Privacy Notice

1. Who we are

Yu-Gi-Oh DB is operated by Saad Bin Farooq, who acts as the data controller for any personal data collected through this website.

2. What we collect

We collect only the minimum needed to run and improve the site:

• Usage data: pages visited, search queries, clicks, and approximate device/location information (via IP address) for analytics and performance monitoring.
• Device/technical data: browser type, operating system, screen size, and referral information.
• Support communications: any message you send us through support or contact channels.
• Payment data: we do not collect or store card details. Tips are handled by Paddle; see Section 5 below.

We do not require accounts, email addresses, or passwords to use Yu-Gi-Oh DB.

3. How we use your data

• To provide and maintain the database and search features.
• To understand how visitors use the site and improve functionality.
• To detect abuse, fraud, and security issues.
• To respond to support requests.
• To comply with legal obligations.

4. Legal basis

We process data based on our legitimate interests in running and improving the service, on the necessity of processing for providing the service you request, and on compliance with legal obligations. Where consent is required (for example, non-essential cookies), we ask for it first.

5. Who we share data with

We share data only with trusted service providers and as required by law:

• Paddle: as our Merchant of Record, Paddle processes payment, subscription management, tax compliance, and invoicing data when you leave a tip. Paddle acts as a separate controller for that data.
• Hosting and analytics providers: for site operation and usage analytics.
• Professional advisers and authorities: where necessary for legal compliance or to protect our rights.

6. Data retention

We keep usage and analytics data for as long as it is useful for understanding and improving the service, typically up to 26 months, after which it is deleted or anonymised. Support messages are kept for as long as needed to resolve the issue and then deleted.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to receive a copy of it in a portable format. You can also withdraw consent where processing is based on consent.

To exercise these rights, contact us through the Support page. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect data, including HTTPS encryption, access controls, and regular review of our service providers.

9. Cookies

We use essential cookies needed for the site to function. Where we use analytics or similar cookies that are not strictly necessary, we will ask for your consent. You can manage your cookie preferences through your browser settings.

10. International transfers

Some service providers may process data outside your country. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your data.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page with the updated date.