Privacy Policy

Yo-GG LLC ("Yo-GG," "we," "us," or "our") operates yo-gg.com and the yo-gg.com mobile applications (together, the "Services") — an online marketplace where individuals and businesses ("Sellers") list gaming consoles, controllers, PCs and components, peripherals, accessories, and physical and digital video games for sale, and where other users ("Buyers") browse, purchase, and arrange delivery of those items.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It applies to everyone who uses the Services, whether you buy, sell, or just browse.

If you do not agree with this Privacy Policy, please do not use the Services.

The Services are intended only for people 16 years of age or older. You must be at least 16 to create an account, and at least 18 to list items for sale or receive payouts.

We do not knowingly collect personal information from anyone under 16. If we learn that we have collected information from a user under 16, we will delete the account and the associated information. A parent or guardian who believes their child under 16 has provided us with personal information may contact us at privacy@yo-gg.com and we will delete it.

3.1 Information You Give Us

Account information (all users)

• Name and username
• Email address and phone number
• Password (stored in hashed form — we never see your plaintext password)
• Profile photo, bio, and any gaming handles or platform IDs you choose to display
• Communication and notification preferences

Buyer information

• Shipping address and recipient name
• Billing address
• Payment card or bank details, entered directly into our payment processor's interface (see Section 3.4)
• Order history, cart and wishlist contents, saved searches, and watched listings
• Returns, refund requests, and dispute submissions

Seller information

• Business name and business type, if you sell as a business
• Payout account details (bank account or debit card) collected by our payment processor
• Tax identification information — Social Security Number, Individual Taxpayer Identification Number, or Employer Identification Number — where required for IRS reporting (Form 1099-K) and state tax reporting
• Identity verification materials where required by law or by our fraud controls, which may include a government-issued ID image and a selfie, collected and processed by our identity verification vendor
• Shipping origin address and handling preferences

Listing content

• Item titles, descriptions, condition notes, and pricing
• Photos and video of the item, including any metadata embedded in those files
• Hardware identifiers you choose to include, such as console serial numbers, PC component model and serial numbers, or game disc and cartridge codes
• Digital game keys, activation codes, or account credentials, where a listing involves a digital item

Communications and community content

• Messages you send to other users through our in-platform messaging, including any attachments
• Reviews, ratings, and seller feedback
• Comments, questions on listings, and any public forum or community posts
• Emails, chat messages, and phone calls with our support team, including recordings or transcripts where permitted by law and where we have told you a call is recorded

Other information you volunteer

• Survey responses, beta program feedback, contest and giveaway entries
• Referral information, including the name and email address of a person you refer (only provide these if that person is comfortable hearing from us)

3.2 Information We Collect Automatically

• Device and connection data: IP address, device type and model, operating system, browser type and version, screen resolution, language, mobile carrier, and unique device or advertising identifiers
• Usage data: pages and listings viewed, search queries, filters applied, time spent, click and scroll behavior, referring and exit URLs, and the dates and times of your activity
• Transaction telemetry: the sequence of actions leading to a purchase or listing, used for fraud detection and to improve the flow
• Approximate location: derived from your IP address, used to show relevant local listings, calculate shipping, and apply tax. Precise location is collected only from mobile devices and only if you grant that permission in your device settings; you can withdraw it at any time in those settings.
• Cookies and similar technologies: see Section 8

3.3 Fraud and Trust-and-Safety Signals

Because stolen consoles, counterfeit accessories, and fraudulent digital keys are real problems in this category, we collect and generate signals used to detect them. These include device fingerprints, login patterns, listing similarity across accounts, velocity of listing and purchasing activity, and information we receive from payment networks about chargebacks and disputed transactions. We may also check hardware serial numbers submitted in listings against publicly available or industry stolen-device databases.

3.4 Payment Information

Payments on Yo-GG are processed by Stripe, Inc. When you enter a card number, bank account number, or payout details, that information goes directly to the processor. We do not store full payment card numbers or full bank account numbers on our systems. We receive and retain a limited record — the last four digits, card brand, expiration month and year, billing ZIP code, authorization result, and a token that lets us reference the payment method for future transactions you authorize.

Sellers should review the payment processor's own privacy policy at stripe.com/privacy, since the processor acts as an independent controller of the information it collects for its own compliance, fraud, and financial-services obligations.

3.5 Information From Third Parties

• Identity and fraud vendors: verification results and risk scores
• Payment processor and card networks: authorization outcomes, chargeback notices, payout status
• Shipping carriers: tracking scans, delivery confirmation, address validation and correction
• Social or platform login providers, if you choose to sign in that way: your name, email address, and profile image as permitted by your settings with that provider
• Advertising and analytics partners: aggregated audience and campaign measurement data
• Public sources: business registration records for business Sellers

3.6 Information We Do Not Intentionally Collect

We do not ask for and do not want: government ID numbers except the tax identifiers described above; health information; biometric identifiers except where our identity verification vendor performs a facial comparison as part of Seller verification; precise geolocation except where you grant it; or information about your race, ethnicity, religion, political views, sexual orientation, union membership, or immigration status. Please do not submit these to us in messages, listings, or support tickets.

We may de-identify or aggregate information and use it for any lawful purpose — for example, publishing average sale prices for a given console generation. Where we do so, we maintain the information in de-identified form and do not attempt to re-identify it.

Automated decision-making. We use automated systems to score risk on listings, accounts, and transactions. These systems can automatically hold a payout, cancel an order, restrict a listing, or suspend an account. If an automated decision materially affects you, you can ask for human review by contacting privacy@yo-gg.com. We do not use automated processing for profiling in furtherance of decisions that produce legal or similarly significant effects beyond these trust-and-safety and payment measures.

With other users. This is the heart of a peer-to-peer marketplace, so we want to be explicit:

• Your public profile — username, profile photo, bio, member-since date, ratings, reviews, and active listings — is visible to anyone, including people without an account, and may be indexed by search engines.
• When you buy, we give the Seller your name, shipping address, order contents, and the contact channel needed to fulfill and, if necessary, discuss the order.
• When you sell, we give the Buyer your username, return address or shipping origin as applicable, and your item and shipping details.
• Messages you send another user are visible to that user and to our trust-and-safety team, and may be reviewed in a dispute.
• Reviews and ratings you leave are published with your username.

With service providers who process information on our behalf under contract and only on our instructions: cloud hosting and storage, payment processing, identity verification, fraud detection, shipping and label generation, email and SMS delivery, customer support tooling, analytics, and advertising measurement.

With shipping carriers, who receive the name, address, phone number, and package details needed to deliver an order and who use that information under their own privacy policies.

With advertising partners. We may share identifiers and activity data with advertising platforms so we can reach you and people like you off-platform. Under California and several other state laws, this can constitute a "sale" or "sharing" of personal information, or processing for "targeted advertising." See Sections 8 and 9 for how to opt out.

For legal reasons. We may disclose information when we believe in good faith it is necessary to comply with a law, regulation, subpoena, court order, or lawful request from a government or law enforcement authority; to enforce our Terms of Service; to investigate suspected fraud or theft, including cooperating with law enforcement on stolen-hardware reports; or to protect the rights, property, or safety of Yo-GG, our users, or the public.

In a business transfer. If we are involved in a merger, acquisition, financing, reorganization, or sale of all or part of our assets, personal information may be transferred as part of that transaction. We will notify you and describe your choices before your information becomes subject to a materially different privacy policy.

With your direction or consent for any other purpose we describe to you at the time.

We keep personal information only as long as we need it for the purposes described above, then delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, hashed passwords, access controls limiting employee access to what their role requires, logging and monitoring, and periodic security review. We offer two-factor authentication and strongly recommend Sellers enable it.

No system is perfectly secure. We cannot guarantee the security of information transmitted to or from the Services. You are responsible for keeping your password confidential and for the activity on your account. If you believe your account has been compromised, contact us immediately at support@yo-gg.com.

If a breach affecting your personal information occurs, we will notify you and applicable regulators as required by law.

We and our partners use cookies, pixels, SDKs, local storage, and similar technologies for:

• Strictly necessary functions: keeping you signed in, remembering cart contents, load balancing, and fraud prevention. These cannot be turned off.
• Functional purposes: remembering language, currency, and display preferences.
• Analytics: understanding traffic and feature usage.
• Advertising: measuring campaigns and showing you relevant ads on other sites and apps.

Your controls

• Browser settings: most browsers let you block or delete cookies; blocking necessary cookies will break parts of the Services
• Mobile: use your device's "Limit Ad Tracking" (iOS) or "Delete advertising ID" (Android) settings
• Industry opt-outs: optout.aboutads.info and optout.networkadvertising.org

Global Privacy Control. We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals. When we detect one, we treat it as a request to opt out of the sale and sharing of personal information and of targeted advertising for that browser or device. If you are signed in, we apply it to your account as well.

Do Not Track. Browsers' "Do Not Track" signals are not yet standardized; we do not respond to them separately, but we do honor GPC as described above.

9.1 Rights Available to All Users

Regardless of where you live, you can:

• Access and update most of your information in Account Settings
• Download a copy of your data from Account Settings → Privacy → Download my data
• Close your account (subject to completing open orders and to the retention periods in Section 6)
• Unsubscribe from marketing email using the link in any marketing message, or in Notification Settings. Transactional messages — order confirmations, payout notices, security alerts — cannot be turned off while your account is open.

9.2 State Privacy Rights

Residents of states with comprehensive consumer privacy laws — currently including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, with Arkansas effective July 1, 2026 — have some or all of the following rights, depending on their state's law:

• Know / Access — confirm whether we process your personal information and obtain a copy, including the categories collected, the sources, the purposes, and the categories of third parties we disclose to
• Delete — request deletion of personal information we hold about you
• Correct — request correction of inaccurate personal information
• Portability — receive your information in a portable, machine-readable format
• Opt out of targeted advertising
• Opt out of the sale or sharing of personal information
• Opt out of profiling that produces legal or similarly significant effects
• Limit use of sensitive personal information
• Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a privacy right
• Appeal — if we deny your request, you may appeal (Section 9.5)

9.3 California-Specific Disclosures (CCPA/CPRA)

In the preceding 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act:

We collect these from the sources in Section 3, for the purposes in Section 4, and disclose them to the recipients in Section 5. We retain them per Section 6.

We do not sell personal information for monetary consideration, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

Sensitive personal information. We use sensitive personal information only for the purposes permitted under CPRA §7027(m) — providing the Services, ensuring security and integrity, preventing fraud, and complying with law. Because we do not use it to infer characteristics, the "Limit the Use of My Sensitive Personal Information" right does not change how we handle it, but you may still submit a request.

"Shine the Light" (Cal. Civ. Code §1798.83). California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. Send requests to privacy@yo-gg.com.

Authorized agents. You may use an authorized agent to submit a request. We will require written authorization from you and may ask you to verify your identity directly.

9.4 How to Exercise Your Rights

Email us at privacy@yo-gg.com.

Verification. To protect your account, we will verify your identity before acting on an access, deletion, or correction request — usually by confirming control of the email address on the account, and for higher-risk requests by asking you to match additional account details. We will not create new accounts or collect new categories of information solely to verify you.

Timing. We respond within 45 days, and may extend once by an additional 45 days where reasonably necessary, with notice to you.

Limits on deletion. We may decline all or part of a deletion request where we must retain information to complete a transaction, comply with a legal obligation (including tax reporting), detect security incidents or fraud, exercise or defend legal claims, or for other reasons permitted by law. We will tell you which exception applies.

9.5 Appeals

If we deny your request, you may appeal by replying to our decision or by writing to privacy@yo-gg.com with "Privacy Appeal" in the subject line. We will respond within 45 days with our decision and reasoning. If your appeal is denied, you may contact your state Attorney General. California residents may also file a complaint with the California Privacy Protection Agency.

Listings, messages, and pages on the Services may link to third-party sites — a game publisher's page, a video review, an external payment or shipping site. We do not control those sites and are not responsible for their privacy practices. Review their policies before providing information.

The Services are intended for users in the United States. We store and process information in the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. If the changes are material, we will provide additional notice — by email to the address on your account, by an in-product notice, or both — at least 15 days before the changes take effect, unless a shorter period is required by law. Your continued use of the Services after the effective date means you accept the updated policy.