// LEGAL

Privacy Policy

Yo-GG · Effective 09/01/2026 · Last updated 09/01/2026

Effective Date: 09/01/2026 Last Updated: 09/01/2026

1. Introduction

Yo-GG LLC ("Yo-GG," "we," "us," or "our") operates yo-gg.com and the yo-gg.com mobile applications (together, the "Services") — an online marketplace where individuals and businesses ("Sellers") list gaming consoles, controllers, PCs and components, peripherals, accessories, and physical and digital video games for sale, and where other users ("Buyers") browse, purchase, and arrange delivery of those items.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It applies to everyone who uses the Services, whether you buy, sell, or just browse.

A note on how a marketplace works. We are an intermediary. When a transaction happens, Buyers and Sellers necessarily exchange some information with each other — a name, a shipping address, messages about the item. Once a Seller receives your information to fulfill an order, that Seller controls how they handle it, and this Privacy Policy does not govern their practices. We require Sellers to use transaction information only to complete the sale, but we do not control them.

If you do not agree with this Privacy Policy, please do not use the Services.

2. Age Requirements

The Services are intended only for people 16 years of age or older. You must be at least 16 to create an account, and at least 18 to list items for sale or receive payouts.

We do not knowingly collect personal information from anyone under 16. If we learn that we have collected information from a user under 16, we will delete the account and the associated information. A parent or guardian who believes their child under 16 has provided us with personal information may contact us at privacy@yo-gg.com and we will delete it.

3. Information We Collect

3.1 Information You Give Us

Account information (all users)

Name and username

Email address and phone number

Password (stored in hashed form — we never see your plaintext password)

Profile photo, bio, and any gaming handles or platform IDs you choose to display

Communication and notification preferences

Buyer information

Shipping address and recipient name

Billing address

Payment card or bank details, entered directly into our payment processor's interface (see Section 3.4)

Order history, cart and wishlist contents, saved searches, and watched listings

Returns, refund requests, and dispute submissions

Seller information

Business name and business type, if you sell as a business

Payout account details (bank account or debit card) collected by our payment processor

Tax identification information — Social Security Number, Individual Taxpayer Identification Number, or Employer Identification Number — where required for IRS reporting (Form 1099-K) and state tax reporting

Identity verification materials where required by law or by our fraud controls, which may include a government-issued ID image and a selfie, collected and processed by our identity verification vendor

Shipping origin address and handling preferences

Listing content

Item titles, descriptions, condition notes, and pricing

Photos and video of the item, including any metadata embedded in those files

Hardware identifiers you choose to include, such as console serial numbers, PC component model and serial numbers, or game disc and cartridge codes

Digital game keys, activation codes, or account credentials, where a listing involves a digital item

Important — do not include sensitive information in listings. Listing photos and descriptions are public. Please crop or obscure anything you did not intend to publish: account screens showing your gamertag, email address, or friends list; shipping labels showing your home address; and screens showing purchase history or payment details. We are not able to control what happens to information you publish yourself.

Communications and community content

Messages you send to other users through our in-platform messaging, including any attachments

Reviews, ratings, and seller feedback

Comments, questions on listings, and any public forum or community posts

Emails, chat messages, and phone calls with our support team, including recordings or transcripts where permitted by law and where we have told you a call is recorded

Other information you volunteer

Survey responses, beta program feedback, contest and giveaway entries

Referral information, including the name and email address of a person you refer (only provide these if that person is comfortable hearing from us)

3.2 Information We Collect Automatically

Device and connection data: IP address, device type and model, operating system, browser type and version, screen resolution, language, mobile carrier, and unique device or advertising identifiers

Usage data: pages and listings viewed, search queries, filters applied, time spent, click and scroll behavior, referring and exit URLs, and the dates and times of your activity

Transaction telemetry: the sequence of actions leading to a purchase or listing, used for fraud detection and to improve the flow

Approximate location: derived from your IP address, used to show relevant local listings, calculate shipping, and apply tax. Precise location is collected only from mobile devices and only if you grant that permission in your device settings; you can withdraw it at any time in those settings.

Cookies and similar technologies: see Section 8

3.3 Fraud and Trust-and-Safety Signals

Because stolen consoles, counterfeit accessories, and fraudulent digital keys are real problems in this category, we collect and generate signals used to detect them. These include device fingerprints, login patterns, listing similarity across accounts, velocity of listing and purchasing activity, and information we receive from payment networks about chargebacks and disputed transactions. We may also check hardware serial numbers submitted in listings against publicly available or industry stolen-device databases.

3.4 Payment Information

Payments on Yo-gg are processed by Stripe, Inc. When you enter a card number, bank account number, or payout details, that information goes directly to the processor. We do not store full payment card numbers or full bank account numbers on our systems. We receive and retain a limited record — the last four digits, card brand, expiration month and year, billing ZIP code, authorization result, and a token that lets us reference the payment method for future transactions you authorize.

Sellers should review the payment processor's own privacy policy at Stripe.com, since the processor acts as an independent controller of the information it collects for its own compliance, fraud, and financial-services obligations.

3.5 Information From Third Parties

Identity and fraud vendors: verification results and risk scores

Payment processor and card networks: authorization outcomes, chargeback notices, payout status

Shipping carriers: tracking scans, delivery confirmation, address validation and correction

Social or platform login providers, if you choose to sign in that way: your name, email address, and profile image as permitted by your settings with that provider

Advertising and analytics partners: aggregated audience and campaign measurement data

Public sources: business registration records for business Sellers

3.6 Information We Do Not Intentionally Collect

We do not ask for and do not want: government ID numbers except the tax identifiers described above; health information; biometric identifiers except where our identity verification vendor performs a facial comparison as part of Seller verification; precise geolocation except where you grant it; or information about your race, ethnicity, religion, political views, sexual orientation, union membership, or immigration status. Please do not submit these to us in messages, listings, or support tickets.

4. How We Use Information

Purpose

Examples

Providing the marketplace

Creating and maintaining your account; displaying listings; running search and recommendations; processing orders; calculating shipping and tax; issuing Seller payouts

Enabling transactions between users

Sharing the Buyer's shipping details with the Seller; sharing the Seller's return address with the Buyer; delivering in-platform messages

Trust, safety, and fraud prevention

Verifying Seller identity; detecting stolen hardware, counterfeit goods, and fraudulent digital keys; investigating chargebacks; enforcing our Terms of Service; banning repeat bad actors

Customer support and disputes

Answering questions; mediating Buyer–Seller disputes; processing returns and refunds

Communications

Order confirmations, shipping updates, payout notices, security alerts, policy changes, and — where you have not opted out — marketing emails, price-drop alerts, and saved-search notifications

Personalization

Recommending listings based on what you have browsed, searched, purchased, or saved; remembering your platform preferences (console generation, genre, region)

Advertising

Measuring campaign performance; showing you [MARKETPLACE NAME] ads on other sites and apps; building audiences with advertising partners (see Section 8)

Analytics and product development

Understanding which features are used; testing changes; debugging; building aggregated market data such as category price trends

Legal and compliance

Tax reporting; responding to lawful requests; maintaining records; establishing, exercising, or defending legal claims

We may de-identify or aggregate information and use it for any lawful purpose — for example, publishing average sale prices for a given console generation. Where we do so, we maintain the information in de-identified form and do not attempt to re-identify it.

Automated decision-making. We use automated systems to score risk on listings, accounts, and transactions. These systems can automatically hold a payout, cancel an order, restrict a listing, or suspend an account. If an automated decision materially affects you, you can ask for human review by contacting [PRIVACY EMAIL]. We do not use automated processing for profiling in furtherance of decisions that produce legal or similarly significant effects beyond these trust-and-safety and payment measures.

5. How We Share Information

With other users. This is the heart of a peer-to-peer marketplace, so we want to be explicit:

Your public profile — username, profile photo, bio, member-since date, ratings, reviews, and active listings — is visible to anyone, including people without an account, and may be indexed by search engines.

When you buy, we give the Seller your name, shipping address, order contents, and the contact channel needed to fulfill and, if necessary, discuss the order.

When you sell, we give the Buyer your username, return address or shipping origin as applicable, and your item and shipping details.

Messages you send another user are visible to that user and to our trust-and-safety team, and may be reviewed in a dispute.

Reviews and ratings you leave are published with your username.

With service providers who process information on our behalf under contract and only on our instructions: cloud hosting and storage, payment processing, identity verification, fraud detection, shipping and label generation, email and SMS delivery, customer support tooling, analytics, and advertising measurement.

With shipping carriers, who receive the name, address, phone number, and package details needed to deliver an order and who use that information under their own privacy policies.

With advertising partners. We may share identifiers and activity data with advertising platforms so we can reach you and people like you off-platform. Under California and several other state laws, this can constitute a "sale" or "sharing" of personal information, or processing for "targeted advertising." See Sections 8 and 9 for how to opt out.

For legal reasons. We may disclose information when we believe in good faith it is necessary to comply with a law, regulation, subpoena, court order, or lawful request from a government or law enforcement authority; to enforce our Terms of Service; to investigate suspected fraud or theft, including cooperating with law enforcement on stolen-hardware reports; or to protect the rights, property, or safety of Yo-gg, our users, or the public.

In a business transfer. If we are involved in a merger, acquisition, financing, reorganization, or sale of all or part of our assets, personal information may be transferred as part of that transaction. We will notify you and describe your choices before your information becomes subject to a materially different privacy policy.

With your direction or consent for any other purpose we describe to you at the time.

We do not sell your personal information for money.

6. Data Retention

We keep personal information only as long as we need it for the purposes described above, then delete or de-identify it.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, hashed passwords, access controls limiting employee access to what their role requires, logging and monitoring, and periodic security review. We offer two-factor authentication and strongly recommend Sellers enable it.

No system is perfectly secure. We cannot guarantee the security of information transmitted to or from the Services. You are responsible for keeping your password confidential and for the activity on your account. If you believe your account has been compromised, contact us immediately at support@yo-gg.com.

If a breach affecting your personal information occurs, we will notify you and applicable regulators as required by law.

8. Cookies, Tracking, and Advertising

We and our partners use cookies, pixels, SDKs, local storage, and similar technologies for:

Strictly necessary functions: keeping you signed in, remembering cart contents, load balancing, and fraud prevention. These cannot be turned off.

Functional purposes: remembering language, currency, and display preferences.

Analytics: understanding traffic and feature usage.

Advertising: measuring campaigns and showing you relevant ads on other sites and apps.

Your controls:

Cookie preference center: [LINK — accessible from the site footer]

Browser settings: most browsers let you block or delete cookies; blocking necessary cookies will break parts of the Services

Mobile: use your device's "Limit Ad Tracking" (iOS) or "Delete advertising ID" (Android) settings

Industry opt-outs: optout.aboutads.info and optout.networkadvertising.org

Global Privacy Control. We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals. When we detect one, we treat it as a request to opt out of the sale and sharing of personal information and of targeted advertising for that browser or device. If you are signed in, we apply it to your account as well.

Do Not Track. Browsers' "Do Not Track" signals are not yet standardized; we do not respond to them separately, but we do honor GPC as described above.

9. Your Privacy Rights

9.1 Rights Available to All Users

Regardless of where you live, you can:

Access and update most of your information in Account Settings

Download a copy of your data from Account Settings → Privacy → Download my data

Close your account (subject to completing open orders and to the retention periods in Section 6)

Unsubscribe from marketing email using the link in any marketing message, or in Notification Settings. Transactional messages — order confirmations, payout notices, security alerts — cannot be turned off while your account is open.

9.2 State Privacy Rights

Residents of states with comprehensive consumer privacy laws — currently including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, with Arkansas effective July 1, 2026 — have some or all of the following rights, depending on their state's law:

Know / Access — confirm whether we process your personal information and obtain a copy, including the categories collected, the sources, the purposes, and the categories of third parties we disclose to

Delete — request deletion of personal information we hold about you

Correct — request correction of inaccurate personal information

Portability — receive your information in a portable, machine-readable format

Opt out of targeted advertising

Opt out of the sale or sharing of personal information

Opt out of profiling that produces legal or similarly significant effects

Limit use of sensitive personal information

Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a privacy right

Appeal — if we deny your request, you may appeal (Section 9.5)

9.3 California-Specific Disclosures (CCPA/CPRA)

In the preceding 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act:

9.4 How to Exercise Your Rights

Online: yo-gg.com/privacy-request

Email: privacy@yo-gg.coml

Verification. To protect your account, we will verify your identity before acting on an access, deletion, or correction request — usually by confirming control of the email address on the account, and for higher-risk requests by asking you to match additional account details. We will not create new accounts or collect new categories of information solely to verify you.

Timing. We respond within 45 days, and may extend once by an additional 45 days where reasonably necessary, with notice to you.

Limits on deletion. We may decline all or part of a deletion request where we must retain information to complete a transaction, comply with a legal obligation (including tax reporting), detect security incidents or fraud, exercise or defend legal claims, or for other reasons permitted by law. We will tell you which exception applies.

9.5 Appeals

If we deny your request, you may appeal by replying to our decision or by writing to privacy@yo-gg.com with "Privacy Appeal" in the subject line. We will respond within 45 days with our decision and reasoning. If your appeal is denied, you may contact your state Attorney General. California residents may also file a complaint with the California Privacy Protection Agency.

10. Third-Party Links and Services

Listings, messages, and pages on the Services may link to third-party sites — a game publisher's page, a video review, an external payment or shipping site. We do not control those sites and are not responsible for their privacy practices. Review their policies before providing information.

Never complete a purchase, send money, or share account credentials outside Yo-gg.com. Off-platform transactions are a common fraud pattern in this category and are not covered by our protections.

11. Notice to Users Outside the United States

The Services are intended for users in the United States. We store and process information in the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. If the changes are material, we will provide additional notice — by email to the address on your account, by an in-product notice, or both — at least [15] days before the changes take effect, unless a shorter period is required by law. Your continued use of the Services after the effective date means you accept the updated policy.

13. Contact Us

Yo-GG LLC Privacy questions and requests: privacy@yo-gg.com Security reports: security@yo-gg.com