Privacy policy
This page explains what Open TCG collects about you, why, for how long, and what you can do about it.
Who is responsible
The data controller is the publisher of the site (see the legal notice): Open TCG, contact@otcg.org.
What we collect and why
- Your account: username, email address and password (stored only as a secure hash). Needed to provide the game (contract).
- Your profile, if you fill it in: biography and picture, shown publicly.
- Your game activity: cards, boosters opened, coins, trades, gifts, market sales, rewards and missions. Needed to provide the game.
- IP addresses you connect from, and the one you signed up from: kept 90 days, to protect the site against cheating (several accounts run by one person), bots and attacks (legitimate interest).
- Reports you send about content, so that administrators can handle them.
No advertising and no tracking: your data is not sold or shared for marketing.
Cookies and local storage
- Session (otcg_sess): keeps you signed in while you browse; deleted when you close your browser.
- Stay signed in (otcg_remember): signs you back in for one year after your last visit; deleted when you log out.
- Language (lang): remembers the language you chose, for one year.
- Local preferences (stored in your browser only): sound on or off, binder sorting.
These are all strictly necessary for the site to work or remember your choices: no consent banner is needed for them.
Other services involved
- The host of the site (see the legal notice), which stores the data.
- Google Fonts: the site’s fonts are loaded from Google’s servers, which see your IP address.
- cdnjs (Cloudflare): the 3D library used to display boosters is loaded from it.
- Cloudflare Turnstile: checks that sign-ups are not made by robots.
How long
Your account data is kept until you delete your account. Accounts whose email is never confirmed are deleted after one day. IP addresses are deleted after 90 days.
Your rights
You can access, correct, export or delete your data, and object to its use. Most of it can be done yourself on your Account page, including deleting your account. For anything else, write to contact@otcg.org. You can also file a complaint with the CNIL (cnil.fr).
When you delete your account, your data is deleted; card sets you created that other players collect stay available to them under the Open TCG account (see the terms of use).
Last updated: 2026-10-18