Effective date: February 10, 2026
1. Introduction
OpeOpe.gg is a free, fan-built platform for the One Piece Trading Card Game. This policy explains what personal data we collect, why we collect it, and your rights over it.
This policy is governed by Canadian law under the Personal Information Protection and Electronic Documents Act (PIPEDA). If you have questions or data requests, contact us at support@opeope.gg.
2. Data We Collect
| Category | Examples | Source | Required? |
|---|---|---|---|
| Account data | Email address, display name, avatar URL | You, at registration | Yes — needed to operate your account |
| OAuth profile data | Name, email, profile picture from Google / Discord / GitHub | OAuth provider | Only if you sign in via OAuth |
| User content | Deck names, deck notes, comments | You | No — optional features |
| Usage data | Which decks you viewed, liked, or saved | Automatically collected | No |
| Anonymous visitor ID | opeope_anon_id cookie value | Automatically set | Only with analytics consent |
| Technical / log data | IP address, browser type, referrer, page URL | Vercel infrastructure | Yes — standard web server logs |
3. How We Use Your Data
- Account operation — authenticate you, display your profile, and save your decks and preferences (legal basis: contract / legitimate interest)
- Service security — detect abuse, prevent spam, and protect other users (legitimate interest)
- Deck view deduplication — the
opeope_anon_idcookie is used to count unique deck views without tracking individuals (analytics consent) - Performance & traffic analytics — Vercel Analytics and Vercel Speed Insights measure page load times and visitor numbers (analytics consent only)
- Transactional email — send account emails (password reset, email verification) via Resend (contract)
- Improving the service — understand which features are used to prioritise development (legitimate interest)
We do not sell your data. We do not use your data for advertising.
4. Third-Party Processors
| Processor | Purpose | Data shared |
|---|---|---|
| Neon (Neon.tech) | PostgreSQL database hosting | All account and user-generated data |
| Upstash | Redis query cache | Cached query results (may include user data) |
| Vercel | Web hosting, CDN, serverless functions | All request data (IP, headers, page URL) |
| Vercel Analytics / Speed Insights | Traffic and performance analytics (consent-gated) | Anonymised page views and vitals |
| Google / Discord / GitHub | OAuth sign-in only | OAuth token exchange; we receive profile data |
| Resend | Transactional email delivery | Your email address and email content |
All processors are bound by their own data processing agreements. We select processors that offer adequate data protection.
5. Cookies
We use cookies as described in our Cookie Policy. Strictly necessary cookies are always active. Optional analytics cookies require your consent, which you can update at any time in Settings.
6. Data Retention
- Account data — retained for as long as your account exists; deleted within 30 days of account deletion
- User content (decks, comments) — deleted when you delete your account or individual items
- Log / technical data — retained by Vercel per their standard retention policies (typically 30 days)
- Analytics data — retained in aggregate; no individual-level retention beyond the session
7. Your Rights
Under Canadian law (PIPEDA) and consistent with GDPR principles, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — delete your account and associated data via Account Settings, or request deletion by email
- Portability — request your data in a portable format
- Withdraw consent — opt out of analytics cookies at any time via Account Settings
To exercise any right, contact support@opeope.gg. We will respond within 30 days.
8. International Data Transfers
OpeOpe.gg is operated from Canada. Our infrastructure providers (Vercel, Neon, Upstash) may process data in the United States or other countries. We use providers that maintain adequate data protection standards. By using the service, you acknowledge that your data may be transferred internationally.
9. Children's Privacy
OpeOpe.gg is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact support@opeope.gg and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected in an updated effective date at the top of this page. Continued use of the service after changes constitutes acceptance.
11. Contact
Privacy questions or data requests: support@opeope.gg.
See also our Terms of Service and Cookie Policy.