Privacy Notice

1. Who we are

Yu-Gi-Oh DB is operated by Saad Bin Farooq, who acts as the data controller for any personal data collected through this website.

2. What we collect

We collect only the minimum needed to run and improve the site:

• Usage data: pages visited, search queries, clicks, and approximate device/location information (via IP address) for analytics and performance monitoring.
• Device/technical data: browser type, operating system, screen size, and referral information.
• Support communications: any message you send us through support or contact channels.
• Account data: if you create an account, we store your email address, display name, and sign-in details (a password, or your Google account identity if you use "Sign in with Google").
• Decks you build: deck names and card lists you save to your account, including visibility settings. If you list a deck in Community decks, that deck and your display name become publicly visible.
• Email preferences: if you opt in to email alerts (such as daily banlist updates for Premium subscribers), we store your choice so we know what to send you.
• Payment data: we do not collect or store card details. Payments for Premium subscriptions and tips are handled by Stripe, our payment provider; see Section 5 below.

You can browse almost all of Yu-Gi-Oh DB without an account. An account is only needed to save decks, share decks, appear in Community decks, and receive email alerts. We do not sell your personal data.

3. How we use your data

• To provide and maintain the database, deck builder, and search features.
• To operate your account: signing in, saved decks, and share links.
• To send essential account emails (such as email confirmation and password resets) and, if you opt in, banlist email alerts. You can stop alerts at any time.
• To understand how visitors use the site and improve functionality.
• To detect abuse, fraud, and security issues.
• To respond to support requests.
• To comply with legal obligations.

4. Legal basis

We process data based on our legitimate interests in running and improving the service, on the necessity of processing for providing the service you request, and on compliance with legal obligations. Where consent is required (for example, non-essential cookies), we ask for it first.

5. Who we share data with

We share data only with trusted service providers and as required by law:

• Stripe: our payment provider processes payment, billing, and invoicing data when you subscribe to Premium or leave a tip. Stripe acts as a separate controller for that data.
• Google: when you use "Sign in with Google", Google handles the sign-in and provides your account identity to us.
• Affiliate partners (TCGplayer, eBay, Amazon): buy links on card and set pages are tracked affiliate links. Clicking one tells the shop you came from us so we may earn a commission, at no extra cost to you. The shop receives standard referral information.
• Hosting and analytics providers: for site operation and usage analytics.
• Professional advisers and authorities: where necessary for legal compliance or to protect our rights.

6. Data retention

We keep usage and analytics data for as long as it is useful for understanding and improving the service, typically up to 26 months, after which it is deleted or anonymised. Support messages are kept for as long as needed to resolve the issue and then deleted.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to receive a copy of it in a portable format. You can also withdraw consent where processing is based on consent.

To exercise these rights, contact us through the Support page. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect data, including HTTPS encryption, access controls, and regular review of our service providers.

9. Cookies

We use essential cookies needed for the site to function. Where we use analytics or similar cookies that are not strictly necessary, we will ask for your consent. You can manage your cookie preferences through your browser settings.

10. International transfers

Some service providers may process data outside your country. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your data.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page with the updated date.