Privacy Policy

Last updated: 11 October 2026 · For printyourcardgame.com, whether or not you have an account.

Who is responsible

The data controller is the operator of Print Your Card Game, a private individual in Hungary:

Operator

Bárczi István

Email

hello@printyourcardgame.com

Hosting provider

Laravel Cloud (Laravel Holdings Inc.), cloud.laravel.com

For any question about your data, write to us at hello@printyourcardgame.com.

What we collect, why, and on what basis

• Your account: username, email address, password (stored only as a one-way hash that can't be read back), the site language you used, whether you asked for the weekly email, and when you confirmed your email address. Why: to give you an account. Basis: our contract with you (these terms of use).
• What you create and share: your games (pictures, texts, print settings, descriptions, rules, covers, PDFs), 3D box files, comments, tips for printing, likes and feature suggestions, and whether each game is public or private. Public things show your username. Why: that is what the Service does. Basis: contract.
• Technical data: when you visit, our hosting provider and Cloudflare, which protects and delivers the site, process your IP address, browser type and the pages requested, and keep them in short-lived logs. Why: to deliver the site, keep it secure and fix errors. Basis: our legitimate interest in a working, secure site.
• Usage statistics, only if you allow them: with your consent, Google Analytics records which pages you visit, what you do on them (for example saving, uploading or downloading a game), how you arrived, and your approximate location, device and browser. We don't send it your name, email address or account. Why: to see how the Service is used and improve it. Basis: your consent, which you can withdraw at any time.

We don't sell your data, we don't use it for advertising, and we don't make automated decisions about you.

Emails we send

• Account emails — confirming your email address and resetting your password. These are part of having an account.
• The weekly email about new games — only if you asked for it when signing up or in Account settings (basis: your consent). Every one of them has a link to switch it off.
• A thank-you when a feature you suggested was added — sent once, to the address of your account.

Cookies and storage in your browser

When you first visit, a banner asks whether you allow analytics. You can change your choice at any time with "Cookie settings" in the footer.

• Necessary cookies (always on, as the site can't work without them): the session cookie that keeps you signed in, and a security token against cross-site request forgery (both expire after 2 hours of inactivity); a "remember me" cookie if you tick that box when logging in (up to about 13 months); and "lang", which remembers the language you chose (1 year).
• Analytics cookies (only with your consent): Google Analytics' cookies "_ga" and "_ga_…", kept for up to 2 years. If you switch analytics off, they are deleted.
• Storage in your browser, never sent to us: your cookie choice, the page setup you last used in the editor, and the draft of the game you are working on, so it isn't lost if you leave the page.

Who else receives data

We use these service providers, who process data on our behalf under contracts that oblige them to protect it:

• Laravel Cloud (Laravel Holdings Inc.) — hosting of the site and its database.
• Cloudflare — protection and delivery of the site, storage of uploaded files, and the libraries the editor loads for making PDFs.
• An email delivery provider — sending the emails above.
• Google — Google Analytics, only with your consent (Google's privacy policy).

Some of these companies are based in the United States or process data there. Such transfers are protected by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

Besides them, what you make public is visible to everyone using the Service (your email address never is), and we disclose data to authorities only when the law requires it.

How long we keep it

• Account and content: until you delete them or your account. Deleting your account deletes your account details, private games, comments, likes, boxes and suggestions straight away. Your public games stay online under "a deleted account", unless you choose to delete them as well; in that case they are hidden from everyone and kept only so that administrators can restore them if asked, or delete them for good.
• Server logs: a few weeks, unless needed longer to investigate abuse or a security problem.
• Analytics data: for the retention period set in Google Analytics, at most 14 months.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw your consent at any time (without affecting what was done before). Much of this you can do yourself: change your username and the weekly email in Account settings, switch analytics off in "Cookie settings", and delete your account. For anything else, write to us; we answer within one month.

If you think we handle your data unlawfully, you can complain to the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, 1055 Budapest, Falk Miksa utca 9–11, naih.hu), or to the authority of the EU country where you live, or go to court.

Children, security and changes

Children: you must be at least 16 to create an account. If you think a younger child has one, tell us and we will delete it.

Security: the site is only reached over an encrypted connection, passwords are stored as hashes, and access to the data is limited to what running the Service needs. No system is completely safe, but we will tell you and the authority about a breach where the law requires it.

Changes: we update this policy when the Service changes; the date at the top shows the latest version. For important changes, we let registered users know in advance.