Legal
Privacy Policy
Last updated: May 11, 2026
1. Introduction
This Privacy Policy explains what limited information may be collected when you use shufflephase.com (the "Site") and how that information is used.
ShufflePhase ("ShufflePhase", "we", "us") is the operator of the Site and acts as the data controller for any personal information processed in connection with it. You can contact us at admin@shufflephase.com.
ShufflePhase is a public website for competitive trading card game coverage. The Site does not offer public user accounts, comments, uploads, or other user-submitted content features.
2. Information We Collect
We do not ask visitors to create an account, log in, or submit personal profile information to use the Site.
Like most websites, our hosting provider and infrastructure automatically process technical information needed to serve the Site, such as IP address, browser type, device information, pages requested, referring pages, and timestamps. This information is used for site delivery, security, debugging, and reliability.
3. Server Logs and Analytics
Server access logs generated by our hosting provider may contain the technical information described above. These logs are used to operate, secure, and debug the Site, and are retained for a short period (typically up to 30 days) before being rotated, except where a longer period is required by law or for incident investigation.
We use Vercel Web Analytics, a privacy-friendly analytics product provided by Vercel Inc., to understand aggregate traffic to the Site, including page views, referrers, country, browser, and device type.
Vercel Web Analytics does not use cookies or other persistent browser storage, does not store IP addresses or other directly identifying information, and does not track visitors across sessions or across sites. It is not used for advertising or cross-context behavioural tracking. Vercel's processing of this information is described in Vercel's Web Analytics privacy documentation.
4. Cookies and Browser Storage
Public browsing of the Site does not require cookies or other browser storage.
The editorial tools used by Site staff set a strictly necessary session cookie for authentication. This cookie is not set for public visitors and is used only to recognise an authenticated staff member within those tools.
5. How We Use Information
We use the technical and operational information described above to deliver, secure, debug, and improve the Site. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
6. Service Providers
We rely on a small number of service providers to operate the Site, including:
- a hosting and content delivery provider for serving pages and assets;
- a database and backend-as-a-service provider for storing editorial content and authenticating editorial staff;
- Vercel Web Analytics for aggregate, privacy-friendly traffic measurement, as described in Section 3; and
- email and infrastructure providers used for site administration.
These providers process information only as needed to provide their services to ShufflePhase, subject to their own terms and privacy policies.
7. Legal Basis for Processing (GDPR)
Where the EU or UK General Data Protection Regulation applies, we act as the data controller for personal information processed in connection with the Site. Our legal basis for processing the limited technical information described above is our legitimate interest in operating, securing, measuring, and improving the Site.
8. Data Retention
Because the Site does not provide public user accounts or collect profile information, the only personal data processed is the limited technical information in server access logs described in Section 3. These logs are retained by our hosting provider for a short period (typically up to 30 days) before being rotated, except where a longer period is required by law or for incident investigation.
9. Data Security
We use reasonable technical and organisational measures to protect the Site and related information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your location, you may have rights to access, correct, delete, port, object to, or restrict certain processing of personal information, and to withdraw consent where processing is based on consent. Because the Site does not provide public accounts or collect profile information from visitors, most requests will relate to limited technical or service-provider data.
To exercise these rights, contact us at admin@shufflephase.com. We will respond within one month, or explain why we need additional time. You also have the right to lodge a complaint with your local data protection authority.
11. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you certain rights regarding personal information. In the past 12 months we have:
- collected only the limited technical and analytics information described in Sections 2 and 3;
- not sold personal information; and
- not shared personal information for cross-context behavioural advertising.
California residents may request to know, delete, or correct personal information we hold about them, and may not be discriminated against for exercising these rights. Requests can be made to admin@shufflephase.com.
12. Third-Party Links and Content
The Site may link to third-party websites, card databases, tournament organisers, publishers, social platforms, or other external resources. Those services are governed by their own privacy policies and practices.
13. International Data Transfers
ShufflePhase is operated from the United States, and our service providers may process information in the United States and other countries. Where personal information of visitors in the EEA or United Kingdom is transferred outside their region, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
14. Children's Privacy
The Site is intended for a general audience of trading card game fans and competitive players. The Site is not directed to children under 13 (or the higher minimum age applicable in your jurisdiction, such as 16 in some EU member states). We do not knowingly collect personal information from such children. If you believe a child has provided us with personal information, contact us at admin@shufflephase.com.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.
16. Contact
Questions about this Privacy Policy can be sent to admin@shufflephase.com. Additional information about ShufflePhase is available on the About page.