Privacy

What we keep when you have an account

• Your email address, and whether it is verified.
• Your handle.
• Which sign-in methods you linked (Google, Discord), by their account number at that provider.
• Your sessions: when each one started and ends, and the IP address and browser that started it, so sign-in can be limited and a session can be ended.
• For each email we send you, a one-way code made from your address and the time, kept 24 hours, so we can limit how many we send. Never your address itself.

What others can see

• Your profile, decks and record are shown to others only as you set them: Only me, Friends or Everyone. A copy of what you share (your profile’s name and picture, a shared deck’s name and cards) is kept beside your account so others can read it, and removed when you make it private.
• Your friends and the accounts you blocked. A block is never shown to the account you blocked.
• Notifications: which event happened and the ids it is about, kept 90 days. The names in them are looked up when you read them.
• A deck’s views are a count. We keep no record of who viewed it.

Reports and moderation

• A report you send is kept with its case: the reason and your note. The owner is never shown who reported.
• When a moderator acts on your content, the record keeps what was done, the moderator’s reason and the moderator’s address as a one-way code, never yours. The record is kept to account for every action.
• Closed cases and their reports are removed after a year.

What you may publish and how moderation works are in the terms.

What we never keep

• Your name or picture from Google or Discord.
• Any access to your Google or Discord account: we keep no token that could read it.
• Analytics, advertising or tracking of any kind.

Cookies and email

We set only the cookies that keep you signed in, so there is nothing to consent to. We use your email to sign you in, to confirm deleting your account and to tell you when a moderator acted on your account. Emails are sent through Cloudflare Email Service.

Deleting your account

Profile and settings, then Delete account. It is immediate. Your handle stays reserved for 90 days so nobody can pretend to be you, then it is free again. Nothing on your phone is touched.