Privacy Policy

PUNK04 (“the app”, “we”, “us”) is a free, independently run tool for tracking One Piece Trading Card Game tournament results, available as a website and as a mobile app. This policy covers both: what data we collect when you use the app, why we collect it, and how you can control it.

Data We Collect

We collect only what’s needed to run your account and the features you use:

• Account data— your email address, and, if you sign in with Google, the basic profile information Google shares with us (name, email, profile photo). If you sign in with Apple in the iOS app, we get the name and email Apple shares with us, which is a private relay address if you choose to hide your email. If you create an account with a password instead, we store your email and a securely hashed password; we never see or store your password in plain text.
• Profile data— the display name/pseudo you choose inside the app.
• Tournament data— the tournaments, rounds (including training rounds), opponents, decks, and results you enter or import to track your performance.
• Crew data— if you join or create a Crew, your membership and win totals are visible to other members of that Crew. Your pseudo and avatar can also be shown to other players on the monthly ranking if you place in its top three.
• Data stored on your device— the mobile app keeps a copy of your tournaments and rounds on your device so it works offline, and syncs it with your account when you are back online.
• Reports and support e-mails— if you contact us or report a player or a Crew name, we receive what you send, such as your e-mail address and the name and ID of the player you report.
• Preferences— your light/dark theme choice, stored in a small cookie on the website and on your device in the mobile app.

We do not run ads, and we do not use analytics or tracking cookies.

How We Use Your Data

Your data is used solely to operate the app: authenticating you, saving and displaying your tournament history and statistics, and powering optional social features like Crews. We do not sell your data, and we do not share it with third parties for advertising or marketing purposes.

Third-Party Services

We rely on a small number of service providers to run the app, and your data is only ever shared with them for that purpose:

• Supabase hosts our database and handles authentication (including password hashing and session management).
• Google Sign-In is offered as an optional way to create an account and log in. If you use it, Google shares your name, email, and profile photo with us in accordance with your Google account settings; we never see your Google password.
• Sign in with Appleis offered as an optional way to create an account and log in, in the iOS app. If you use it, Apple shares your name and email with us, or a private relay address if you choose to hide your email, in accordance with what you allow; we never see your Apple password. If you delete your account, we ask Apple to revoke PUNK04’s Sign in with Apple authorization (see Data Retention & Deletion below).

Cookies

We use strictly functional cookies only: an authentication session cookie (so you stay signed in) and a theme cookie (so light/dark mode is remembered). Neither is used for tracking or advertising.

Data Retention & Deletion

We keep your data for as long as your account is active. You can delete your account at any time, yourself, in the mobile app (Profile → Delete account), or by contacting us at the address below, in which case we’ll process the request promptly.

Deleting your account permanently removes it and its data: your tournaments and rounds (including training rounds), your Crew membership, and your copy of the data on the device you delete it from. If you created a Crew, it passes to its longest-standing other member, or is deleted if you are its only member. Past monthly rankings are kept as history, but your name and avatar in them are replaced by “Deleted player”.

If you signed in with Apple, deleting your account in the app also asks Apple to revoke PUNK04’s Sign in with Apple authorization, so the app no longer appears in your Sign in with Apple list. You are asked to confirm with Apple to do this. If it can’t be done automatically, the app tells you, and you can remove PUNK04 yourself in your Apple ID settings (Settings → your name → Sign-In & Security → Sign in with Apple).

Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data (for example, under the GDPR if you’re in the EU/EEA/UK). To exercise any of these rights, contact us and we’ll respond as quickly as we can.

Children’s Privacy

PUNK04 is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact Us

Questions about this policy or your data? Reach out at optcg.tracker.dev@gmail.com.