1. Overview
This policy applies to everyone who visits or uses Duelist Social. It covers what information we collect, how we use it, and what rights you have over it.
2. Information You Provide
When you create an account, we collect:
- Your email address (used for login codes and account notices)
- Your handle and display name
We never store your password in plain text. It is salted and hashed with scrypt, and only the hash is stored — we can’t read or recover your original password.
When you use the site, we store the content you create:
- Decklists, wishlists, and profile details you add (including social links and profile images)
- Forum posts and chat messages
- Reports you file and support messages you send
We use this to run the features you’re using. We won’t add you to a marketing list unless you ask us to.
3. Information Collected Automatically
We keep standard server logs (IP address, request time, page requested) for security and debugging. Our moderation system logs rule violations (for example, content our filters block) to enforce escalating bans fairly.
Content that violates our standards — including harmful or sexually explicit material prohibited by our Terms — is removed when found or reported, and a record of the violation is retained on the posting account for moderation and ban-escalation purposes.
Our own analytics are privacy-focused and cookieless. Free accounts see ads served by Google AdSense, which we only enable after you consent (see below); Premium and Business accounts see no ads. We never sell your personal data.
4. Cookies and Local Storage
- Session cookie — keeps you logged in. Essential; removed on logout.
- Consent cookie — remembers your ads choice below. Essential to honoring it.
- Advertising cookies — set by Google AdSense to show relevant ads, only if you choose “Accept all” in the consent banner. Choose “Essential only” and no ad cookies are set.
- Theme preference — stored in your browser’s local storage, never sent to us.
Ads are provided by Google AdSense, whose use of cookies is governed by Google’s policies. You can change or withdraw consent any time by clearing the consent cookie. Outbound marketplace links (like TCGplayer) are affiliate links — after you click one, that site’s own cookies and privacy policy apply.
5. How We Use Your Information
- Operate accounts, decklists, forums, chat, and the rest of the site
- Reply to support messages
- Enforce community rules and keep the site safe
- Meet any legal requirements that apply to us
6. Data Sharing
We don’t sell, rent, or trade your personal information. Period.
We may share limited information with:
- Service providers — hosting and email delivery vendors that run our infrastructure
- Legal requirements — if the law compels us to
Content you publish (decklists, forum posts, your profile) is visible to other users by design.
7. Data Retention
Account data is kept while your account exists. Support messages are kept long enough to respond and maintain a record, usually no longer than 24 months. Moderation logs are kept as long as needed to enforce ban escalation. You can ask us to delete your personal data at any time.
8. Your Rights
No matter where you live, you can:
- Ask what personal data we have about you
- Ask us to fix anything that’s wrong
- Ask us to delete your data
- Opt out of non-essential data collection
If you live in California, the CCPA and CPRA give you additional rights: the right to know, to delete, to correct, to opt out of sale (we don’t sell data), and to limit use of sensitive data.
9. Children
Duelist Social isn’t directed at children under 13, and we don’t knowingly collect their data. If you believe a child has created an account, contact us and we’ll remove it.
10. Changes to This Policy
If we make meaningful changes, we’ll update the “Effective Date” at the top of this page.
11. Contact
Questions about this policy, or want to exercise any of your data rights?