Privacy Policy

1. Data Controller

The application YGO-Decklab is operated by an individual developer. For any request concerning your personal data, contact: contact@example.com .

2. Data Collected

When you create an account, the following data is collected:

• • Email address (required to log in)
• • Display name (optional, from your Google account if you use Google Sign-In)
• • Date and time of registration
• • Decks you save (card lists, deck name)

No payment information, location, or sensitive data is collected. No advertising cookies are used.

3. Purpose of Processing

• • Authenticate you and secure your account
• • Save your decks and make them accessible across sessions
• • Send essential service emails (password reset, important updates)
• • Send you commercial emails about our subscription plans and new features. You may unsubscribe at any time via the link included in each email.

Your email is never sold, rented, or shared with third parties for marketing purposes.

4. Google Sign-In

If you sign in via Google, we receive from Google your email address and public display name. We do not access your Google Drive, Gmail, or any other Google service. This data is governed by Google's Privacy Policy .

5. TikTok API Services

The application uses TikTok API Services to let its operator publish content (videos and images) directly to a single, dedicated TikTok account that the operator explicitly connects via TikTok Login Kit. This feature is not available to regular users of the application.

When the operator connects their TikTok account, we access:

• • Public profile information (nickname, avatar) — displayed on the publishing screen so the operator can confirm which account a post is going to
• • Available privacy level options and comment/duet/stitch settings for that account — required by TikTok before any post, so the operator can choose them for each publication
• • An OAuth refresh token — stored securely server-side and used solely to publish content to that account; TikTok rotates this token and we persist the new value automatically

This data is never sold or shared with third parties, and is used exclusively to operate the publishing feature described above. It is retained only as long as the TikTok account stays connected; disconnecting it (from the admin panel) deletes the stored token immediately. This data is subject to TikTok's Privacy Policy .

6. Data Retention

Your data is retained for the duration of your account's existence. If you delete your account, all associated data (email, name, decks) is permanently deleted within 30 days.

7. Your Rights (GDPR)

Under the GDPR (EU Regulation 2016/679), you have the right to:

• • Access — obtain a copy of your personal data
• • Rectification — correct inaccurate data
• • Erasure — request deletion of your account and data
• • Portability — receive your data in a structured format
• • Objection — oppose certain processing operations

To exercise these rights, contact contact@example.com . You also have the right to file a complaint with the CNIL (cnil.fr).

8. Security

Passwords are hashed (bcrypt). Database access is restricted. The application is served over HTTPS. No absolute security guarantee can be given, but reasonable industry-standard measures are in place.

9. Cookies

Necessary cookies (authentication, security, CSRF protection) are always active and cannot be disabled — they are required for the site to function.

Analytics cookies (Google Analytics, Ahrefs, PostHog) are only set with your consent, which you can give, refuse, or change at any time using our cookie management tool.

10. Changes to This Policy

This policy may be updated. In the event of significant changes, you will be notified by email. The date at the top of this page always reflects the latest version.