Account privacy

The hub stores your username, email, hashed password, email-verification status, role, account access status and account creation time. It uses an essential, host-only session cookie to keep you signed in.

Linked accounts

When you approve a link, the hub stores the site's stable account ID and display name. The site receives your hub account ID and username. No passwords, emails, decks, artwork or other site content are shared by the linking service.

Each account can have one connection per site. You can remove the connection from either account without deleting either profile. We never link accounts just because their email addresses match.

Operational data

Short-lived linking requests, email tokens and hashed rate-limit keys are stored to support account access and protect against abuse. Overseers can suspend hub access or remove a connection. Successful administrative actions retain an audit of the acting and affected account IDs, action, reason, time and relevant site account identity; no passwords are recorded. Server error and access logs may also be retained by the hosting provider. Each subdomain has its own privacy information.

Account requests

Contact the site owner through an existing TCGGuilds support channel for account deletion or data-access requests. The operator must publish their contact details and final retention policy before opening registration publicly.