Last revised: 2026-08-04
EasyTCGs ("we," "us") operates easytcgs.com. [FILL IN: if EasyTCGs is operated through a registered legal entity, name it here — e.g. "EasyTCGs, operated by [Entity Name, LLC]". Currently operated as an unregistered/individual project as far as this policy can confirm.] You can reach us at easytcgs@gmail.com for any question about this policy or your data, including the rights requests described below.
Account information: your email address, display name, timezone, and favorite game (all optional except email). We don't collect payment information — there's no paid tier yet. We don't ask for age, gender, or ZIP code, and no feature on the site requires them.
Preferences: the games, formats, creators, and subreddits you choose to follow, any custom RSS or YouTube sources you add, and your digest frequency (daily, weekly, or monthly).
Activity for signed-in accounts: if you're signed in, we log account-level activity — sign-ins, settings changes, digest subscribe/unsubscribe, sources you add, and pages you view while signed in — tied to your account, so we can build features like a personalized activity view and understand how registered users use the product. This is separate from the aggregate data below and from anonymous (logged-out) browsing, which is never linked to an account. You can turn this off at any time from the "Track my activity" toggle on your Settings page; turning it off stops new activity from being recorded against your account going forward.
Cookies and similar technologies: a session cookie that keeps you signed in; a first-partyeasytcgs_vidvisitor-id cookie used for anonymous, aggregate traffic counting before you sign in; a first-partyeasytcgs_consentcookie that remembers your cookie-banner choice; and, only if you opt in via the cookie banner, Google Analytics cookies (see below).
Automatically collected technical data: standard server request data (IP address, browser/device type, pages requested, timestamps) generated by using any website, kept only as long as needed for security and abuse prevention.
A cookie-consent banner appears on your first visit. Google Analytics (GA4) cookies are set only if you click "Accept All" or enable Analytics under "Manage Preferences" — they are not set by default, and rejecting them doesn't affect access to any feature of the site. We use GA4 to understand traffic and referrers site-wide, and a first-party page-view counter (see "Cookies and similar technologies" above) as a backstop when analytics scripts are blocked or declined. Neither is used to build an advertising profile of you, and we don't run third-party ad tracking. You can change your choice at any time using the "Cookie Preferences" link in the site footer, or block analytics cookies directly in your browser settings. If you're signed in when you make a choice, we also save it to your account (a timestamp and accept/decline value). For a signed-in account, that saved choice is authoritative: it applies automatically the next time you sign in on a different device or browser, rather than asking you again, and we set the local cookie there to match. Signing out and continuing anonymously, or a device you've never signed in on, still relies on that device's own cookie choice.
To build your personalized dashboard, send the digest email at the frequency you choose, keep your account secure, and understand product usage so we can improve it. Where GDPR applies, our legal bases are: performance of a contract (running the account and digest you signed up for), consent (activity tracking and, practically, EU analytics cookies), and legitimate interest (anonymous traffic analytics, fraud/abuse prevention). You can withdraw consent at any time as described above without affecting the lawfulness of processing before that withdrawal.
Account-level activity records are kept for 365 days and then deleted automatically. Anonymous page-view and click-engagement records are kept for 90 days. Account information (email, preferences, sources) is kept until you delete your account or request erasure, whichever comes first. Deleting your account removes these records immediately, not just after the retention window — see "Your privacy rights" below.
We don't sell your personal information. We share it only with the service providers that make the site work: our hosting and database infrastructure providers, our transactional email provider (for the digest and account emails), and Google Analytics (aggregate traffic data only). Card search is powered by Scryfall; news, video, and community content are pulled from official publisher sources, YouTube, Twitch, and Reddit — interacting with those embedded/linked services is subject to their own privacy policies, and we don't send them your EasyTCGs account information.
Aggregate data: we may in the future aggregate anonymized, non-personally-identifiable usage and engagement data from anonymous, logged-out traffic (e.g. which sources are popular) for our own product decisions, and potentially license structured aggregate data to third parties. Properly de-identified aggregate data isn't "personal information" under CCPA/CPRA or "personal data" under GDPR, but if we ever change this to include information that could identify you, we'll update this policy first and add an opt-out before that happens.
Our hosting, database, and email infrastructure may process data in the United States. If you're located in the EEA, UK, or Switzerland, this means your information is transferred outside your region to receive the service; our providers rely on standard contractual clauses or equivalent safeguards for these transfers.
If GDPR applies to you (EEA, UK, Switzerland), you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interest. You can also lodge a complaint with your local data protection authority.
If CCPA/CPRA applies to you (California residents), you have the right to know what personal information we hold about you, request its deletion, request correction of inaccurate information, and opt out of any "sale" or "sharing" of personal information (see below). We won't discriminate against you for exercising these rights.
How to exercise these rights: for account, preference, and activity data, you can act directly — delete your account from your dashboard, or turn off activity tracking from Settings. For a full copy of your data, or a request we handle manually, email easytcgs@gmail.com from the address on your account. We'll verify the request comes from you and respond within 30 days (GDPR) or 45 days (CCPA), extendable once with notice if a request is unusually complex.
We do not sell personal information for money, and we do not share personal information with third parties for cross-context behavioral advertising. If that ever changes, we'll add an explicit opt-out here and update this policy before it takes effect. In the meantime, the closest practical control is the cookie banner's Analytics toggle (reachable any time via "Cookie Preferences" in the footer), which stops Google Analytics from running at all.
EasyTCGs is not directed to children under 13, and we don't knowingly collect personal information from anyone under 13. If you believe a child has created an account or provided us information, email easytcgs@gmail.com and we'll delete it.
We use reasonable technical and organizational measures to protect your information (encrypted connections, access controls on our database and admin tools). No online service can guarantee absolute security. If we experience a breach affecting your personal information, we'll notify affected users and any regulator required by law without undue delay.
Every digest email includes a working unsubscribe link, and you can change your frequency or delete your account from your dashboard at any time.
We'll update the "last revised" date above when we change this policy, and post a notice on the site for material changes affecting how we use your data.
Questions about this policy or your data: easytcgs@gmail.com.