Privacy Policy

Last updated October 21, 2026

This policy explains what mikeyreuter.com collects, why, and your choices. We keep it minimal: no tracking cookies, and we never sell your information.

What we collect when you visit

Basic visit statistics: the page viewed, the date and time, your approximate location (country and city, provided by our host Cloudflare), device type, browser and operating system, the website that linked you here, and how long the page took to load.

Visitors are counted with a code that changes every day and cannot be turned back into your IP address. We do not store IP addresses for visit statistics.

If something on the site breaks in your browser, a short error report (the error message, the page, your browser and operating system) is sent so it can be fixed. Only the newest 300 reports are kept.

If you use the contact form on the About page: your message, plus your name and email if you give them, so it can be read and answered. Only the administrator can see messages.

If you have an account

Your email address (it is how you sign in), anything you choose to add to your profile (a nickname, a profile picture, first and last name, location, about me; only you and the administrators can see it). Your username is made from the part of your email before the @; your full email is never shown to other users. If you turn on Trading, other signed-in collectors who also trade can find you by username or nickname and see your username, nickname and Have / Want / Trade lists (never your email, profile picture, name, location or about me; there is no messaging); you can turn it off at any time, and your collection (card quantities and printing choices), with automatic backups of it (one a day, plus one before any import, clear or restore) kept for 30 days so it can be restored if something goes wrong. While you are signed in, the pages you view are recorded with your username, so the administrator can help with your account. We never store passwords.

Signing in

When you ask for a sign-in code, we store your email address, your IP address and a hashed copy of the code (never the code itself) to check it and to stop abuse; codes stop working after 10 minutes and are deleted after 1 day. Resend (resend.com) delivers the email; it receives your email address for that. If you sign in with Google, Google tells us your email address and that it is verified, and Google's own privacy policy covers your Google account.

Login records

To protect accounts, each sign-in attempt records the time, the email entered, whether it worked, your IP address, approximate location, browser and operating system. Wrong codes are limited to stop guessing.

Cookies and local storage

We set one strictly necessary cookie only when you log in, to keep you signed in for up to 30 days if you choose "Remember me", otherwise until you close your browser (1 day at most), or until you log out, and, while you sign in with Google, one more for up to 10 minutes to keep that sign-in safe. They cannot track you on other sites.

Your browser's local storage keeps display settings (filters, saved filters, folded series, card size), unsaved changes and a short error log. These stay on your device.

If you track cards without an account, your collection (which cards you have, want or would trade, and their printings) is saved only in your browser's local storage. It is never sent to us, so we cannot see or recover it: clearing your browser data deletes it. A backup file you download stays on your device.

How we use information

To run and secure the site, keep you signed in, show the collection, understand overall use (visitor numbers, popular pages) and fix problems. To help with an account, an administrator can view the site as that account for a short time and change its settings, profile or card counts; each time is logged. Only the site administrator can see visit and login statistics.

Sharing and other services

We do not sell or rent personal information. The site does not currently show ads; if that ever changes, we will update this policy first. Cloudflare provides our hosting, security and database and processes requests to the site; Resend sends sign-in emails. Cloudflare also runs cookie-free visitor analytics (Cloudflare Web Analytics) and automatic bot protection on the site. Card images load directly from TCGdex's image server (assets.tcgdex.net) and set symbols and some card pictures from the Pokémon TCG API's image server (images.pokemontcg.io); both receive your IP address like any site you load images from. We may disclose information if the law requires it.

How long we keep it

Visit statistics and login records are deleted after about 90 days, and failed-login counters and sign-in codes after 1 day. Only the newest 500 contact messages are kept. Account and collection data are kept until the account is deleted; an email blocked for abuse is kept so it cannot sign in again.

Security

All traffic uses HTTPS, sign-in codes are stored only as hashes, sessions use secure cookies, and statistics are visible only to the administrator. No system is 100% secure.

Your choices and rights

You can browse and track your cards without an account. Account holders can edit their profile at any time, download their card lists (List → Backup), and delete their account themselves: My profile → Edit profile → Delete my account. That removes your profile, picture, card lists, backups and sign-in records right away. To get a copy of your data, correct it, or ask anything about your privacy, email [email protected]. Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you have the right to access, correct, delete and receive your data, to object to how it is used, and to complain to your data protection authority; we honor these rights for everyone.

Legal bases (GDPR): running your account and showing your collection (to provide the service you asked for); keeping the site secure, counting visits and fixing errors (our legitimate interest in a safe, working site). We do not sell or share personal information for advertising, do not use it to build profiles of you, and take no payments.

Where data is processed: our host Cloudflare, Resend (sign-in emails) and Google (if you sign in with Google) may process data in the United States and other countries, under their own data protection terms and standard safeguards.

Children

MikeyReuter.com is not directed to children under 13, and we do not knowingly collect personal information from them. Do not create an account if you are under 13. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.

Who we are and contact

mikeyreuter.com is an independent website run by its owner, who decides how your data is used (the "controller"). Privacy questions and requests: [email protected]. We answer within 30 days.

Changes

We may update this policy. The date above shows the current version.