Privacy policy

The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

TokyoFudaTCG (private individual, non-commercial)
Email: info@tokyofudatcg.com

• This website sets no cookies for visitors and uses no advertising tracking. A technically necessary cookie is only used for my own password-protected admin area.
• There are no user accounts and no shop. The only form is the optional contact form (see section 5).
• Fonts are served by this website itself; no data is sent to Google Fonts.

This website is hosted by Vercel Inc. (USA). When you visit a page, Vercel processes technically necessary data, in particular your IP address, date and time, the requested URL, browser and device information and the referring page. This is required to deliver the website and keep it secure and stable.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely and reliably). Data may be transferred to the USA; Vercel bases such transfers on the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses. Details: vercel.com/legal/privacy-policy.

To understand which pages and cards are viewed, I use Vercel Web Analytics. It records the pages visited, referrer, country, and browser, operating system and device type.

No cookies are set and nothing is stored in your browser. Visitors are only told apart by a hash of the request, which is discarded after 24 hours. It is therefore not possible to recognise you across days or websites; results are only evaluated in aggregate.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the website).

Contact form: When you use the form, I store your name, email address, topic, the selected card (if any), your message and the time it was sent. The data is kept in a database at Neon Inc. (servers in the EU, Frankfurt), connected via Vercel. Only I can access it through a password-protected area. To prevent spam and abuse, your IP address is stored only as an irreversible hash and deleted after 24 hours at the latest. I delete requests once they are resolved and no longer needed.

If you email me, I process your email address, your name (if given) and the content of your message in order to reply. Emails to addresses on this domain are forwarded by the domain provider Porkbun (USA) to a mailbox at Google (Gmail), where they are stored.

The legal basis is Art. 6(1)(b) GDPR where your message concerns a purchase, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). I delete messages once they are no longer needed, unless statutory retention obligations apply.

This website links to eBay, Cardmarket and social networks. Data is only transferred to these platforms once you click such a link; their own privacy policies then apply. Purchases and the data they require (e.g. your shipping address) are handled through the respective platform.

You have the right to:

• access your personal data (Art. 15 GDPR)
• rectification (Art. 16) and erasure (Art. 17)
• restriction of processing (Art. 18) and data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)

Just write to me at info@tokyofudatcg.com. You can also lodge a complaint with a data protection supervisory authority — in particular the French Commission nationale de l'informatique et des libertés (CNIL): cnil.fr.