Legal

Privacy Policy

Effective date: March 30, 2026 · Last updated: March 30, 2026

The short version: we collect only what's needed to run CRDBRD products. We don't sell your data. We don't run ads. You can delete your account at any time.

1. Who we are

CRDBRD ("we", "us", "our") operates the website crdbrd.gg and its products, including CRDBRD Track (available at track.crdbrd.gg and as a mobile app on iOS and Android) and CRDBRD Find. This policy explains what personal information we collect, how we use it, and your rights regarding it.

For questions or requests, contact us at .

2. Information we collect

Account information
When you create an account, we collect your email address and any display name you choose. This is stored securely via Supabase, our database provider.

Content you create
CRDBRD Track stores the tournament records, deck configurations, match results, and report preferences you enter. This data is associated with your account and stored in our database so you can access it across devices.

Device permissions (mobile app only)
The CRDBRD Track mobile app may request the following permissions:

Photo Library (iOS) — to save generated report images directly to your Camera Roll. Requested only when you tap "Download PNG".
Storage (Android) — to save generated report images to your Downloads folder. Requested only when you tap "Download PNG".

We do not access, read, or upload photos or files already on your device. We only write the image you generate.

Usage information
Our infrastructure (Supabase, Cloudflare) may automatically log standard server-side data such as IP addresses, request timestamps, and browser/device type. This is used solely for security and operational purposes and is not used for advertising or sold to third parties.

3. How we use your information

To authenticate you and maintain your account
To store and sync your tournament tracking data across devices
To generate and save report images at your request
To send transactional emails (e.g. password reset) — we do not send marketing emails without your consent
To operate, maintain, and improve our services

4. Data sharing

We do not sell, rent, or trade your personal information. We share data only with the service providers necessary to operate CRDBRD:

Supabase — authentication and database hosting (supabase.com/privacy)
Cloudflare — content delivery and DDoS protection (cloudflare.com/privacypolicy)

We may disclose information if required by law or to protect the rights and safety of our users.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information and content within 30 days, except where we are required by law to retain it longer.

6. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Withdraw consent at any time

To exercise any of these rights, email us at . We will respond within 30 days.

7. Children's privacy

CRDBRD products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS/TLS), secure authentication via Supabase, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date at the top of this page and, for material changes, notify users via email or an in-app notice. Continued use of CRDBRD after changes take effect constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, please reach out:

Email:
Website: crdbrd.gg