Site updateTrue Rating!

Privacy Policy

Effective date: September 25, 2026

1. Who We Are

2kAuction (2kauction.com) is a price tracking and player-reference service for NBA 2K. This policy covers our website and native app, explains what personal data we collect, why we collect it, and how you can exercise your rights.

2. Data We Collect

Analytics

We use Google Analytics (GA4) to understand how visitors use the site. GA4 collects anonymised usage data including pages visited, session duration, approximate location (country/region), device type, and referrer. This data is processed by Google under their own privacy policy. You can opt out via Google opt-out browser add-on.

Account Data

When you create an account we collect your email address and, for email/password accounts, a hashed password. If you sign in through an identity provider, we receive the profile information and authorization tokens supplied by that provider. We store your account identifier, username and chosen profile settings to authenticate you and provide account features.

Payments (Supporter subscription)

If you become a Supporter on the website, payment is handled by Stripe, which collects your card details and billing address directly — we never receive or store your full card number. We keep a Stripe customer ID, your plan, subscription status and renewal dates so we can turn off ads and show your Supporter badge. Stripe processes payment data under its own privacy policy. Whether you are a Supporter is shown publicly as a badge next to your username.

Content and Account Features

We store the content you submit or save, including profile photos, comments and attachments, lineups, tier lists, saved cards and filters, in-game trade records and uploaded collection videos. Content you publish can be visible to other users. We also store reports, account blocks and support messages to operate the service and respond to concerns. Support forms may include an optional reply email address and attachments.

We may use automated checks on our servers to detect abusive text and sexually explicit images before publication. These checks do not send your content to an external AI provider. Automated checks can make mistakes; you can edit rejected content or use the reporting and support controls for concerns about published content.

Native App

The native app stores a sign-in credential in secure device storage and keeps preferences and recent selected search results on your device. You can clear recent searches in the app. On iOS, secure credentials may survive reinstalling the app; signing out clears the app's stored credential. Account, search and content requests are sent to our services to provide those features.

Our native app's embedded website views use session cookies for account features. We disable our Google Analytics and advertising loaders in those embedded views. Website pages and sign-in pages opened separately in your browser follow the website practices described in this policy. External services you choose to open have their own privacy policies.

Push Notifications

Notifications are optional. When you enable them, we collect a push notification token, a randomly generated app installation identifier, your notification preference and registration timestamps. We also store a protected verification value to secure changes to that preference, and delivery records to manage retries and delivery failures. These records identify an app installation and are independent of your account; you do not need to sign in to receive notifications.

We use this information to send updates, for example when new cards drop. We send the notification token and message content through Expo's push notification service, which routes notifications through Apple Push Notification service on iOS or Google Firebase Cloud Messaging on Android. These providers process notification identifiers and content to deliver the message. We do not use our notification registration or delivery records for advertising or tracking across other companies' apps and websites. See Expo's privacy policy, Apple's privacy policy and Google's privacy policy.

You can decline the first-launch invitation and continue using the app. To stop notifications, turn off Allow notifications in the app's Settings, or disable notifications for 2kAuction in your device settings. Changes made in the app need an internet connection to reach our service. Messages already handed to a delivery provider may still arrive. Signing out or deleting your account does not turn off this separate device preference.

Payment Data

Payments for 2kAuction Pro are processed by Stripe. We never see or store your full card number. Stripe provides us with a payment confirmation and the last four digits of your card for reference. Stripe is PCI-DSS Level 1 certified.

Price Alert Emails

If you opt in to price alerts, we store the email address you provide and your alert preferences. We use this information only to send the alerts you requested. You can unsubscribe at any time from within your account settings or by clicking the unsubscribe link in any alert email.

Advertising

We display ads through Playwire, an advertising management partner, to keep the site free. Playwire and the ad exchanges it works with (including Google) may set cookies or use similar identifiers to deliver and measure ads, and in some cases to personalise them. For visitors in the EEA and UK, Playwire's consent management platform asks for your consent before non-essential advertising cookies are set (see "EU/UK Users & Cookie Consent" below). For California residents, this sharing of identifiers with advertising partners may be considered a "sale" or "share" under the CCPA/CPRA — you can opt out via the opt-out link in the "Playwire" section below and in the "California Privacy Rights" section below. You can also opt out of personalised advertising industry-wide at optout.aboutads.info, and review Google's ad policy for details on data collected by Google systems.

Playwire

All or partial advertising on this Website or App is managed by Playwire LLC. If Playwire publisher advertising services are used, Playwire LLC may collect and use certain aggregated and anonymized data for advertising purposes. To learn more about the types of data collected, how data is used and your choices as a user, please visit https://www.playwire.com/privacy-policy.

Common ID Cookie

This site uses cookies and similar tracking technologies such as the Common ID cookie to provide its services. Cookies are important devices for measuring advertising effectiveness and ensuring a robust online advertising industry. The Common ID cookie stores a unique user id in the first party domain and is accessible to our ad partners. This simple ID that can be utilized to improve user matching, especially for delivering ads to iOS and MacOS browsers. Users can opt out of the Common ID tracking cookie by clicking here.

Advertising Privacy Settings

FOR EU USERS ONLY: When you use our site, pre-selected companies may access and use certain information on your device and about your interests to serve ads or personalized content. You may revisit or change consent-choices at any time by clicking here.

3. How We Use Your Data

  • To provide and improve the 2kAuction service
  • To authenticate your account and secure your session
  • To process your subscription payment and manage your plan
  • To send price alerts you have opted in to
  • To deliver optional push notifications and manage notification preferences and delivery
  • To understand aggregate usage patterns via analytics
  • To display and measure advertising that funds the site

We do not sell your personal data for money. However, to fund the site we share online identifiers (such as cookie IDs and device/usage signals) with advertising partners through Playwire to deliver and measure ads — which, under the CCPA/CPRA, may itself be treated as a "sale" or "share." California residents can opt out at any time; see the "California Privacy Rights" section below.

4. Data Retention

Turning off push notifications stops future sends once the preference reaches our service; it does not immediately erase the registration. Routine cleanup removes notification registrations that have not been refreshed by the app for 90 days. Opening the app can refresh a saved registration, including a disabled preference. Delivery records for card drop notifications are removed during routine cleanup after their notification event is seven days old. These periods describe our operational notification database; provider retention follows the providers' policies. Notification credentials and preferences stored securely on iOS may survive reinstalling the app.

Account data is retained while your account is active. To delete your account, open Account and choose Delete my account, or go directly to account deletion. After you confirm, the service removes your account record and associated saved content and invalidates access to account features. Apple-linked accounts disconnect their Apple authorization before deletion completes, and any active Supporter subscription is cancelled first. Stripe keeps its own payment and invoice records as required for tax and accounting.

Uploaded photos and videos are removed separately from our storage. Cleanup retries if storage is temporarily unavailable and includes a follow-up check after 24 hours for uploads already in progress. Removing the original file does not instantly remove copies previously downloaded by others or held in intermediary caches; those copies may remain until refreshed or removed.

Backup copies, security logs and support messages already delivered by email are handled separately from the self-service account deletion flow. Records we are required to retain by law are also handled separately. To request erasure of these records, or ask about the retention applicable to your data, contact [email protected].

5. Cookies

We use cookies for session authentication and Google Analytics, and our advertising partner Playwire (and the exchanges it works with) may set cookies or similar identifiers to deliver and measure ads. For EEA and UK visitors, non-essential advertising cookies are set only after you consent via our consent management platform; you can change or withdraw that consent at any time from your advertising privacy settings. You can also disable cookies in your browser settings, though this may prevent account login from working correctly.

6. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (right to be forgotten)
  • Withdraw consent (e.g. unsubscribe from price alerts)
  • Lodge a complaint with your local data protection authority

You can initiate account deletion from your account deletion page. To exercise other privacy rights or request help with retained records, email us at [email protected].

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

  • Know what personal information we collect, use, and disclose
  • Request access to, correction of, or deletion of your personal information
  • Opt out of the "sale" or "sharing" of your personal information
  • Not be discriminated against for exercising these rights

The categories of personal information we collect are described in "Data We Collect" above. We do not sell your information for money, but our use of advertising partners (through Playwire) to deliver and measure ads may be considered a "sale" or "share" of online identifiers under California law. To opt out, use the following link:

Do Not Sell or Share My Personal Information

You can also exercise any of these rights — including access, correction, or deletion — by emailing [email protected]. You may use an authorised agent to submit a request on your behalf.

8. EU/UK Users & Cookie Consent (GDPR)

If you visit from the European Economic Area or the United Kingdom, we rely on your consent to set non-essential advertising cookies. On your first visit, our advertising partner Playwire presents a consent management platform (CMP) where you can accept or reject advertising and manage individual advertising partners. No advertising cookies are set until you consent. Google Analytics is loaded to measure aggregate usage; it is not gated by this consent flow, but you can opt out of it at any time using the Google opt-out browser add-on linked under "Data We Collect" above.

You can review or withdraw your consent at any time from your advertising privacy settings. You also have the right to access, correct, delete, or port your data, to object to or restrict processing, and to lodge a complaint with your local data protection authority. To exercise these rights, email [email protected].

9. Children's Privacy

2kAuction is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be notified to registered users via email.

11. Contact

Questions about this policy? Email us at [email protected].