Where the law requires consent, their consent tool asks you first and records your answer. What they collect is governed by their own policies, linked below.
  • Local browser storage for your in-progress deck builder drafts and breeding-tool inventory. Stored on your device only, never sent to our servers. Clearing site data deletes them.

What we don't collect

  • We don't sell or rent your email address, and we don't pass it to advertisers.
  • We don't use your deck lists, collection, or binder contents for advertising.
  • We don't fingerprint your browser, scrape your contacts, or do anything similarly creepy.

Third parties we route through

  • Vercel, hosts the site. Sees the same request metadata any web host sees (IP, user agent).
  • Cloudflare, DNS, DDoS protection, and Web Analytics. Their Web Analytics privacy policy is privacy-friendly by design.
  • Supabase, Postgres database for cards, sets, news, and the email signup list.
  • NitroPay, our advertising partner. They fill the ad slots on the site and run the consent tool that appears where consent is required. See their privacy policy. Ads are served through Google Ad Manager and a set of ad exchanges, which is published at /ads.txt.
  • Google, for Analytics and for Ad Manager on the advertising side.
  • eBay Partner Network and other affiliate programs. Some outbound links to listings are affiliate links, which means we may earn a commission if you buy. It never changes your price. Clicking one lets the retailer know we sent you.
  • Bushiroad official site, we link to and hot-link some card images from en.palworld-official-cardgame.com to display revealed cards.

Your choices

  • Do Not Sell or Share My Personal Information (California and other US state privacy laws). Use the link of that name in the site footer. It opens our ad partner's opt-out control and records your choice for this browser. Under the CCPA and CPRA, sharing data with advertising partners for personalised advertising can count as a “sale” or “share” even though no money changes hands for your data, so we give you the opt-out either way.
  • Cookie and consent settings (EU, UK, and similar). Use the “Cookie & consent settings” link in the footer to reopen the consent tool and change or withdraw what you agreed to, at any time. Withdrawing is as easy as giving it.
  • Opting out of Google Analytics across every site, via Google's browser add-on.
  • Browser-level controls. Blocking third-party cookies, or using an ad blocker, works here like it does anywhere. Nothing on the site is gated behind letting ads run.
  • Anything else, including access, correction, deletion, or a copy of what we hold: email hello@palworldtcg.gg. We'll act within 30 days, and we won't treat you differently for asking.

Your rights

You can request deletion of your email at any time by emailing hello@palworldtcg.gg. We'll remove your row within 7 days. EU and UK residents have GDPR / UK GDPR rights of access, rectification, erasure, and portability. Same email applies.

Changes

If we change anything material we'll bump the “last updated” date at the top and, if it's significant, email people on the launch list before the change takes effect.

Contact

hello@palworldtcg.gg for general privacy questions. dmca@palworldtcg.gg for content takedown requests.