YOUR DATA, YOUR CHOICES

Privacy policy

Draft for review · Effective date: September 25, 2026

Before public launch: confirm the final hosting provider and review this notice for users in Ontario, Canada and other places where Cardpedia will be offered.

Who operates Cardpedia

Cardpedia is operated in Ontario, Canada as an independent community companion for Luvi. It is not affiliated with Luvi, its publisher, Discord, or the card-game service. For privacy questions, email Cardpediabot@gmail.com or visit the Cardpedia support server.

Information Cardpedia handles

Account: email address, password credentials handled by Supabase Auth, username, and linked Discord account identifier when you connect Discord.
Website collection: saved cards and skins, wishlists, team builds, and imported card or skin details such as game instance IDs, rarity, grade, level, ability, awakening, and source message identifier.
Bot: Discord user ID, reminder settings and targets, scheduled reminder text and times, temporary inventory scan progress, and imported inventory. The bot reads supported official game-bot messages in configured Discord channels to provide reminders and inventory import. It does not automate game controls.
Technical data: the site uses Supabase session storage in your browser. Supabase, your site host, Discord, and any external font or image host may receive ordinary connection data such as IP address and user-agent when your browser contacts them.

How it is used and shared

Cardpedia uses this information to sign you in, link Discord, save your collection and teams, import the inventory pages you choose, and deliver reminders. Supabase provides authentication and website storage; MongoDB Atlas stores bot preferences, reminders, inventory, and scan state; Discord provides login and message delivery. Cardpedia does not sell personal information. Your username and skin wishlist may be visible to other site users through collection comparison. Your card wishlist, teams, imported copy details, email, and Discord identifier are intended to be private to your account and the services needed to operate Cardpedia.

Retention

Account, wishlist, team, and imported collection data remain until you delete them or request account deletion. Active reminders remain until they fire or you cancel them. Completed, failed, or cancelled reminders are scheduled for automatic removal after seven days. Inventory scan runs, skipped-card reviews, and expedition ownership are temporary; delivery-deduplication records expire within seven days. Account deletion removes website account records and queues linked Discord bot records for removal. Bot data is removed when the bot next processes the private deletion queue; if the bot is offline, processing waits until it is running again. Cardpedia does not control copies retained in provider backups under their own retention practices.

Your choices

You can edit or remove wishlist items, remove imported copies, unlink Discord through your account provider, or delete your account from Edit profile. Account deletion is permanent and removes Cardpedia data; it does not delete your Discord account or game account. You may also contact the operator using the support contact above to ask a privacy question.

Security and changes

Cardpedia uses access controls and row-level policies for private website records, but no internet service can promise perfect security. The operator may update this notice as the service changes. The current date appears at the top of this page.