Privacy
Last updated: 13 Nov 2026
Card-Radar keeps the minimum personal data needed for the community to share card sightings. This page explains what we keep, why, and how to delete it.
What data we keep
If you create an account we store your email (to verify it and so you can recover your password), your encrypted password (never in plain text), your public alias, your profile picture and description if you add them, your city if you choose to give it, your favourite cards and the content you post: sightings, votes, store proposals and corrections, and reports. Your alias, profile picture, description and sightings are public: anyone can see them on your profile. Only you can see your email, your city and your favourites.
Your location is not stored
When you use your location or search for a city, the coordinates are only used for that request, to find nearby stores and sightings. They are not stored in our database or in server logs. The city you searched for is only remembered in your browser while the tab is open.
Cookies
We only use technical cookies: session cookies, to keep you signed in, and one for your chosen language. We don't use tracking, advertising or analytics cookies, which is why there is no cookie banner.
What we use it for
To identify you when you sign in, show your alias and picture next to what you post, keep your favourites, apply daily limits and moderate content. The legal basis is the performance of the service you request when you create the account.
Providers
Data and profile pictures are hosted by Supabase in the European Union (Frankfurt), and the site is served from Vercel. Verification and password recovery emails are sent through an email provider. Magic and Pokémon card images are loaded directly from the Scryfall and TCGdex servers, and maps from OpenFreeMap: to display them, your browser connects to those services, which receive your IP address like any website you visit. Address search uses OpenStreetMap's Nominatim through our server. We don't sell or share your data.
Your rights
You can view and change your alias, profile picture, description, city and password in your account, and delete it whenever you want. You can also exercise your GDPR rights of access, rectification, erasure, objection, restriction and portability, and lodge a complaint with the Spanish Data Protection Agency.
How to delete your account
Go to My account and press “Delete my account”. Your email, alias, profile picture, description, city, favourites, votes and reports will be deleted. Your sightings are kept anonymously, with nothing that identifies you, because they are useful to the community.