Privacy Policy
COLTCG (“we”, “us”) operates the website https://www.coltcg.com (the “Service”). This policy describes how we handle personal information when you use the Service, including when you sign in with Google.
1. Who is responsible
The data controller for personal information processed through this Service is the operator of COLTCG at the contact details published on https://www.coltcg.com.
2. Information we collect
- Account information (optional): If you choose to sign in with Google, we receive identifiers and profile data that Google shares with our authentication provider (Supabase), such as your Google account ID, email address, and name or profile image as permitted by your Google account settings and Google’s policies.
- Technical data: Standard server and security logs may include IP address, browser type, timestamps, and similar diagnostic data as processed by our hosting and database providers.
- Local storage: Some features may store preferences or deck data in your browser on your device. That data stays on your device unless you explicitly use a feature that syncs or sends it to our servers.
3. How we use information
- To provide and secure the Service.
- To authenticate you when you sign in.
- To maintain profiles and settings tied to your account.
- To comply with law and respond to lawful requests.
4. Legal bases (where applicable)
Where the GDPR or similar laws apply, we rely on performance of a contract, legitimate interests (operating and securing the Service), and consent where required (for example, for non-essential cookies or marketing, if we add them and ask for consent).
5. Sharing and subprocessors
We use trusted service providers to run the Service. These may include:
- Supabase for authentication and database hosting.
- Google when you use Google sign-in (subject to Google’s privacy policy).
- Hosting / infrastructure providers that process data only as needed to deliver the Service.
Some Yu-Gi-Oh! card image URLs and related catalog fields we display are originally obtained from the public YGOPRODeck API, stored in our database, and served as part of the Service. YGOPRODeck is an independent project with its own terms and policies.
We do not sell your personal information. We may disclose information if required by law or to protect rights, safety, and security.
6. International transfers
Providers may process data in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses offered by our providers.
7. Retention
We keep account-related information while your account exists and for a reasonable period afterward for security, backups, and legal obligations. Technical logs are retained according to provider defaults and operational need.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You may also lodge a complaint with a supervisory authority. To exercise rights, contact us using the channels on our website.
9. Children
The Service is not directed at children under the age where parental consent is required in your jurisdiction. If you believe we have collected such data, contact us and we will take appropriate steps.
10. Changes
We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date.
11. Contact
Questions about this policy: use the contact or support information published on https://www.coltcg.com.