Privacy policy
This policy covers the website at narutotcg.app and the NR.TCG app for Android and iOS. In short: the account is optional, analytics only runs if you accept, and the app has no advertising.
Last updated:
Who we are
NR.TCG is an independent, unofficial fan project by AristiDevs, which is responsible for the personal data described on this page. It is not affiliated with or endorsed by Bandai or the rights holders of NARUTO. You can reach us at the contact address at the end of this page.
Using the app without an account
The app works without an account; only syncing between devices and notifications need one. Without an account, your folder, your wishlist and your preferences are stored only on your device, and deleting the app deletes them.
Event reminders are scheduled on your device and do not send us any data.
Your optional account
You can create an account with Google, with Apple (on iOS) or with an email address and password. We then store your email address, a user identifier and the sign-in method you used.
With an account, your folder (every copy with its printing, condition, language, graded status, how you got it and the acquisition cost you entered), your wishlist and your market and currency preferences are stored in the cloud and synced between your devices.
We use this data only to run your account and keep your devices in sync. The legal basis is providing the service you ask for.
Account data is hosted by Supabase in the European Union (Frankfurt, Germany).
Notifications
When you sign in, the app registers your device with OneSignal so we can send you notifications about your folder and wishlist. OneSignal receives a push token, technical data about the device (such as model, operating system and language) and your user identifier, which links the device to your account. Signing out unlinks it, and you can turn notifications off at any time.
Event reminders are local notifications and do not go through OneSignal.
Analytics, only if you accept
The app asks whether you want to help us improve it. Only if you accept, Firebase Analytics, a Google service, measures how the app is used: screens viewed, features used and technical data about the device, linked to a random identifier of the app installation and, on Android, to the device's advertising identifier.
We use this information only to understand and improve the app, never for advertising. We never send your email address or the amounts you enter. If you decline, or have not answered yet, no analytics events are sent. You can change your choice at any time in Settings. The legal basis is your consent.
Crash reports
Firebase Crashlytics, a Google service, is always on. When the app crashes it sends a technical report: what failed in the code, device model, operating system and app version, and a random identifier of the installation. It does not include your account data. The legal basis is our legitimate interest in keeping the app working.
Camera
The camera is used only by the card scanner, in versions of the app that include it, to recognise cards on your device. Photos and camera frames are not stored or sent anywhere. You can refuse camera access and keep using the rest of the app.
Who processes your data
Supabase (accounts and sync), Google Firebase (analytics with your consent, and crash reports), OneSignal (notifications) and Vercel (this website and the card catalogue the app downloads, which involves your IP address) process data on our behalf and only for these purposes. Some of them may process it outside the European Economic Area, under legal safeguards such as the European Commission's Standard Contractual Clauses.
We do not sell your data or share it for advertising. The app contains no advertising.
The website
The website sets no cookies and uses no analytics. The cards and products you follow are saved in your browser's local storage and are never sent to us.
The website is hosted by Vercel, which processes standard technical data such as IP address and browser type in order to serve the pages and protect the service.
How long we keep data
Account data is kept while your account exists and is deleted when you delete the account. Analytics and crash data are kept for the limited period set in each provider and are then deleted automatically.
Deleting your account
You can delete your account and its data from the app, in Settings › Account › Delete account. The page narutotcg.app/delete-account explains the steps, what is deleted and how to ask us by email if you no longer have the app.
Your rights
You can ask us to access, correct, delete or export your data, and to restrict or object to its processing, by writing to the contact address below. You can withdraw your consent to analytics at any time in Settings. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Children
The website and the app are not directed to children under 13, and we do not knowingly collect personal data from them. If you think a child has created an account, write to us and we will delete it.
Changes
If we change how we use your data, we will update this page before releasing the change, and ask for your consent where the law requires it. The date at the top shows the latest version.