Privacy Policy

Effective October 3, 2026 · Applies to tcgmp.caecus.xyz

Who and what this covers

This is the privacy policy of Caecus.dev. It applies specifically to the tcgmp.caecus.xyz subdomain, which hosts the TCGMP staff dashboard (the “app”). The app is an internal operations tool used by associates of TCGMarketPulse and Caecus.dev — the people who run, support, and publish for those projects. It is not a consumer product, and only associates who have been explicitly approved can sign in.

This page explains how the app handles information it receives from Google. It does not cover other parts of caecus.xyz or any other Caecus.dev or TCGMarketPulse site or service.

What we access from Google, and why

• Sign in with Google (openid, email, profile). When an associate signs in, Google tells the app their email address and name. We use the email address to check that the person is approved to use the app and to decide what they may see and do. Nothing else about the Google account is requested.
• Google Calendar (calendar.app.created). One administrator connects a Google account so the app can create and keep up to date a single dedicated calendar named “TCG Market Pulse Ops”. This scope is limited by Google itself to calendars the app created: the app cannot see, read, or change any other calendar or any other event in that Google account. We use it to show the associates’ shared schedule (livestreams, email sends, launches, internal reviews) in the app and to keep that schedule in sync with Google Calendar in both directions, so associates can also subscribe to it from Google Calendar.

What we store

• Associates’ email addresses and names, kept so we can control who has access.
• The events on the dedicated calendar — title, date and time, description, and a category label — exactly what associates type in, kept in the app’s database and in that Google calendar.
• A Google refresh token for the connected account, kept in the app’s private database so the app can keep syncing without asking the administrator to sign in again. It is never shown in the app and is used only to talk to Google Calendar.

All of this is stored on infrastructure Caecus.dev controls and protects with access restrictions. It is not placed in public locations.

How we use and share it

• We use Google user data only to provide the features described above — signing associates in and syncing the shared calendar.
• We do not sell Google user data, use it for advertising, or share it with third parties.
• We do not allow people to read Google user data except the approved associates who operate the app, or where required by law.
• We do not use Google user data to train machine-learning or AI models.

Keeping your data, and removing it

• Calendar events stay until an associate deletes them in the app or in Google Calendar.
• You can disconnect the app from your Google account at any time at myaccount.google.com/permissions. That immediately invalidates the stored refresh token.
• To have your sign-in record, or the stored Google token and calendar data, deleted, email us at the address below and we will remove it.

Changes to this policy

If how the app handles Google data changes, we will update this page and its effective date before the change takes effect.

Contact

Questions or deletion requests: webmaster@caecus.xyz.