Privacy policy

The publisher of Movie TCG (see the legal notice), on a non-professional basis. For any question about your data or to exercise your rights: contact@movietcg.com.

Your account: your e-mail address, your username, your password (kept only as an encrypted fingerprint: we cannot read it), the date you created the account and that of your last login.

Your game: your cards, tickets, opened packs, sales, auctions and trades, your wanted and offered card lists, the films and series you mark as watched or to watch (visible to you only), your achievements, talents, friends, and the messages you exchange with other players.

Your public profile, if you choose to open it: your username and the cards you display are visible to other players. A private profile stays private; your cards for trade only appear in the shared list if your profile is public.

Technical data: your IP address and the pages requested, recorded by the servers to make them work, spot abuse and limit the number of attempts (login, sign-up, bids). Your preferred language is remembered in a small file, described below.

We do not ask for your name, postal address, date of birth or any payment data: there is nothing to pay.

If you choose “Continue with Google”, Google sends us your email address (which it has verified belongs to you), an identifier specific to your Google account and your name, from which we derive a username you can change. We receive neither your Google password nor access to any of your other Google data.

Running your account and the game (logging you in, keeping your cards, enabling sales and trades): this is performing the service you asked for when you created an account, and the terms of use you accepted.

Protecting the game and its players (limiting repeated attempts, spotting cheating and multiple accounts, fixing outages): this is our legitimate interest in keeping the game safe and fair.

Understanding how the site is used, without tracking you (anonymous audience measurement, see below): this is our legitimate interest in improving the game.

Sending you the e-mails the game needs (confirming your address, recovering a password): this is performing the service. We send no newsletter and no marketing messages.

A session cookie, needed to stay logged in. It is used for nothing else, is readable only by our servers and disappears when you log out or the session expires.

A language cookie (and a cookie remembering that you dismissed the suggestion of another language): they keep your choice for a year.

A cookie tying the trial pack to your browser, if you open a pack without an account.

During a sign-in with Google, a temporary cookie (ten minutes) protects the exchange against forgery; it disappears as soon as the sign-in ends.

These cookies are strictly necessary for the site to work: the law does not require your consent for them, which is why no consent banner appears. We set no advertising or tracking cookies.

A small setting in your browser (it is not a cookie) that remembers you closed the invitation to join the Discord: it stays on your device and is never sent to our servers.

The forms (login, sign-up, password) are protected by an anti-bot check from Cloudflare, which may set its own technical markers while it verifies.

We measure traffic with Umami, a free tool that we host ourselves: no data goes to a third party. It sets no cookie, does not record your IP address and does not recognise you from one visit to the next: it counts page views and a few actions (a pack opened, a card shared).

If your browser asks not to be tracked ("Do Not Track"), the measurement stops.

Nobody buys or rents your data. It is processed by the publisher and by the technical providers strictly needed: netcup GmbH (server hosting, in Germany), Cloudflare, Inc. (traffic protection and acceleration, United States) and, when e-mail sending is turned on, Resend (delivery of confirmation and forgotten-password messages, United States).

Google LLC (sign-in with Google, United States), only if you choose this way of signing in: Google then knows that you are signing in to Movie TCG.

Transfers to the United States rely on the safeguards provided by the GDPR (the EU–US Data Privacy Framework or standard contractual clauses).

On the home page and on the game's cards, posters are loaded directly from TMDb's servers: TMDb then receives your IP address, like any site that serves images (see TMDb's privacy policy). Only a few portraits (Japanese animation and TV characters) go through our own server.

Your account and game data are kept as long as your account exists, and erased on request (see your rights).

The servers' technical logs (IP address, pages requested) are renewed automatically: they only cover the last days to weeks of activity.

The counters that limit attempts (login, sign-up, bids) are erased after two days.

You can access your data, have it corrected, have it erased, restrict its use, object to processing based on our legitimate interest, and get it back in a readable format (portability).

To do so, write to contact@movietcg.com from your account's address. Deleting your account is not yet a one-click action: ask for it in that same message, and we do it within a month. Your cards, tickets and messages are then erased.

If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr).

Exchanges with the site are encrypted (HTTPS). Passwords are stored as a fingerprint and are never displayed or sent. Access to the servers is reserved to the publisher. No security is absolute: if a data breach concerned you, we would inform you and notify the CNIL within the required time.

Movie TCG is intended for people aged 15 or over. Below that, a parent's or legal guardian's consent is needed to create an account.

If this policy changes in a significant way, the date at the top of the page changes too, and we say so in the game.