Privacy notice

Who is responsible

FirstMateTCGLogbook — the First Mate TCG fan website — operates this unofficial fan website and welcomes visitors worldwide. For privacy requests, contact firstmatetcglogbook@gmail.com. The operator’s legal name and contact address must be added before this notice is used as a final legal policy.

What we collect

Accounts are for adults aged 18 or over. We collect an email address, a private display name, account creation and update dates, the time of your adult self-declaration, and the privacy notice version acknowledged. We do not collect a date of birth, avatar, address or marketing preferences. Age is self-declared, not verified by identity documents.

If you post in a guide discussion, we also store your comment, a display-name snapshot, timestamps, reply links and account ownership. Your comment and its author name are visible to signed-in adult account holders, not anonymous visitors. Replies from other accounts create private in-app notifications with a reply link, creation date and read status. Only the recipient can read their notifications; these are included in account downloads and removed on account deletion or when the reply is removed. No reply emails or browser push messages are sent. Posting is optional; you can edit or remove your own comments. The authentication service handles passwords securely; we never store plain-text passwords in your profile. Google or Lovable sign-in may provide additional basic identity details in the authentication record. We do not publish those authentication details. Operational services may process IP addresses, login activity and device information for security.

Why we use it

We use account information to create and maintain the account you request, provide sign-in, let you manage your private details and deliver the guide discussions you choose to join. The intended legal basis is performance of that account service. Security and abuse prevention rely on legitimate interests in keeping the site and accounts safe. Acknowledging this notice is not marketing consent. We do not send marketing emails or sell personal information.

Storage, access and service providers

Accounts are held in Lovable Cloud. Your profile is not publicly readable, and visitors cannot read another member’s profile. The site operator and authorised service providers may access information when necessary for operation, security or a privacy request. Authentication, hosting and social sign-in providers process information under their own service arrangements. Provider locations, subprocessors and any international-transfer safeguards must be confirmed by the operator before account registration is promoted publicly.

Essential browser storage keeps you signed in. With your consent, the site also loads Google Analytics 4, which measures page visits anonymously (IP addresses are anonymised) and stores a small analytics identifier in your browser for up to 14 months. Analytics never runs if you decline the cookie notice, and you can clear the stored choice by clearing your browser storage. Google acts as a service provider for this measurement.

Retention and deletion

Account information remains while your account is active. Deleting your account removes its live authentication record, private profile, roles, guide comments and reply notifications. Replies from other members remain, without a link to your removed post. Security logs and provider backups may persist according to provider retention schedules; their exact periods require confirmation. A deleted account cannot be used to sign in. Feedback submitted without an account link is not automatically removed by account deletion; contact us for help identifying it.

Your choices and rights

You can correct your display name, download your account data, or delete your account on the account page. Site owners arrange removal through the privacy contact so ownership can be transferred safely. For a complete access request including provider-held identity details, correction, erasure, restriction, objection or portability, email the privacy contact. We may need to verify your identity, and aim to respond within one month, subject to applicable lawful extensions. Visitors come from anywhere in the world: depending on where you live, you may complain to your local data protection authority — for example, the UK Information Commissioner’s Office.

Registration and changes

You can read all public content without creating an account. Social sign-in creates an authentication record before you finish registration; new members then confirm they are 18 or older and choose their private display name. If you are under 18, do not create an account and request deletion of any account created in error. Material changes will be reflected in this notice.