Privacy Policy
Understand what data MyDeckStats stores, why it is processed, and how your rights are protected.
Last Updated: April 1, 2026
Privacy at a Glance
A plain-language summary before the full text.
What We Keep
Account data, gameplay data you choose to save, support/moderation messages, and technical security logs.
What You Control
You can request access, correction, deletion, restriction, objection, portability, and consent withdrawal where applicable.
Consent-Based Ads
Advertising choices for relevant regions are managed through Google AdSense Privacy & Messaging and can be reopened from the footer.
Independent Project
MyDeckStats is an independent hobby project operated by a single developer based in Italy.
1. Data Controller
The controller responsible for personal data processing on MyDeckStats is:
2. Types of Data Collected
Depending on how you use the site, MyDeckStats may process:
- Account data such as username, email address, and encrypted login credentials
- Gameplay data and content you choose to store, such as decks, tournaments, one-shots, notes, and statistics
- Community and support data such as likes, reports, feedback, and contact requests
- Technical and security data such as IP address, browser/device information, and operational logs
- Advertising and consent-related data handled through Google technologies where applicable
- Billing and subscription status data where premium payments or trials are enabled
3. Purposes of Processing
- Provide registration, authentication, and core site features
- Save and display the data and statistics that users choose to track
- Operate public profile, deck, and community features made available by the service
- Respond to support, moderation, abuse, or legal requests
- Protect the site against spam, fraud, abuse, and technical incidents
- Serve advertising and manage privacy choices through Google AdSense Privacy & Messaging where relevant
- Operate premium billing, subscription status, trial access, cancellation, and refund handling where those features are enabled
- Comply with legal obligations and enforce site rules
4. Legal Bases
| Purpose | Legal Basis |
|---|---|
| Account creation and core service delivery | Contract or pre-contractual steps (Art. 6(1)(b) GDPR) |
| Security, moderation, abuse prevention, and service stability | Legitimate interest (Art. 6(1)(f) GDPR) |
| Support and contact requests | Contract / pre-contractual steps or legitimate interest, depending on the request |
| Advertising technologies and related consent collection where required | Consent (Art. 6(1)(a) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
5. Data Retention
Data is retained only for as long as reasonably necessary for the purposes described above.
- Account and gameplay data are generally retained until the account is deleted, unless longer retention is needed for legal claims, abuse prevention, or backups
- Support, moderation, and report data may be retained for the time needed to review and manage the issue
- Technical and security logs are kept for a limited period appropriate to operational and security needs
- Advertising and consent-related data may be retained according to the configuration and retention periods of the third-party services involved
6. Data Sharing
MyDeckStats does not sell personal data. Data may be shared only when necessary with service providers or third parties involved in running the site, for example:
- Hosting and infrastructure providers
- Email and notification providers
- Google LLC and related advertising / consent infrastructure where applicable
- Payment and billing providers used to process premium subscriptions, where enabled
- Authorities, advisors, or counterparties where required by law or necessary to protect legal rights
7. Billing and Payment Data
If premium billing is enabled, MyDeckStats may store limited subscription and billing status data needed to activate access, track renewal status, handle cancellations, and review refund requests. Payment card or wallet details are generally processed by the external billing provider and are not fully stored on MyDeckStats itself.
8. International Transfers
Some providers used by the site may process data outside the European Economic Area, including in the United States. Where applicable, transfers rely on the safeguards made available under EU data protection rules, such as adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms used by the provider.
9. User Rights
Under the GDPR, users may have the right to:
- Access personal data
- Request rectification or deletion
- Request restriction of processing
- Object to processing based on legitimate interest
- Withdraw consent at any time where processing is based on consent
- Receive portable data where applicable
- Lodge a complaint with a competent supervisory authority
Depending on your country, state, or region of residence, you may also have additional privacy rights under local law.
10. How to Exercise Your Rights
Requests can be sent to info@mydeckstats.com. Please include enough information to let the request be identified and handled correctly.
11. Children's Privacy
MyDeckStats is not intended for children under the age of 14. If you believe that personal data relating to a child under 14 has been provided without appropriate authorization, please contact us so the matter can be reviewed and, where appropriate, corrected or removed.
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. The latest version will always be published on this page with the updated date shown above.