Privacy policy
This site collects only what the game needs to run. Here is which data, why, for how long, and your rights.
Data we process
- Account: e-mail address, username, password (stored hashed, never in clear text) or Google identifier if you sign in with Google.
- Game: your cards, friends, trades, avatar and showcase.
- Technical: IP address and browser in the hosting provider’s logs (Vercel), kept for a few days for security and troubleshooting.
Purposes and legal basis
This data is used only to provide the service: signing you in, keeping your collection, connecting you with your friends and sending account e-mails (verification, forgotten password, deletion). Legal basis: performance of the service you request by creating an account (GDPR, art. 6(1)(b)). It is neither sold nor shared with third parties for advertising purposes.
Retention
As long as your account exists. “Delete my account”, at the bottom of the Account page, immediately erases the account, collection, friends and trades. Technical logs expire on their own.
Processors
To run, the site relies on:
- Vercel (site hosting, US company, servers in Frankfurt)
- Neon (database, hosted in Frankfurt, Germany)
- Resend (account e-mails)
- Google (only if you choose Google sign-in: we keep only your email and name, not your photo)
- Cloudflare Turnstile (bot protection on the sign-up form)
Transfers to US companies are covered by the safeguards provided by the GDPR (Data Privacy Framework certification or the European Commission’s standard contractual clauses).
Cookies
A single cookie, your session cookie, required to keep you signed in. No advertising or analytics cookies, hence no banner.
Your rights
Access, rectification, erasure, portability, objection: write to the address below, or delete your account yourself from the Account page. You may also lodge a complaint with the CNIL (cnil.fr).
Data controller: the site’s publisher (see the legal notice), reachable at contact@anime-card-collection.fr · Legal notice
Last updated: 25 October 2026.