Privacy policy
Last updated: 2026-09-27
1. Controller
The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:
TokyoFudaTCG (private individual, non-commercial)
Email: info@tokyofudatcg.com
2. Overview
- This website sets no cookies for visitors and uses no advertising tracking. A technically necessary cookie is only used for my own password-protected admin area.
- There are no user accounts and no shop. The only form is the optional contact form (see section 5).
- Fonts are served by this website itself; no data is sent to Google Fonts.
3. Hosting and server logs
This website is hosted by Vercel Inc. (USA). When you visit a page, Vercel processes technically necessary data, in particular your IP address, date and time, the requested URL, browser and device information and the referring page. This is required to deliver the website and keep it secure and stable.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely and reliably). Data may be transferred to the USA; Vercel bases such transfers on the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses. Details: vercel.com/legal/privacy-policy.
4. Audience measurement
To understand which pages and cards are viewed, I use Vercel Web Analytics. It records the pages visited, referrer, country, and browser, operating system and device type.
No cookies are set and nothing is stored in your browser. Visitors are only told apart by a hash of the request, which is discarded after 24 hours. It is therefore not possible to recognise you across days or websites; results are only evaluated in aggregate.
In addition, I count page views myself in my database (Neon, see section 5) – only as daily totals: page visited, referring website, country and device type (phone/tablet/computer). To avoid counting the same visitor twice on one day, an encrypted hash of IP address and browser identifier is created and deleted by the following day at the latest. IP addresses are not stored and no cookies are set.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the website).
5. Contact form and email
Contact form: When you use the form, I store your name, email address, topic, the selected card (if any), your message and the time it was sent. The data is kept in a database at Neon Inc. (servers in the EU, Frankfurt), connected via Vercel. Only I can access it through a password-protected area. To prevent spam and abuse, your IP address is stored only as an irreversible hash and deleted after 24 hours at the latest. I delete requests once they are resolved and no longer needed.
If you email me, I process your email address, your name (if given) and the content of your message in order to reply. Emails to addresses on this domain are forwarded by the domain provider Porkbun (USA) to a mailbox at Google (Gmail), where they are stored.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). I delete messages once they are no longer needed, unless statutory retention obligations apply.
6. Links to other platforms
This website links to social networks and – on the news page – to articles on other websites (collected via Google News; the headlines are fetched by my server, not your browser). Data is only transferred to these platforms once you click such a link; their own privacy policies then apply.
7. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR)
- rectification (Art. 16) and erasure (Art. 17)
- restriction of processing (Art. 18) and data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
Just write to me at info@tokyofudatcg.com. You can also lodge a complaint with a data protection supervisory authority — in particular the French Commission nationale de l'informatique et des libertés (CNIL): cnil.fr.