Privacy policy

Last updated: October 14, 2026

Translation provided for convenience; the French version prevails.

Data controller

Zach Frechin, adresse non publiée, communiquée à l'hébergeur conformément à l'article 6-III-2 de la loi n° 2004-575 du 21 juin 2004 (LCEN). Contact: zach.frechin@gmail.com.

Data collected

  • Google account: email address, Google ID, display name and profile picture.
  • Game profile: username, collection, currencies, booster openings, duels, missions, achievements.
  • Social: friends, private messages, trades, market listings, reports.
  • Feedback and, if you attach one, the screenshot.
  • Technical data: IP address (security, abuse prevention, referral anti-fraud, hashed when stored), technical logs.

Purposes and legal bases

  • Providing the game and your account: performance of the contract (terms of use).
  • Security, cheating prevention and moderation: legitimate interest.

Retention periods

  • Account and game data: as long as the account exists.
  • Technical logs: 30 days. Backups: 14 days.

Recipients and processors

Hosting provider (OVH SAS), Google (sign-in), Cloudflare (image delivery), Sentry (error tracking, without cookies or sign-in data). Some of these providers may process data outside the European Union, with the safeguards provided for by the GDPR (standard contractual clauses).

Cookies

Mangakaka only uses two strictly necessary cookies: mk_session, which keeps you signed in for 30 days, and mk_locale, which remembers the language you chose for 1 year. No advertising or analytics cookies.

Your rights

You can export all your data and delete your account yourself from the Account page. For the rights of access, rectification, objection or restriction, write to zach.frechin@gmail.com. You can also file a complaint with the CNIL, the French data protection authority (cnil.fr).

Account deletion

Deletion is permanent: your username and email are anonymized, your cards go back to the game's bank, and your ongoing listings and trades are cancelled. Messages you have already sent remain visible to their recipients, signed with an anonymous username.