Privacy Policy

Information We Collect

When you use WikiTCG, we may collect the following information:

• Account information: If you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.
• Collection data: The cards you collect and packs you open are stored to maintain your collection.
• Payment information: If you purchase packs, payment is processed by Stripe. We do not store your credit card details. Stripe's privacy policy governs their handling of your payment data.
• Usage data: We may collect basic analytics such as pages visited and features used to improve the service.

How We Use Your Information

• To provide and maintain your account and card collection
• To process purchases
• To improve the service
• To communicate with you about your account if necessary

Data Sharing

We do not sell your personal information. We share data only with:

• Stripe: For payment processing
• Google: For authentication (OAuth)
• Hosting providers: To serve the application

Legal Basis for Processing (GDPR)

If you are located in the European Union or European Economic Area, we process your personal data on the following legal bases:

• Contract performance: Processing your account and collection data is necessary to provide the service you signed up for.
• Legitimate interest: We may process basic usage analytics to improve the service, where this does not override your rights.
• Consent: Where required, we obtain your consent before processing (e.g., optional communications).

Your Rights (EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the GDPR:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to data portability: Request a machine-readable copy of data you provided to us.
• Right to restrict processing: Request that we limit processing of your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us via our GitHub repository. We will respond within 30 days.

Data Retention

Your account and collection data are retained as long as your account is active. You may request deletion of your account and associated data by contacting us. Upon deletion, your data will be removed within 30 days, except where retention is required by law.

Cookies

We use strictly necessary cookies for authentication sessions. These cookies are essential for the service to function and do not require consent under GDPR. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track individual users.

International Data Transfers

Your data may be processed on servers located outside the EEA. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place as required by applicable data protection law.

Children's Privacy

WikiTCG is not directed at children under 13 (or under 16 in the EEA where applicable). We do not knowingly collect personal information from children under these ages.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will make reasonable efforts to notify users (e.g., through a notice on the service).

Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository.