Privacy policy

YGOPROJudge (ygoprojudge.com) is an independently run study tool for Yu-Gi-Oh! TCG rulings. Its operator is the data controller for the personal data described on this page. For anything about your data, write to the address below.

• Account details. Your email address and, if you add them, a name and avatar, collected through our sign-in provider. We store the email, an account identifier and your role on the site.
• Your content. The rules questions you ask, card-page chats, the answers we return, and the exam or practice files you upload. Uploaded files are read to extract their text and are not stored; we keep the resulting attempt, meaning the questions, your answers and your grades.
• Usage and credit records. Which features you use and when, and a ledger of the credits granted to and spent by your account.
• Sign-up details. The network (IP) address and browser user agent of your first signed-in visit, recorded to stop the welcome bonus going to bots or to several accounts on one connection.
• Purchase records. What you bought, what you paid and when, and PayPal’s references for the payment: its order, subscription, payer and capture identifiers. Never your card or bank details.
• Signed-out use. A keyed hash of your network address, so free features can be metered fairly. The raw address is not stored and the hash cannot be turned back into it.
• Technical data. Standard server logs and aggregated, cookieless web analytics.

• To provide the service: answering your questions, grading uploads, tracking credits, fulfilling purchases and emailing you about changes to your account, such as a new role and what it includes. This is necessary to perform our agreement with you.
• To keep it fair and secure: metering free use, preventing abuse and reconciling billing. This is in our legitimate interest, and in yours.
• To keep sales records: we are the seller of what you buy here, and accounting and tax law require us to keep a record of each sale. This is a legal obligation.
• To improve it: reviewing aggregate usage and reported ruling errors. Where this would involve optional cookies, we only do it with your consent.

An email address is required to hold an account. Everything else, including a name, an avatar, questions, uploads and purchases, is up to you.

Answers are generated by third-party AI model providers. Your question, the conversation so far and any text extracted from an upload are sent to the provider only to produce a response, and under their API terms our providers do not use this content to train their models. To find public rulings for some questions, a short summary of your scenario is also sent to a web-search service. The conversation itself is kept in your account with us.

Payments are processed by PayPal. You pay on PayPal’s own checkout, so what PayPal asks for to take the payment — your name, card or bank details, billing address — goes to PayPal under the PayPal Privacy Statement and never reaches us. PayPal is not the seller or merchant of record: we are, and we are responsible for the purchase records described on this page.

To start a checkout we send PayPal what you are buying and its price, an internal identifier for your account so the payment can be matched to it, and, for a subscription, your account email address so PayPal can prefill its sign-in. From PayPal we store the order, subscription, payer and capture identifiers, with the product, the amount and the dates.

We do not sell personal data or share it for advertising. Beyond the AI and payment providers above, your data is processed by our sign-in provider, our database and hosting providers, Resend, which delivers our account emails and so receives your email address and the message, and a cookieless web-analytics service, each under a data-processing agreement with us. Some of them operate in the United States; where data leaves your region, transfers rely on standard contractual clauses or equivalent safeguards.

Account data, credit records and exam or practice attempts are kept while your account exists, so your history and balance stay accurate. Ask conversations are deleted a month after they start, and only your most recent ones are kept until then. Our usage logs keep the text of a question for at most 30 days; after that they record only what an answer cost. Purchase records are kept for as long as accounting and tax law require a seller to keep them, which can be longer than the account exists; PayPal keeps its own record of the payment under its privacy statement. Deleting your account from your profile page cancels any PayPal subscription on it that would renew, removes your sign-in at once and erases the personal data tied to it: your conversations, attempts, saved rulings, reports, credits, plan and sign-up details. We keep only each purchase record (product, amount, dates and PayPal’s references for the payment), detached from your account, because as the seller we must keep sales records; usage cost records that no longer identify you; for an account that ever paid through our earlier checkout, the reference that stops one payment being credited twice; and, for an account that received the welcome bonus, the network address it signed up from, stored without anything that links it to the account, so the bonus cannot be claimed again by deleting and re-creating one. That address record is itself deleted 365 days after the bonus was granted, whether or not the account still exists.

We set only essential first-party cookies: our sign-in provider’s session cookies, a signed-out-usage cookie holding the keyed hash described above (kept 30 days), and the cookie that remembers your banner choice (kept 180 days). None of these require consent. No analytics or advertising cookies are set today; if that changes we will update this page first, and they will only ever be set after you choose “Accept all”. You can change your choice at any time with Cookie settings. Page views are counted with cookieless, aggregated analytics that cannot identify you or follow you across other sites.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy in a portable format;
• correct it, which for email and profile details you can do from your account page;
• delete it, by deleting your account from your profile page, which erases the associated records;
• withdraw consent to optional cookies at any time via Cookie settings;
• object to, or ask us to restrict, certain processing;
• complain to your local data-protection authority.

Email us to exercise any of these. We respond within the time the law allows.

YGOPROJudge is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.

When we change how we handle data, we update this page and the date at the top.

The contact address for privacy questions and data requests will be published here shortly.