LEGAL

Privacy Policy

// effective :: August 2, 2026

DigiTrack ("we", "our", "the Service") is committed to protecting your privacy. This policy explains what we collect, why, and what happens to it.

Short version: we collect what is needed to run a stats tracker and nothing else. There are no advertising trackers and no analytics on this site, and we do not sell or share your data.

1. Information we collect

  • Google account data: when you sign in with Google we receive your name, email address and profile picture. We never receive your Google password.
  • Profile: the display name you choose, and your country. Your country is filled in for you from your IP address the first time you sign in; you can change or clear it in your settings at any time. Only the resulting country code is saved to your profile.
  • Gameplay data you enter: matches, results, decks and decklists, and the teams you belong to.
  • Subscription data: if you subscribe to Premium, Stripe processes and stores your payment details. We store only your Stripe customer and subscription identifiers and the status of your subscription — never card numbers.

2. How we use it

  • Operate the Service: authenticate you and store the decks and matches you record.
  • Compute your personal statistics, and the anonymous site-wide archetype aggregates.
  • Show you to your teammates on a shared roster, and deliver team invitations by email.
  • Manage Premium subscriptions and entitlements.
  • Investigate abuse and keep the Service running.

We do not use your data for advertising, and we do not sell it to anyone.

3. What other users can see

  • Decks you register are public to signed-in users through the deck pool, unless marked private (a Premium feature).
  • Teammates can see your decks, matches and summary statistics for as long as you share a team, along with your display name and country. If you have not set a display name, the roster falls back to the part of your email address before the @.
  • Site-wide archetype statistics are anonymous. They report win rates and play rates without identifying who played which game.
  • Your email address is never shown publicly. Members of a team you belong to can see it.

4. Third-party services

We rely on the following processors, each governed by its own privacy policy:

  • Google — sign-in (OAuth) only.
  • Supabase — the database, authentication and backend that store your data.
  • Stripe — payment processing for Premium subscriptions.
  • Resend — delivery of team invitation emails.
  • A geolocation lookup service — receives your IP address once, the first time you sign in, and returns the country code stored on your profile.

5. Analytics, cookies and advertising

We do not run analytics, advertising or third-party tracking of any kind. There is no Google Analytics, no advertising pixel and no cross-site tracker on this site, so there is no cookie banner to dismiss.

The only data stored in your browser is:

  • your sign-in session token, which keeps you logged in;
  • interface preferences, such as your chosen view mode or best-of setting;
  • unsaved deck builder drafts, so you do not lose work on a reload.

Clearing your browser storage removes all of it and signs you out.

6. Data storage and security

Data is stored on servers we control, and all traffic is encrypted in transit over HTTPS. Database access rules restrict each row to the account that owns it and, where applicable, to its teammates. No system is perfectly secure, but we apply standard practices to protect your information.

7. Data retention

We retain your data for as long as your account exists. If you delete your account, your personal data — profile, decks and matches — is deleted. Anonymous aggregate statistics already computed do not identify you and may remain.

8. Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Your rights

  • Access: request a copy of the personal data we hold about you.
  • Correction: correct your profile in the app, or ask us to fix anything else.
  • Deletion: request deletion of your account and personal data.
  • Withdraw consent: revoke this app's access from your Google account settings at any time.

To exercise any of these, email hello@tcgtrack.me.

10. Changes to this policy

We may update this policy. Changes will be posted on this page with an updated effective date.

11. Contact

Questions about this policy or your data: hello@tcgtrack.me.