Loading…
Loading…
Last updated: April 2026
LoreGuide is a fan-made, non-commercial community website for Disney Lorcana TCG players. It is not affiliated with or endorsed by Disney or Ravensburger. The site is operated by a private individual.
Email address
Required when you create an account. Used only to:
We do not send newsletters, marketing emails, or any other unsolicited messages. Your email is never shared with or sold to third parties.
Display name
Chosen by you at registration. Visible to other users on public attendance lists and comments.
Password
Stored as a one-way bcrypt hash. We cannot read or recover your plain-text password.
Location (optional)
A city/country you enter in your profile, used to personalise the SC Agenda and the Locals Near Me features. We store approximate latitude/longitude coordinates derived from that text. You are not required to provide a location.
Session cookies
We use a single next-auth.session-token cookie (HTTP-only, secure) to keep you signed in. No third-party tracking or advertising cookies are set.
Event listings are sourced from the publicly accessible Ravensburger PlayHub platform. No personal data of event organisers or attendees is fetched or stored beyond what is publicly visible on PlayHub.
Your data is stored in a PostgreSQL database hosted by Neon.tech in the EU (Frankfurt, AWS eu-central-1 region). The application is deployed on Vercel.
If you are in the European Economic Area (EEA), you have rights under GDPR regarding your personal data. Below is an honest account of which rights are currently available and how.
Right to erasure (Art. 17)
You can permanently delete your account and all associated personal data at any time from Account Settings → Danger Zone. Deletion is immediate and irreversible. No contact with us is required.
Right of access, rectification & restriction (Art. 15, 16, 18)
LoreGuide is a small fan-run project with no support infrastructure, no official Discord server, and no ticketing system. We currently have no staffed channel through which to respond to formal data access or correction requests.
In practice, most personal data you have provided (display name, location, avatar) can be updated directly in Account Settings. If you need data you cannot self-edit, the most reliable remedy available to you today is to delete your account.
Right to object (Art. 21)
We do not process personal data for direct marketing or profiling. The only processing that occurs is operating your account and delivering the service you signed up for. If you object to this processing, the appropriate course of action is to delete your account.
We acknowledge this falls short of a full GDPR-compliant support process. If the project grows to a scale where a proper data controller contact channel can be maintained, this policy will be updated accordingly.
Your account data is retained for as long as your account is active. If you request deletion your account, email address, display name, and location data will be permanently removed. Anonymised event attendance counts may be retained for statistical purposes.
If we make material changes we will update the date at the top of this page. Continued use of the site after changes are posted constitutes acceptance of the updated policy.