Loading notificationsLogin

From Minas Gerais or nearby?

Find out where to play with us. I wrote about the stores I play at in Belo Horizonte and the cities around it, and what each one is like.

Privacy Policy

What data TCMG Top Cut collects, why, who it shares it with, how long it keeps it and how to ask for access, correction, export or deletion.

Last updated: October 20, 2026

Who looks after your data

The data controller is [RAZÃO SOCIAL], CNPJ [CNPJ], located at [ENDEREÇO].

We are a small scale data processing agent under Brazilian rules (ANPD Resolution 2/2022), so we have no appointed data protection officer. The channel for any privacy matter is [E-MAIL DE PRIVACIDADE].

The data we collect

  • Account: the name, email and picture of your Google account, when you sign in.
  • Player profile: display name, profile address and Player ID (POP ID), if you fill them in. Year of birth is optional, never shown publicly and used for your tournament registration and your division (Junior, Senior, Masters).
  • Tournament results: name and Player ID as they appear in the official tournament file sent by the store, placement, matches and decks. This data is linked to your profile once you claim your Player ID.
  • What you publish: comments, likes, poll votes, decklists, Battle Frontier match logs (which include your opponent's Pokémon TCG Live username) and tournaments in your diary.
  • Stores: store details, the people who run the panel and the tournament files they upload.
  • Event photos published in the gallery, as the Photo policy explains.
  • Site usage: pages viewed and clicks, recorded in our own tables alongside a random identifier kept in your browser, which is not your name. Bot visits and local test visits are not recorded.
  • Measurement tools: Google Analytics, which uses cookies, and Vercel Web Analytics and Speed Insights, which measure visits and performance.
  • Club! subscriptions: payment happens on Stripe and your card number never reaches us. We keep the subscription status, amounts, dates and refunds.
  • Access records: IP address and date and time of access, kept by the hosting provider.

Children and teenagers

Juniors and Seniors use the site. We handle the data of anyone under 18 in the best interest of the child or teenager (LGPD, art. 14, and Brazil's ECA Digital, Law 15.211/2025): we collect the minimum, year of birth is never public and we do not build advertising profiles of minors.

Data of children under 12 is only handled with the consent of at least one parent or guardian. The guardian can exercise every right in this policy on the minor's behalf.

Who we share it with

We do not sell data. We only share it with the services that run the site, each in its own role:

  • Vercel: hosting, image storage and performance measurement (United States).
  • PlanetScale: database (United States).
  • Google: sign in and Google Analytics.
  • Stripe: Club! payments, once it is live.

We also hand data to authorities when the law or a court order requires it. And whatever is public on the site, such as your player profile, results and what you publish, can be seen by anyone.

International transfer

The data is stored on servers in the United States. That transfer follows article 33 of the LGPD, using the ANPD standard contractual clauses (ANPD Resolution 19/2024) or another mechanism the law accepts.

How long we keep it

  • Account and profile: for as long as the account exists. On deletion, we erase or anonymize the data, except what the law requires us to keep.
  • Subscription tax records: 5 years.
  • Access records: 6 months.
  • Tournament results: kept as the historical record of the event. If you delete your account, the result is no longer linked to your profile and stays under the name as it appeared in the official file.
  • Usage measurement: kept without any link to your name, for as long as it helps measure the site.

Your rights

Under the LGPD (art. 18), you can ask for:

  • confirmation that we handle your data, and access to it;
  • correction of incomplete, wrong or outdated data;
  • anonymization, blocking or deletion of data that is unnecessary or handled unlawfully;
  • portability, meaning a copy of your data in a format another service can read;
  • deletion of data handled on the basis of your consent, and withdrawal of that consent;
  • information on who we share your data with;
  • objection to processing based on legitimate interest.

You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

How to make a request

Write to [E-MAIL DE PRIVACIDADE], ideally from your account's email, saying what you want: access, correction, export or deletion. We may ask you to confirm the account is yours before we act.

We answer within 15 days. You can fix your display name, profile address, Player ID and year of birth yourself in your profile settings.

Security

The site only works over an encrypted connection (HTTPS), access to data is limited by role and we collect the minimum each feature needs. If an incident puts you at relevant risk, we tell you and the ANPD.

Cookies and browser storage

  • Sign in session: needed to keep you signed in.
  • Preferences: theme, language and the store selected in the panel.
  • Random measurement identifier, kept in the browser's local storage.
  • Google Analytics: audience measurement cookies.

You can clear cookies and local storage in your browser settings. Sign in and preferences stop working until you sign in again.

Changes to this policy

When this policy changes, the last updated date changes with it. Important changes are announced on the site before they apply.