Privacy Policy

Last updated: 26 May 2026

TopPocket Privacy Policy

TopPocket is an Australian peer-to-peer trading-card marketplace app for collectors of Pokémon, One Piece, Magic: The Gathering, Riftbound, Dragon Ball and other trading cards.

TopPocket helps users discover cards, buyers and sellers nearby. We do not process payments for card trades, hold funds, provide escrow, inspect cards, authenticate cards, or mediate private transactions between users.

This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Who we are

TopPocket is operated by the developer and publisher of the TopPocket app.

Contact: toppocketapp@gmail.com

Information we collect

Account information

We may collect your name, display name, email address, sign-in provider, user ID, profile details, and account settings.

Phone verification information

Phone verification is optional.

If you choose to verify your phone number to receive a Verified badge on your TopPocket profile, we collect your mobile number so Firebase Authentication, a Google service, can send a one-time SMS verification code. Firebase phone authentication works by sending an SMS code to the phone number provided by the user.

After your phone number is verified:

Firebase Authentication stores your phone number on your authentication record so verification can work and to help recognise re-verification attempts or prevent the same number being used across multiple accounts.
In our own database, Firestore, we store only your verified status, not your phone number.
Other users may see a small Verified badge next to your display name, but they will not see your phone number.

You can use TopPocket without verifying your phone number. The Verified badge is opt-in.

Standard SMS or mobile carrier charges may apply.

Card and marketplace information

We collect information you add to the app, such as cards in your binder, wishlist items, sale listings, card names, set numbers, conditions, prices, notes, photos, trade preferences, and listing status.

Location information

TopPocket is built around local discovery. If you allow location access, we may use your approximate or precise location to show nearby cards, listings, matches, or collectors.

We aim to show other users only the location detail needed for local discovery, such as a general area, suburb, city, distance, or meetup preference.

We do not intentionally show your exact live location to other users unless you choose to share it yourself, such as in a message.

Messages and user content

If TopPocket includes chat, we collect and store messages you send and receive in the app so the messaging feature works.

We may also review messages, reports, listings, images, and other user content where needed for safety, moderation, support, or legal reasons.

Photos and camera access

If you use card scanning, listing photos, or image upload features, the app may ask for camera or photo library access.

Camera access is used to scan cards or take listing photos.

Photo library access is used so you can select images to upload.

Listing photos you choose to upload may be stored and shown to other users.

Device, usage, and diagnostic information

We may collect device and app information such as device type, operating system, app version, crash logs, performance data, error logs, analytics events, notification tokens, and basic usage activity.

Reports, support requests, and moderation information

If you contact support, report another user, report a listing, report a message, or appeal a moderation action, we may collect the details you provide and any relevant app records needed to review the issue.

Information we do not collect

TopPocket does not collect payment card numbers, bank account details, or escrow funds for trading-card transactions.

TopPocket does not sell your personal information.

TopPocket does not act as a payment processor for card trades between users.

TopPocket does not publicly show your private account email or phone number unless you choose to share that information yourself.

How we use information

We use information to:

Create and manage your account.

Verify that you own your phone number if you choose to use optional phone verification.

Show a Verified badge on your profile if you choose to verify your phone number.

Help reduce fake, duplicate, spam, scam, or abusive accounts.

Show your binder, wishlist, listings, matches, and marketplace activity.

Help users discover relevant nearby cards, buyers, and sellers.

Enable in-app chat and user-to-user communication.

Send notifications about matches, messages, listings, app updates, and safety notices.

Moderate listings, messages, profiles, reports, and other user content.

Detect and prevent spam, scams, fraud, abuse, fake listings, and unsafe behaviour.

Improve app performance, search, matching, card data, and user experience.

Provide support and respond to questions, reports, complaints, and account requests.

Comply with legal obligations and enforce our Terms of Service.

What other users may see

Other users may see information you choose to make visible in TopPocket, such as:

Your display name.

Your profile details.

Your Verified badge, if you choose to verify your phone number.

Cards you list for sale or trade.

Card photos, prices, condition notes, and listing descriptions.

General location or distance information needed for local discovery.

Messages you send to them.

Other users should not be able to see your private account email or phone number unless you choose to share it yourself.

If you verify your phone number, other users may see a Verified badge, but they will not see your phone number.

How we share information

We may share information with:

Other TopPocket users, where needed for marketplace features, listings, matching, chat, and local discovery.

Service providers who help us run the app, such as cloud hosting, authentication, database, storage, phone verification, SMS delivery, crash reporting, analytics, notifications, and support tools.

Legal or safety authorities if required by law, court order, or where we reasonably believe disclosure is needed to protect users, prevent harm, investigate fraud, or respond to unlawful activity.

Business successors if TopPocket is involved in a merger, acquisition, restructure, or sale of assets.

We require service providers to handle personal information consistently with this Privacy Policy and applicable privacy laws.

Third-party services

TopPocket may use third-party services such as Firebase, Google Cloud, Firebase Authentication, SMS phone verification, Apple Sign in, Google Sign in, analytics, crash reporting, push notification services, and other infrastructure providers.

These providers may process information in Australia, the United States, or other countries where they operate.

App Store and Google Play privacy information

The privacy information shown on the App Store and Google Play should match this Privacy Policy and the actual data collected by the app.

Depending on the features you use, TopPocket may collect data types such as contact information, including email address and optional phone number, user content, photos, messages, location, identifiers, usage data, diagnostics, and other app activity.

A phone number can be personal information under Australian privacy guidance because personal information includes information such as a person’s phone number where it can identify or reasonably identify them.

Data retention

We keep personal information for as long as reasonably needed to provide TopPocket, operate marketplace features, maintain safety records, resolve reports, prevent abuse, comply with legal obligations, and enforce our Terms.

Some data may be deleted sooner if it is no longer needed.

Some information may remain in backups, logs, fraud-prevention records, moderation records, or legal records for a limited period after account deletion.

For optional phone verification, Firebase Authentication may retain your phone number on your authentication record. In our own Firestore database, we store only your verified status, not your phone number. Firebase Admin documentation shows that Firebase Authentication user records can be associated with phone numbers and looked up by phone number.

Account deletion

You can request deletion of your TopPocket account in the app, or by contacting us at toppocketapp@gmail.com.

When your account is deleted, we will delete or de-identify personal information that we are not legally or operationally required to keep.

Some information may be retained where reasonably necessary for safety, fraud prevention, dispute records, legal compliance, or protection of other users.

If you sent messages to other users, copies may remain visible to those users unless removed as part of a moderation or deletion process.

Phone verification information handled by Firebase Authentication may also be subject to Firebase or Google account, authentication, fraud-prevention, or legal retention processes.

Accessing or correcting your information

You can update some account, profile, listing, and preference information in the app.

You can contact us at toppocketapp@gmail.com to request access to, correction of, or deletion of your personal information.

We may need to verify your identity before actioning certain requests.

Notifications

TopPocket may send push notifications for matches, messages, listings, marketplace activity, reminders, safety notices, and app updates.

You can manage notification permissions through your device settings or app settings where available.

Location choices

You can disable location access through your device settings.

Some local discovery, matching, distance, and nearby listing features may not work properly without location access.

Phone verification choices

Phone verification is optional.

You can choose whether to verify your phone number to receive a Verified badge on your TopPocket profile.

If you do not verify your phone number, you can still use TopPocket, but you will not receive the Verified badge or related trust features.

Your phone number is not shown publicly to other users.

Security

We use reasonable technical and organisational measures to protect personal information.

No app, website, database, or internet transmission is completely secure. You use TopPocket knowing that no system can guarantee absolute security.

Phone verification can help reduce fake or duplicate accounts, but it does not guarantee that a user is safe, trustworthy, or that a trade will be successful. You should still use safe trading practices when meeting or dealing with other users.

Children and younger users

TopPocket is not designed for children.

If you are under 18, you should use TopPocket only with permission and supervision from a parent or guardian, especially when arranging trades or meetups.

Do not meet strangers alone. Use public places, bring a trusted adult or friend, and follow safe trading practices.

International users

TopPocket is operated from Australia. If you use TopPocket from another country, your information may be processed in Australia or other countries where our service providers operate.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If changes are significant, we may notify users in the app, by email, or by updating the date at the top of this page.

For privacy questions, account deletion requests, support issues, safety reports, or complaints, contact:

toppocketapp@gmail.com

Page updated

Google Sites

Report abuse