Privacy

pokecardstats has no accounts, no ads and no advertising trackers. Visits are measured anonymously, without cookies. Here is everything the site processes, and why.

Data controller

[TO COMPLETE: publisher's name or pseudonym], reachable at [TO COMPLETE: contact email address].

Data processed

• An anonymous identifier (a random number), stored in a cookie when you cast your first vote. It contains no information about you.
• Your votes: the two cards shown, the one you picked, the date, and the duel's filters if it was themed, linked to that identifier.
• An IP address fingerprint: your IP address is never stored. Only an encrypted fingerprint, computed with a key that changes every day, is kept for a few minutes to limit the number of votes per minute.
• Technical logs kept by the host (IP address, requested page, date), for the operation and security of the service.

Purposes and legal basis

Running the duels, building the community rankings, showing you “My taste” and preventing abuse (automated votes). Legal basis: the publisher's legitimate interest in offering this service and protecting its integrity (Article 6(1)(f) GDPR).

Retention periods

• Cookie: 390 days at most (under 13 months), never extended automatically.
• Votes: linked to your identifier for 13 months at most, then unlinked. They still count in the statistics afterwards, anonymously.
• IP address fingerprint: a few minutes (ten at most).
• Host logs: according to its policy (a few hours to a few days).

Recipients and processors

• Vercel Inc. (site hosting, United States; functions run in Frankfurt).
• Audience measurement (Vercel Web Analytics): the site counts page views, with the page visited, the referring site, the country, the device type and the browser. These figures are aggregated: no cookie, no stored identifier, no tracking across sites or from one day to the next. They are only used to know how many people visit the site and which pages. [TO COMPLETE: check the details in the Vercel Web Analytics documentation]
• Neon, a Databricks company (database, stored in Frankfurt; US company).
• Transfers outside the European Union: covered by the safeguards provided by these processors (European Commission standard contractual clauses, EU–US Data Privacy Framework where applicable). [TO COMPLETE: check the safeguards in Vercel's and Neon's DPAs]
• TCGdex: card images are displayed straight from its server (assets.tcgdex.net), which therefore receives your IP address, like any site you visit. [TO COMPLETE: TCGdex location and policy, to be checked]

Fonts are served by the site itself: no request to Google.

Cookies

The site sets a single cookie, named vid, when you cast your first vote. It is strictly necessary for the voting service you request (recognising your votes, not showing you the same pairs again, limiting abuse, showing “My taste”), so it is exempt from consent and the site shows no banner. There are no analytics or advertising cookies: audience measurement works without cookies. The session vote counter and the welcome sentence are remembered in your browser, without being sent to the site. The language is chosen by the page address (/fr for French): no extra cookie.

Your rights

You have the rights of access, rectification, erasure, objection and restriction.

• Immediate erasure: the “Delete my data” button on the My taste page unlinks all your votes from your identifier and deletes the cookie.
• Other requests: write to [TO COMPLETE: contact email address] with your anonymous identifier (shown on the My taste page), without which your votes cannot be found.
• You can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr).

Last updated: [TO COMPLETE: launch date]