Privacy policy

Overview

Fudaya is a free fan game. This page explains what personal data it uses and why, in plain words.

What we collect

We collect only the following about you:

• Your email address, to sign you in and to send you the sign-in link.
• The username you choose, shown on your profile, in trades and, unless you turn it off in Settings, next to your notable pulls in the hub's big drops feed.
• Your Discord user id, only if you sign in with Discord.
• Your language, to show the site in it.
• Optional: how the interface agrees words for you (feminine, masculine or neutral; neutral by default), so the site can address you the way you choose. Only you see it. You can change it at any time in Settings, and deleting your account removes it.
• Optional: your pronouns, from a fixed list, and whether to show them on your public profile (off by default: shown on your public profile only when you turn it on). You can change or remove them at any time in Settings, and deleting your account removes them.
• If you play as a guest: a session cookie that identifies your guest account. No e-mail address is collected, and you confirm that you are 13 or older.
• If you arrive through an invitation link: a cookie that remembers the invitation code for 7 days, so the invitation can be credited. Your own invitation code is stored with your account.
• Anti-abuse signals: keyed hashes of your IP address (for IPv6, of its /64 network) and of a random device identifier, plus your browser family. One row per day, kept 30 days. Never the IP address itself.
• A keyed hash of your verified identity, used only to enforce one referral validation per person. Kept 12 months. It cannot be turned back into your e-mail address.
• If you sign in with Discord: the hash of your Discord avatar, used to build a link to the image on Discord's servers. We never store the image.

Guest mode

You can start playing as a guest, without an e-mail address. We then set a strictly necessary session cookie (`fudaya.guest`) that identifies your guest account, and you confirm that you are 13 or older. A guest account is deleted automatically after 30 days unless you sign in to keep it, and "Leave guest mode" deletes it at once, with its cards and history. When you sign in, the cards, boosters and Fragments of your guest account move to your account and the guest account disappears.

Anti-abuse signals

To spot farming, multiple accounts and self-referrals, we keep keyed hashes of your IP address (for IPv6, of its /64 network) and of a random device identifier stored in a cookie, plus your browser family, as one row per day. We never store the IP address itself. These signals are kept for 30 days, are used only to keep the game fair, and are never sold, shared or used for advertising. The legal basis is our legitimate interest in preventing abuse. They are part of your data export and are deleted with your account.

Invitations and referrals

If you arrive through an invitation link, a first-party cookie (`fudaya.ref`) remembers the invitation code for 7 days. The person who invited you sees, on their Invite page, your username and public avatar ("Guest" while you play without an account), when you joined, the status of your invitation and, until it is validated, how many boosters you have opened out of the number required and, once you have opened one, whether your account is verified (yes or no only). Nothing else about you: never your e-mail, your Discord account or the result of the fair-play checks. To make sure an invitation is validated only once per person, we keep a keyed hash of your verified identity for 12 months. Referral records stay when you delete your account, so the rewards of the other person are never taken back, but your username and avatar disappear from their list and you show as "A former player". You can object to this processing by deleting your account.

Referral event leaderboard

During a referral event, the Invite page shows signed-in players a leaderboard of the players who brought the most validated friends since the event began: their username, their public avatar and that number. It is not optional while an event runs: every player with a public profile takes part automatically, and guests never appear. Nothing new is stored for it: it is computed from the referral records and the dates of the event, kept as described in the referrals section. It disappears when the event ends.

Trades and market

Your username is visible to the players you trade with and on your public market listings. The history of your trades and sales (cards, Fragments, fee, dates) is kept with your account and is part of your data export. If a moderator limits your trading or your referral rewards, the restriction and the reason the moderator wrote are kept until it is lifted, then for 12 months. Automatic moderation flags are kept until they are resolved, then for 12 months. When you delete your account, your active listings and pending trades are cancelled, and the history of past trades and sales stays attached to your anonymised account. Your offers on the trade board (the card you give, the characters you would take, the Fragments held, the status and the dates) are kept with your trade history and are part of your data export. When you delete your account, your open offers are cancelled. To keep trading fair, limits apply to the value a player can receive in a short time, and suspicious exchanges are reviewed by a person; players are never penalised automatically.

Wishlist and price alerts

You can wish for characters and, for each one, set an optional price: you are then notified of new listings and auctions at or under it. Your wishlist and its prices are private: only you see them, and other players are never told that you wished for a character. Cards and listings only show an anonymous total: how many players want a character, never who. They are kept until you remove them or delete your account, and they are part of your data export.

Trade binder

You can mark copies of your cards as open to trade. A marked copy shows your username and the copy (code, print number, finish) to signed-in players who can trade, and players who wished for that character can be notified. The mark is removed when the card changes hands or when you close it, and all your marks are cleared when you delete your account. Your marked copies are part of your data export.

Notifications

The game tells you about what concerns you: a sale, a bid on an auction (outbid, won, sold, ended or cancelled), a new listing of a character on your wishlist, a trade proposal and its answer, an invitation or a milestone. Notifications live in the game only: no e-mail, no push notification and no third party is involved. They mention other players by username only. You can mute each type in Settings. Notifications are deleted after 30 days; your notification settings are kept until you delete your account. The last 30 days of notifications and your settings are part of your data export.

Auctions

Your bids are not shown to other players: they only see the number of bids and the current bid. The seller is not told who won. Your auctions and your bids are kept with your trade and market history and are part of your data export, without the identity of the winner or of any other bidder. When you delete your account, your auctions are cancelled, your top bids are withdrawn with a refund of the Fragments held, and the history of past auctions stays attached to your anonymised account.

Missions

Daily and weekly missions are part of your game data. We keep the missions drawn for you, your progress, which rewards you have claimed, and anti-farm traces: event identifiers (kept 8 days) and, for trade and market missions, a note that a given player already counted once, used only to refuse counting the same player twice (never shown to anyone). Finished days and weeks are kept 90 days, then deleted. All of it is part of your data export, without the identity of any other player, and is deleted with your account, including the traces where you were someone else's counterpart.

The Comptoir

The Comptoir is the public chat where players announce trades. It is the only place in the game where you write free text, so it comes with more rules and more care than the rest.

• Who sees what: your messages, your username, your avatar, your number of completed trades and the cards you attach are visible to every verified signed-in player, and to nobody else. Guests and visitors who are not signed in see nothing.
• How long: a message is deleted 7 days after you post it. If you delete a message yourself, it disappears from the Comptoir at once and is erased from our database when the 7-day purge reaches it. All your messages are deleted with your account.
• Filters and moderation: the server automatically refuses links, contact details, payment talk and offensive terms. Players can report a message. The team reviews the reports and can remove a message, mute you for a while or ban you from the Comptoir, always with a reason that you can read.
• Reports: a report holds the identifier of the player who made it, a reason, an optional note and a copy of the reported message, so that the team can still judge it once the message is gone. Only administrators and moderators see reports, and the reported player never sees who reported. A handled report is deleted 90 days after it was handled. A report that moderators escalated for investigation (for example about the safety of a minor) is kept until an administrator releases it, then deleted 90 days after like any handled report. If you delete your account, your own reports are deleted, except escalated ones, which are kept without your identity under the same rule. The reports about your messages are deleted too (except an escalated one).
• Sanctions (mute, Comptoir ban) and their reasons are kept until 12 months after they end. If you delete your account they are lifted and stay attached to the anonymised account until then. Each moderation action (mute, ban, lifting, message removal, with its reason) is also written to the team's tamper-proof audit log, kept for 12 months for the security of the service and to answer disputes. You can ask about it at contact@fudaya.gg.
• Notifications: players who wishlisted a character are told when someone posts a Trade message for it, and you are told when a moderator removes one of your messages or sanctions you (that one cannot be muted). The other Comptoir notifications can be muted in Settings (see Notifications). The "Perfect match" badge tells a player who reads your message that you want a character they have spare; it never shows your wishlist.
• Legal basis: the performance of the service you use (the Comptoir is part of the game) and our legitimate interest in keeping a safe community. You must be 13 or older to use the game, and so the Comptoir.
• Your data export contains your messages that are still stored, your own reports (without the reported message) and the sanctions decided about you.

Friends and private messages

Friends is optional. You can add players as friends and write to them privately: a private message exists only between two players who accepted each other, and only those two can read it. It is for players aged 13 or older, like the rest of the game.

• What we store: your friend requests (sent and received), your friendships, the players you block, your private messages (plain text, and card messages of the same kind as the Comptoir's), a marker of how far you read each conversation, and your setting “who can send me friend requests”.
• Who reads what: a private message is visible to you and to the friend you wrote to, and to nobody else. Administrators and moderators never browse conversations: they only see a message that a player reported, with the ten messages before it.
• Blocking: you can block any player at any time. A block ends the friendship, forbids requests and messages in both directions, and the blocked player is never told. You can unblock someone at any time from the settings of your Friends page. In Settings you can also choose to receive friend requests from nobody.
• Reports: when you report a private message, we keep a copy of that message and of the ten before it (from both sides), your reason and your optional note, so that the team can still judge it once the message is gone. The reported player never sees who reported. A handled report is deleted 90 days after it was handled. A report that moderators escalated for investigation (for example about the safety of a minor) is kept until an administrator releases it, then deleted 90 days after like any handled report. If you delete your account, reports you made that were escalated are kept without your identity under the same rule.
• How long: a private message is deleted 90 days after it was sent, at once when its author deletes it, and with the account of its author (your friend's copy of your messages disappears with your account). A friend request expires after 30 days. Friendships and blocks stay until you remove them or until one of the two accounts is deleted.
• Sanctions: the same mute or ban applies to the Comptoir and to private messages together, and a mute or a ban also stops you from sending or accepting friend requests and from changing who can send you requests. It is kept until 12 months after it ends, like the Comptoir sanctions.
• Notifications: a new-message notice only says that a friend wrote to you, never what was written. You can mute it in Settings.
• Legal basis: the performance of the service you use and our legitimate interest in keeping a safe community. Friends and private messages are for players aged 13 or older.
• Your data export contains your friends data: the private messages you wrote that are still stored, your requests, friendships and blocks, your setting, the time you last read each conversation and your own reports (without the copies of other players' messages). Deleting your account removes all of it (except reports escalated for investigation, see Reports).

Card reports and contact

If you use the "Report this card" button, we keep your player identifier, the number of the character, the reason you picked from a fixed list (wrong series, wrong image, wrong name, wrong rarity, duplicate, removal request) and the date. There is no free text. Only administrators see these reports, to correct the catalogue, and a report never removes a card by itself. Reports are kept 90 days after an administrator handled them (and 12 months at most if nobody did), they are part of your data export and they are deleted with your account. The "Write to the team" button only prepares an e-mail on your own device, with a few technical lines (the current page, recent pages, language, theme, screen size and reduced-motion setting) that stay in your browser for the length of the tab and that you can edit before sending: the site stores and sends nothing. A rights holder who wants a character removed must write to takedown@fudaya.gg.

Avatar, showcase and cosmetics

Your avatar can be a default picture, one of your cards or, if you signed in with Discord, your Discord avatar. For the latter we store only the hash Discord gives us: showing it makes the browser of anyone who sees it contact Discord's servers to load the image, which we never copy. Your showcase layout and the cosmetics you unlocked or equipped are game data tied to your account; they are in your data export and are deleted or reset with your account.

Public profile

Every player with a username has a public profile page, visible to anyone, signed in or not. Guests do not have one.

• What is public: your username, your avatar, your pronouns only if you chose to show them, your showcase, the titles and badges you unlocked, four figures computed from your cards (characters owned, series completed, Legendary cards owned, first discoveries) and, unless you restrict it, your collection with the same filters as the album. If your avatar is your Discord avatar, its address, which contains your Discord user id, is public on your profile; you can choose another avatar in Settings. Never your e-mail, your Fragments or your agreement.
• Collection visibility: you choose between "Public" (the default) and "Showcase only". With "Showcase only", your profile shows your showcase and your figures, and other players can no longer browse your collection. You can change it at any time.
• What the setting does not hide: who owns a copy. Card pages, the "who has it" list of a character and the market show the username of the player who holds each copy, because trades and sales need it.
• Discovered by: the first player to pull a copy of a character is named on that character's page ("Discovered by" followed by their username). It does not change when the card is traded. If you delete your account it becomes "a collector".
• Search: your username can be found by anyone who searches for players.
• When you delete your account your profile disappears (the page no longer exists) and your discoveries show "a collector".

What we use it for

Your email address and username let you sign in and play. Your Discord user id lets you sign in with Discord and, if you choose, check that you joined our server. Your language, agreement and pronouns, if you give them, only serve to show the site the way you chose. We also use this data to prevent abuse such as multiple accounts.

Big drops feed

The hub shows a feed of notable recent pulls: Ultra Rare and Legendary cards, and Super Rare cards that are holo or the first print. Each row shows your username, the character, its rarity and finish, and when it was pulled, so the community has something to cheer for and chase. It is read from your booster openings; the only thing stored for it is your on/off choice, and a pull stops being shown after 7 days. Anyone who visits the hub can see it. It is on by default. To opt out, turn off "Show my username in the big drops feed" in Settings: your pulls then appear as "A collector", within two minutes. This only changes the hub feed: whatever this setting, card pages list the owners of the other copies of a card with their username (copy number and owner).

Legal basis

We process this data because it is needed to provide your account and the game (contract), and for our legitimate interest in keeping the service secure and fair. The anti-abuse signals and the identity hashes rest on that legitimate interest only. The guest and session cookies are strictly necessary.

How long we keep it

How long we keep each kind of data:

• Your account data: as long as your account exists.
• A guest account and everything in it: 30 days, unless you sign in to keep it, or until you leave guest mode.
• Anti-abuse signals: 30 days.
• The invitation cookie: 7 days.
• Identity hashes against double referral: 12 months, even if you delete your account.
• Trading restrictions and moderation flags: until lifted or resolved, then 12 months.
• Your wishlist, its prices and the open-to-trade marks: until you remove them or delete your account.
• Notifications: 30 days. Your notification settings: until you delete your account.
• Your auctions and bids: kept with your trade and market history, attached to your anonymised account if you delete it.
• The Comptoir: messages 7 days; handled reports 90 days after they were handled; sanctions 12 months after they end; the team's moderation log 12 months.
• Friends: private messages 90 days after they are sent; friend requests 30 days; friendships and blocks until you remove them or an account is deleted; handled reports of a private message 90 days after they were handled; sanctions 12 months after they end.
• Card reports: 90 days after an administrator handled them, 12 months at most if nobody did.
• Technical server logs, which are not linked to your profile: 30 days.

Your rights

You can ask to see, correct or delete your data at any time by writing to contact@fudaya.gg. Deleting your account removes your personal data.

Downloading your data

From Settings you can download all the data we hold about you as a JSON file, up to 3 times a day. It has one section for each of the following, and nothing about other players. Sign-in sessions (a security token and its expiry, deleted when you sign out, when it expires or with your account) and technical server logs, which are not linked to your profile, are not part of it.

• Your profile: username, e-mail, creation date, language, the moment you confirmed being 13 or older (never a birth date), the e-mail verification date, agreement, pronouns and your display choices.
• Your linked sign-in methods: the provider (for example Discord) and the identifier it gave us, never an access token.
• Your game state: booster stock and last refill time, bonus boosters, theme tokens, Fragments, pity counter, packs opened, daily reward day, when you last looked at your album, and when your player record was created.
• Your cards: copy code, character, rarity, print number, finish, variant, when you got it and which booster opening it came from.
• Your booster openings: when, which pack, its price and whether the pity guarantee triggered.
• Your Fragment history: every gain and spend, with its reason and date.
• Your daily rewards: the day, the day of the cycle and what you received.
• Your album rewards: the series, the reward and the Fragments paid.
• Your franchise album rewards: the franchise, the reward and the Fragments paid (a claim carried over by a merge or split of franchises pays nothing).
• For administrators only: the actions you carried out in the admin tools, with the reason and the date.
• Your anti-abuse signals: the day, the keyed hashes of your IP address and of your device identifier, and the browser family (30 days at most).
• Your referrals: your invitation code, the username of who invited you and what they see about you (username, public avatar, join date, status, boosters opened while pending and, once you have opened one, whether your account is verified), the status of the people you invited (their username only once validated) and the milestone rewards you claimed.
• Your trades: your role, the status, the username of the other player, the cards and Fragments given and received, the fee and the dates.
• Your trade offers: the card you gave, the numbers of the characters you wanted, the Fragments held, the status and the dates.
• Your market listings: status, price, fee, what you received and the card as it was listed.
• Your auctions: the card as it was listed, start and buy-now prices, final status, sale price, fee, what you received and the dates, never who won.
• Your bids: the auction, the card, the amount, the status (top bid, outbid, won, refunded or withdrawn) and the dates, never another bidder.
• Your wishlist: the character numbers you wished for, your optional price thresholds and the dates.
• Your trade binder: the copies you marked as open to trade and when.
• Your notifications: the settings and the last 30 days of notifications, with other players by username only.
• Your Comptoir data: your messages that are still stored (kind, text, attached card or character number, date, status and the reason if a moderator removed it), the reports you made (message, reason, note, date, status, without the reported message) and the sanctions decided about you (kind, reason, dates).
• Your friends data: your setting, your requests, your friendships and blocks (with the usernames), the private messages you wrote that are still stored, the time you last read each conversation (with the other player's username), and your reports of private messages (reason, note, date and status; never the copies of other players' messages).
• Your card reports: the character number, the reason you picked, the date and when an administrator handled it (never who).
• Your market purchases: price, card and date, never who sold it.
• Restrictions applied to your account: the kind, the reason a moderator wrote and the dates.
• Your cosmetics: the ones you unlocked and where they came from, and the ones equipped on each of your cards.
• Your showcase layout.
• Your avatar: its mode, the card used and, for Discord sign-ins, the avatar hash Discord gave us.
• The opening request of every booster you open: how many boosters, how many were free, bonus or paid with Fragments, and the Fragments spent. The request of a single opening that cost no Fragments is kept 7 days; those of multi-openings and of openings paid with Fragments are kept as long as your account.
• Your Comptoir moderator role, if an administrator gave you one: the date it was granted. We also record which administrator granted it; the role ends when it is revoked or when you delete your account.
• Your administrator role, if an owner of the site gave you one: the date it was granted. We also record which owner granted it; the role ends when it is revoked or when you delete your account.
• Your discoveries: the number and the date of every character whose first copy you pulled (the "Discovered by" mention on its page). The setting that decides who can browse your collection is in your profile section.
• Your missions: for each day and week, the missions drawn, the progress, which rewards you claimed, and the number of anti-farm traces (never who they involve).

Deleting your account

You can delete your account yourself from Settings, by typing DELETE to confirm. We then remove your e-mail, username, language, agreement and pronouns, linked sign-in methods, sessions, Fragment history, daily claims, album rewards, anti-abuse signals, cosmetics, showcase, milestone claims, Discord avatar hash and invitation code. Your active listings, your auctions and your pending trades are cancelled; the top bids you held are withdrawn and the Fragments held are refunded. Your wishlist and price alerts, your notifications and notification settings, and the open-to-trade marks on your cards are deleted. The copies of cards you owned are kept as anonymous print records (copy code, print number and character) so that other collectors' print history stays correct: they no longer point to any person and show "Former collector" as owner. You can register again later with the same e-mail as a new account. The history of your booster openings (date, pack type and price) and of your opening requests (those of a single opening that cost no Fragments only for 7 days) is kept without any personal data, like the print records, and so are your past trades, sales, referral records and restrictions, attached to the anonymised account; the identity hash against double referral stays 12 months. Your Comptoir messages and your own reports are deleted (except one escalated for investigation, kept without your identity until an administrator releases it, then deleted like any handled report), and so are the reports about your messages (except one escalated for investigation); your Comptoir sanctions are lifted and kept, attached to the anonymised account, until 12 months after they end. Your friend requests, friendships, blocks and settings are deleted, and so are the private messages you sent (your friends no longer see them), your reports of private messages (with the same exception) and the reports about your private messages (except one escalated for investigation).

Who handles your data

These services process data on our behalf:

• Neon, database host, in the European Union.
• Vercel, which serves the website.
• Resend, which sends the sign-in emails.

No ads, no tracking

There are no ads, no third-party trackers and no advertising analytics. We never ask for your date of birth, and we never sell or share your data.

Cookies

We only set strictly necessary cookies. The session cookie keeps you signed in. The sign-in flow also sets short-lived cookies that hold a CSRF token and the page to return to, and, during Discord sign-in, the OAuth state and PKCE values that protect the exchange; they are deleted once sign-in completes or expires. Three preference cookies remember choices made on this device for one year: `fx` (full or lite effects), `album_view` (the album view you last used) and `art-hd` (whether enhanced card images are on); they hold no personal data. With enhanced card images on, your browser keeps the sharpened card pictures it computed in its own storage on this device (150 MB at most); they are never sent to us. The sign-in form also keeps the e-mail address you asked a link for in a short-lived `signin_email` cookie (30 minutes, not readable by scripts), only so an expired link can be re-sent in one tap. These cookies are needed for the service you asked for, so no consent banner is required and none is shown. There are no advertising, analytics or tracking cookies. The cookies below hold an identifier or a choice, with their purpose and duration:

• `__Secure-authjs.session-token` (Auth.js): keeps you signed in. Up to 30 days, deleted when you sign out.
• `__Secure-fudaya.guest`: identifies your guest account. 30 days, deleted when you leave guest mode or sign in.
• `__Secure-fudaya.device`: a random device identifier, only used on our side as a keyed hash for the anti-abuse signals. About 13 months.
• `__Secure-fudaya.ref`: the invitation code you arrived with. 7 days.
• `NEXT_LOCALE`: the language you picked. One year.
• `album_view`: the album view you last used. One year.