Privacy Policy

1. What We Collect

When you create an account, we collect:

• Account info: email address (via Firebase Authentication)
• Profile info: username, display name, first/last name (optional), profile photo (optional)
• Match data: match results, dates, heroes played, opponent names, event details, and notes you enter or import
• Usage data: browser-stored preferences (localStorage) such as user count cache and guest mode data

In guest mode, all data is stored locally in your browser. No data is sent to any server until you create an account.

2. How We Use Your Data

• Display your profile, match history, and statistics to you
• Show your public profile and aggregated stats on the leaderboard (if you opt in)
• Display match import activity in the public activity feed
• Enable match commenting and notifications between users
• Process bug reports and feature requests you submit

3. Lawful Basis for Processing (GDPR)

We process your personal data based on:

• Consent: you provide consent when you create an account and agree to our Terms of Service and this Privacy Policy
• Legitimate interest: operating and improving the Service, preventing abuse

You may withdraw consent at any time by deleting your account.

4. Public Profiles & Visibility

When you set your profile to public (the default), the following data becomes visible to all visitors: your username, display name, profile photo, and aggregated match statistics (win rate, streaks, heroes played, etc.). Opponent names in your match history are hidden from other viewers.

You can set your profile to private at any time in Settings. Private profiles are not shown on the leaderboard or in search results.

5. Data Storage & Third-Party Services

FaB Stats uses Google Firebase for authentication and data storage. Your data is stored in Google Cloud Firestore servers. Please refer to the Google Firebase Privacy Policy for details on how Google handles data, including international data transfers.

If you are located in the EU/EEA, your data may be transferred to and processed in the United States by Google. Google provides Standard Contractual Clauses as a transfer mechanism.

6. Cookies & Local Storage

FaB Stats uses the following browser storage mechanisms:

• Firebase Auth cookies: essential for keeping you signed in (session management)
• localStorage: caches non-sensitive data like user count and guest mode match data to reduce server requests

We do not use advertising cookies, third-party tracking pixels, or analytics services. All storage is essential to the operation of the Service.

7. Data Retention

• Account & match data: retained until you delete your account
• Notifications: automatically deleted after 30 days
• Feedback submissions: retained indefinitely for product improvement; contact us to request deletion
• Guest mode data: stored in your browser only; cleared when you clear browser storage

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: you can view all your data within the app (profile, matches, stats)
• Export / Portability: you can download your data in JSON format from the Settings page
• Rectification: you can edit your profile information and match records at any time
• Erasure: you can delete your account and all associated data from the Settings page; this is immediate and irreversible
• Restriction: you can set your profile to private to restrict public processing of your data
• Objection: you may object to processing by contacting us or deleting your account

We will respond to data subject requests within 30 days. To exercise any of these rights, contact us at the email below or use the self-service options in Settings.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information

We do not sell or share your personal information with third parties for advertising or marketing purposes. To exercise your rights, contact us at the email below or delete your account from Settings.

10. Chrome Extension & Userscript

The FaB Stats GEM Exporter Chrome extension and userscript read match history data from your GEM profile page (gem.fabtcg.com) when you initiate an export. This data is processed entirely within your browser.

• No data is collected, stored, or transmitted to any external server by the extension
• Match data is passed directly to FaB Stats via your browser clipboard and URL
• The extension does not track browsing activity, analytics, or personal information
• The extension only activates on gem.fabtcg.com pages

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

For questions about this privacy policy or to exercise your data rights, contact charltonuw@gmail.com