Privacy Policy for PlayerDeck.gg

Last updated: September 2026

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (specifically the European General Data Protection Regulation, GDPR / DSGVO) and this Privacy Policy.

1. Controller

The person responsible for data processing on this website (Art. 4 No. 7 GDPR) is:

2. General Principles & Hosting

Hosting with Vercel

Our website is hosted on the infrastructure of Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA).

When you visit our website, Vercel automatically collects server log files (such as IP address, date and time of the request, browser type, operating system, and referrer URL). This processing is based on Art. 6(1)(f) GDPR (our legitimate interest in ensuring the technical stability, security, and optimal delivery of our website). Data transfers to the USA are safeguarded under standard contractual clauses (SCC) and the EU-US Data Privacy Framework where applicable.

3. Account Registration, Profiles & Data Storage

Database and Media Storage (Supabase)

We use the cloud database and storage services of Supabase Inc. (970 Toa Payoh North #07-04, Singapore), with our data stored on servers in Frankfurt, Germany (AWS eu-central-1), to manage user accounts, authentication, user settings, profile grids, and uploaded images.

The data processed includes:

• Email address, username, password hash (or authentication tokens)
• Profile contents (links, setup information, connected gaming handles, uploaded avatar and cover art)

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract).

4. Platform Features & Third-Party Integrations

Twitch API Integration

If you connect your Twitch account, we periodically retrieve and synchronize public channel data (your public handle, your follower count, whether you are live, and your current viewer count) via the official Twitch API (Twitch Interactive, Inc., USA). Viewer counts are kept for 90 days to calculate the averages shown in your media kit. We only fetch data necessary to display your current stats on your profile and media kit.

Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(a) GDPR (your consent).

IGDB (Internet Game Database)

When you search for and add games to your profile, search queries are routed to the IGDB API (operated by Twitch/Amazon) to display official game titles and cover artwork. No personal user data is transferred to IGDB during this process.

5. Payment Processing (Stripe)

For processing paid subscriptions (such as PlayerDeck Pro), we utilize the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).

When making a purchase, your payment details (credit card information, IBAN/SEPA details, billing name, and address) are entered directly into an encrypted interface hosted by Stripe. We do not store or have access to your full credit card numbers or sensitive banking credentials on our servers. We only receive a transaction confirmation token, the status of your subscription, and essential billing metadata to fulfill our legal accounting obligations.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal tax and accounting obligations). For details on Stripe's data handling, see the Stripe Privacy Center.

6. Analytics & Privacy (Cookieless Tracking)

We deliberately respect your privacy and do not use tracking cookies or third-party profiling networks (such as Google Analytics).

Our internal page analytics are designed strictly with privacy in mind:

• Page views and link clicks are recorded on our own servers only.
• To tell repeat visits from new visitors, we create a one-way hash from your IP address, your browser's user agent and the page visited, combined with a random value that changes every day. Your IP address itself is never stored.
• Each day's random value is deleted within two days. After that, a hash can no longer be linked to anyone, or to the same visitor on another day.
• Individual page events are deleted after 35 days. Only daily totals are kept after that.
• We do not build long-term cross-site profiles or track individuals across sessions.
• Geographic metrics are limited strictly to country-level data.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in measuring aggregate platform usage and defending against automated abuse without compromising visitor anonymity).

7. Automated Media Kit Generation (PDFs)

When a creator or authorized visitor generates an A4 PDF media kit, the profile data is processed programmatically on a headless rendering server to create a downloadable document. This process uses only the public data configured in your media kit settings and optional aggregated metrics you have explicitly toggled on.

8. Your Statutory Rights under GDPR

You have the following statutory rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request confirmation as to whether your personal data is being processed and obtain a copy.
• Right to rectification (Art. 16 GDPR): You can have inaccurate data corrected.
• Right to erasure / “Right to be forgotten” (Art. 17 GDPR): You can request the deletion of your account and personal data, subject to statutory retention periods.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR): You have the right to object to data processing based on legitimate interests (Art. 6(1)(f) GDPR) at any time.

To exercise any of these rights, contact us at info@playerdeck.gg.

You also have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR) if you consider that our processing of your personal data infringes applicable law.

9. Changes to this Policy

We reserve the right to amend this Privacy Policy to ensure compliance with updated legal requirements or reflect functional changes to our service. The current version will always be published on this page.