Privacy
What this site holds about you, why, for how long, and how to remove it.
This site is run by volunteers. It sells nothing and has no ads or analytics. It is written to meet the UK and EU GDPR. Questions or corrections: GitHub or the Discord.
You do not need an account
Everything is readable without signing in, and reading is not logged. An account is only needed to write posts or save decks.
What we hold if you have an account
| What | Why |
|---|---|
| Email address | to sign you in |
| A hash of your password, if you set one | to check your password |
| Your Google or Discord account, if used | to sign you in |
| Display name, handle, bio, picture | your public byline |
| What you write and submit | it is the site |
| Sign-in times and IP addresses | kept by our auth provider to stop abuse |
We never see your password. Your name, handle and bio are public; your email is never shown.
Tournament results
Results are recorded against the handle you played under on melee.gg or Challonge, not your account. They were already public there. Ask if you want a handle unlinked or a result corrected.
Lawful basis
Your account and posts: performance of a contract. Sign-in records and rate limiting: legitimate interests in preventing abuse. We do not rely on consent.
Cookies
One strictly necessary session cookie, set when you sign in (HttpOnly,
Secure). No tracking cookies, so no consent banner.
Who else sees it
- Supabase: database and sign-in.
- Vercel: hosting.
- An email provider: sign-in and reset emails.
They process data only on our instructions. Some run servers outside the UK and EU, covered by standard contractual clauses. Nothing is sold or shared otherwise.
How long we keep it
Your account and posts stay until you delete them. Sign-in records are kept for weeks. Published posts and tournament results are kept indefinitely.
Your rights
From your data you can:
- Download your profile, posts (including drafts) and decks as JSON.
- Correct your details on your profile.
- Delete your account: email, password, connected providers, name, handle, bio and picture. This cannot be undone.
You can also object to or restrict processing, or complain to the ICO or your EU supervisory authority.
What deletion keeps
Published posts stay up under "Deleted member". Tournament results and rating correction records also stay. Ask if you think something specific should go.
Changes
This page changes through public pull requests. Material changes are announced in the Discord.