Privacy policy

Last updated 1 October 2026

Gacha Ranking is a fan-made site run by an individual. This page explains what we keep about you and why. We collect only what the site needs to work.

What we store

• Account: your email address, your display name and a hashed password (we never see or store the password itself).
• What you do on the site: tier list votes and the lists you create, duel votes, cards you draw and collect, your team, arena fights, friends and challenges, achievements, level and notifications, the portrait you pick for your profile.
• If you ask for a Creator rank: the proof link and the message you send.
• If you write to us through the bug / feature form: your message.
• Technical data: your IP address is used briefly to limit abuse (sign-up and sign-in limits) and appears in the logs of our hosting providers.

Why (legal basis)

To run your account and the features you use (performance of the service), to keep the site safe from spam and abuse (legitimate interest), and to send you the mails you ask for: email confirmation and password reset. We send no newsletters and no advertising.

Cookies and local storage

We use one cookie to keep you signed in (and a few technical ones for security). Your browser also keeps small preferences on your device (sound on or off, the card opening you prefer, the last duel game filter, an unsent tier list draft). None of this is used for tracking, so there is no cookie banner. Visitor statistics come from Vercel Analytics, which is cookieless and does not follow you from site to site.

Who processes your data

• Vercel Inc. (United States): hosting and cookieless visitor statistics.
• Neon (database, region Frankfurt, EU): stores all account and game data.
• Cloudflare: DNS, the Turnstile anti-bot check at sign-up, and picture storage.
• Resend: sends the confirmation and password reset emails.

Some of these providers are based in the United States and rely on standard contractual clauses or the EU-US Data Privacy Framework. We do not sell your data and we do not share it with anyone else.

What other players see

Your display name, level, arena rank, portrait, showcase cards and the tier lists you published publicly are visible to everybody. Lists published by link only are visible to whoever has the link. Your email address is never shown.

How long we keep it

As long as your account exists. Notifications older than 60 days are deleted automatically. When an account is deleted, its votes, cards, lists, friends and messages are deleted with it.

Your rights

You can ask us at any time for a copy of your data, to correct it, or to delete your account and everything attached to it. Write to contact@gacharanking.com from the address of your account; we answer within one month. If you think we handle your data badly you can also complain to your data protection authority (in France, the CNIL).

Children

The site is not meant for children under 15. If you are younger, please ask a parent before you create an account.

See also the terms of use and the image credits.