Privacy policy

Who is responsible

Bingepedia is an independent project, not affiliated with the Wikimedia Foundation. The person responsible for protecting personal information is the publisher of Bingepedia, who can be reached at privacy@bingepedia.com for any question or request about your data.

What we collect

When you create an account:

• your username, your email address and your password (stored only as a salted scrypt hash, never in readable form);
• the colour or card you choose as your picture, your language and, if you write one, your bio.

When you play:

• your game data: cards, coins, packs opened, decks, matches and quiz results, achievements, wish list, binders;
• your exchanges with other players: friends, trades, market listings, bids and requests, chat messages and private messages;
• technical information needed to run the service: your session, the date you joined and the last time you were active, and the codes sent to validate your email or reset your password.

We do not collect your real name, your address, your phone number, your location or any payment information: Bingepedia has no real-money purchases, and in-game coins have no monetary value.

Why we use it

• to create and secure your account, sign you in, and validate your email address;
• to run the game: keep your collection, let you trade, play and chat with other players;
• to send you service emails only (validation code, password reset): no newsletter, no advertising;
• to keep the game fair and safe: moderation of the chat, fight against cheating and abuse;
• to measure the site's audience in aggregate, to improve it.

We process this information because it is necessary to provide the game you signed up for, and for our legitimate interest in keeping it secure and improving it. We never sell your information and never use it for advertising.

What other players see

Your profile is public to other players: username, picture, bio, level, cards, binders, wish list, profile deck and arena record. Your chat messages are visible to the players in that chat; private messages only to the people in the conversation. Your email address is never shown to other players.

Cookies and storage

Bingepedia only uses what the site needs to work, with no advertising or cross-site tracking:

• a session cookie that keeps you signed in (30 days);
• two preference cookies: your language and your theme (light or dark);
• your browser's local storage, for a cache of card data and a few display choices (for example, whether you postponed the offer to install the app).

Audience is measured with Vercel Web Analytics, which uses no cookies and gives us aggregated statistics only (pages viewed, country, type of device), without following you from one site to another.

Who helps us

Some providers process data for us, only to run the service:

• Vercel Inc. (United States): hosting of the site and audience measurement;
• Neon (Databricks, United States): database hosting;
• Resend (United States): sending of service emails;
• Wikimedia Foundation: card pictures are loaded by your browser straight from Wikimedia Commons, which receives your IP address like any site you visit (no referrer is sent).

Your information may therefore be stored and processed in the United States. These transfers rely on the contractual safeguards offered by these providers (such as the European Commission's standard contractual clauses).

How long we keep it

• your account and game data: as long as your account exists;
• sessions: 30 days; email codes: 15 minutes;
• once your account is deleted, your personal information is erased, except what the law requires us to keep; messages already sent to other players may remain visible without your name.

Your rights

You can ask to access your information, correct it, get a copy of it, or delete your account and its data, and you can object to some uses. Write to privacy@bingepedia.com from the email address of your account: we answer within 30 days.

If you think your rights are not respected, you can complain to the data protection authority of your country (for example the Commission d'accès à l'information in Quebec, or the CNIL in France).

Age

Bingepedia is not meant for children under 13. Players under the age of digital consent in their country (14 in Quebec, 15 in France) need a parent's agreement to create an account.

Security

Connections are encrypted (HTTPS), passwords are stored hashed, validation codes are stored hashed and expire quickly, and access to the administration is restricted. If a security incident put your information at risk, we would tell you and the competent authorities as the law requires.

Changes

If this policy changes, the new version is published on this page with its date. For an important change, you will be told in the game.