Privacy Policy

Last updated: June 4, 2026

recollect.gg ("we", "us", or "our") operates the recollect.gg website at https://recollect.gg and the recollect.gg iOS companion app (the "App") for Grand Archive TCG. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services, and explains the rights available to you under applicable law including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using recollect.gg, you agree to the collection and use of information as described in this policy.

1. Data Controller

The data controller responsible for your personal information is recollect.gg. For any privacy-related inquiries, use our support page.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Username or display name
  • Profile picture (optional)
  • Authentication credentials (managed securely by Clerk — see Section 5)

2.2 Card Collection & Deck Data

When you use the App or website, we collect:

  • Card collection entries (card IDs, quantities, editions, foil status)
  • Deck lists (card selections, deck names, descriptions, format, visibility settings)
  • Deck interactions (likes, comments, views)

2.3 Camera & Image Data (iOS App)

The Card Scanner feature requests access to your device camera solely to identify Grand Archive cards in real time. Camera frames are processed locally on your device and are not transmitted to our servers or stored. We do not access your photo library unless you explicitly choose to import an image.

2.4 Usage & Analytics Data

We automatically collect:

  • Pages and features accessed
  • Search queries within the app
  • Device type, operating system version, and app version
  • Session duration and interaction patterns
  • Crash reports and error logs
  • IP address (truncated for anonymization)

We do not use cross-site tracking, fingerprinting, or advertising identifiers.

2.5 Communications

If you contact us via email or the support form, we retain the content of that correspondence to resolve your inquiry and improve our services.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve recollect.gg and the iOS app
  • Store and display your card collection, deck lists, and tournament activity
  • Enable social features (public deck sharing, comments, likes)
  • Enforce format legality rules and display tournament data
  • Respond to support requests and resolve issues
  • Detect abuse and enforce our Terms of Service
  • Analyze aggregate usage trends to improve features
  • Send transactional emails (account security, service changes) — not marketing

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing personal data are:

  • Contract performance: Processing necessary to provide the services you signed up for (account management, deck storage, collection sync).
  • Legitimate interests: Analytics, fraud prevention, and service improvement — where these do not override your fundamental rights.
  • Legal obligation: Where required by applicable law.
  • Consent: For any optional data collection where we explicitly ask for your consent. You may withdraw consent at any time.

5. Third-Party Services

We work with trusted third-party service providers to operate recollect.gg. These providers may process personal data on our behalf, strictly for the purposes described in this policy, and are bound by appropriate data processing agreements. The categories of providers we use include:

  • Authentication provider — manages secure login and account identity
  • Cloud database provider — stores your account, collection, and deck data
  • Hosting & infrastructure provider — serves the website and API
  • Rate-limiting infrastructure — protects the service from abuse

We do not sell your data to third parties. We do not use advertising networks or data brokers.

6. Data Retention

  • Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
  • Deck & collection data: Retained while your account is active. Deleted upon account deletion.
  • Usage analytics: Retained in aggregate, anonymized form for up to 24 months.
  • Support communications: Retained for up to 12 months after resolution.
  • Camera data: Never stored — processed locally on-device only.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), access controls on all stored data, and restricted access to production systems.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately via our support page.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your account and associated data ("right to be forgotten").
  • Portability: Export your deck data in a portable format.
  • Restriction: Request that we limit how we process your data in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us via our support page. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

recollect.gg is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us via our support page and we will delete it promptly.

10. International Data Transfers

recollect.gg is operated from the European Union. Some of our infrastructure providers may process data in the United States and other countries. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

11. Cookies & Local Storage

We use only essential cookies required for authentication, session management, and user preferences. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics cookies.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-app notification. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, please use our support page.