The short version
- No ads, no selling of data, no audience measurement.
- Only your nickname and your scores are public, on the leaderboard. Your Discord name is never shown.
- You sign in with Discord: the site stores no password.
- Your data is only used to run the game.
- You can delete your account at any time, from the “My account” page.
Who is responsible
The site's publisher, described in the legal notice, reachable at contact@playforevercards.com.
What we collect
- Account: when you sign in, Discord sends your Discord ID, your username and display name, your avatar and your email address. They are kept by our authentication service and never shown on the site.
- Nickname: given when you sign up and changeable once, it is public. It appears on the leaderboard with your achievement points and your card count.
- Game: your copies and favorites, your coins and their movements, your booster history, your achievements, the days you played and your language.
- Technical: as with any website, our providers receive your IP address and browser details with each request, and keep them in technical logs for security.
Why: legal bases
- Running your account and the game: performance of the service you ask for by signing in (article 6(1)(b) GDPR).
- Protecting the site and preventing abuse: legitimate interest (article 6(1)(f) GDPR).
- Your email address is never used to send you anything: Discord only passes it on when you sign in.
Who has access
- Supabase, Inc.: database and authentication. Data is stored in the European Union.
- Discord, Inc.: sign-in service, which applies its own privacy policy.
- The site's host: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, États-Unis, privacy@vercel.com.
- These providers are US companies: any transfer outside the European Union is covered by the safeguards set out in the GDPR (standard contractual clauses or the EU–US Data Privacy Framework).
- Your data is never sold or shared for any other purpose.
Cookies
The site only uses cookies it needs to work. They do not require your consent.
- Sign-in session (sb-…-auth-token): keeps you signed in.
- Language (NEXT_LOCALE): remembers the language you chose.
- Redirect (auth-next): brings you back to the right page after signing in, deleted after ten minutes.
- No advertising or audience-measurement cookies.
How long we keep it
- Account and game data: as long as your account exists. Deleting your account erases them immediately and permanently.
- Technical logs: a limited time at our providers, for security.
Your rights
You can access your data, correct it, delete it, receive a copy (portability), object to its processing or ask for it to be restricted.
Deletion is done directly from the “My account” page, reached through your profile menu. For any other request, write to contact@playforevercards.com: we answer within one month.
You can also lodge a complaint with the CNIL, the French data protection authority, or with your own national authority.
Age
The game requires a Discord account, which is only open to people aged 13 or over.
Changes
This page may change, for example when a feature is added. The date at the top of the page shows the last update.
