Privacy Policy

Information we process

When you browse the public archive, the web server may process standard technical information such as your IP address, browser type, requested URL, timestamps and security logs.

If you submit a card review, we process the collector name you provide, rating, optional review title, review text and the submission time. A one-way keyed hash of the submitting IP address may be stored for abuse prevention and moderation without storing that address in plain text in the review record.

Administrators use authenticated accounts. Session information and security tokens are processed so the private administration area can work safely.

Why we use this information

Information is used to operate the archive, publish collector reviews, prevent spam or misuse, maintain security, troubleshoot errors and keep the website reliable.

We do not use review information for automated decision-making, behavioural advertising or the sale of personal information.

Cookies and local browser data

The website may use strictly necessary cookies or equivalent storage for Laravel sessions, CSRF protection, authentication and optional administrator “remember me” functionality. These are used to provide requested features and protect forms and accounts.

At the date shown above, the public website does not intentionally set advertising, profiling or behavioural analytics cookies. If non-essential tracking is introduced later, this policy and the cookie controls should be updated before that technology is enabled where consent is required.

Third-party services and card artwork

The archive may use Pokémon Trading Card Game data or high-resolution artwork supplied by the Pokémon TCG API or its image delivery infrastructure when a locally stored optimized image is unavailable. Loading a remote image can cause your browser to make a request to that provider and disclose normal request information such as your IP address and user agent to that provider.

Hosting, infrastructure and security providers may also process technical information to deliver the website. We do not sell personal information to advertisers.

Retention and security

Published reviews may be retained while they remain useful to the card archive, unless they are removed by an administrator or a valid deletion request is accepted. Security logs and session records are retained only as long as operationally necessary or according to hosting and security settings.

Reasonable technical and organisational safeguards are used, including authentication, CSRF protection, rate limiting and restricted administration routes. No internet service can guarantee absolute security.

Your choices and privacy rights

Depending on where you live, applicable privacy law may give you rights to request information about personal data, access it, correct it, object to certain uses, restrict processing or request deletion. Requests are subject to identity verification and applicable legal exceptions.

If you submitted a review and want it corrected or removed, contact the website operator and provide enough information to identify the review without sending unnecessary sensitive information.

Changes to this policy

This policy may be updated when the website, providers or data practices change. The “Last updated” date on this page indicates the current published version.