Privacy Policy
Last updated: 9 July 2026
I built Inkweave as a free fan project, and I collect as little as possible. You can browse cards, explore synergies, and vote with no account. I don’t sell your data, I don’t use tracking cookies, and everything I store lives in the EU or on your own device.
What I collect
- When you vote on synergies. Voting is anonymous and needs no account. I store your vote (the two cards and your ratings) alongside a one-way hashed form of your IP address. I use that hash only to rate-limit voting so one person can’t flood the results. I never store your raw IP address, and the hash can’t be reversed back into it.
- Analytics. I use Vercel Web Analytics and Speed Insights to see which pages and features get used and to measure performance. They’re cookieless and aren’t tied to any account. I record events like which cards and playstyles are opened, and the text typed into the search box.
- Error reports. When something breaks, I use Sentry to collect a diagnostic report (what failed, the page, your browser) so I can fix it.
- On your device. Your deck drafts, the votes you’ve already cast, and your recent searches are saved only in your browser and never sent to me. You can clear them any time.
- If you sign in (optional). Signing in with Google or Discord is only needed to save decks to an account. If you do, I receive basic account identity from that provider (such as your email and a provider id). Your session is stored in your browser, not in a cookie.
Cookies
Inkweave doesn’t set any cookies. It uses your browser’s local storage for the things above, all of which are functional (they make the site work), not tracking.
Where my data lives
Everything I store is in the EU: votes and any account data are in Supabase (Frankfurt, Germany), and error reports go to Sentry in the EU. Inkweave is hosted on Vercel and served from its Frankfurt region. Card images and fonts come from Inkweave’s own servers. If you sign in with Google or Discord, that sign-in also involves those providers under their own privacy policies.
How long I keep it
I keep community votes for as long as Inkweave runs; they’re anonymous and aggregated, so there’s no reliable way to tie them to a person. If you have an account, I keep it until you ask me to delete it.
Your rights
You can use almost all of Inkweave with no account, and clear your browser data any time. Under GDPR you can ask me for a copy of your account data or to delete it; because votes are anonymous, I can’t single out one person’s votes. To make a request, email me at support.inkweave@gmail.com. If you’re in the EU, you also have the right to complain to your data protection authority (in Greece, the Hellenic Data Protection Authority).
Who I share data with
I don’t sell your data. I rely on a few providers to run Inkweave: Vercel (hosting and analytics), Supabase (database and sign-in), Sentry (error reports), and Google or Discord (only if you choose to sign in). That’s it.
Changes
I may update this policy; the date at the top shows when it last changed.