Privacy Policy

Privacy Policy – Altered-DB

Last updated: 04/28/2026

1. Introduction

This privacy policy aims to inform users of the Altered-DB website (altered-db.com) about how their personal data is collected, used, and protected, in accordance with the GDPR.
By using this website, you agree to the practices described in this policy.

2. Data Controller

The data controller is:

PolluxTroy
Contact: .polluxtroy on Discord

3. Data Collected

When using the website, the following data may be collected:

3.1 Identification Data (via OAuth)

When you log in through the external authentication service (Keycloak – Altered.re), we collect:

  • Username
  • Email address
  • Unique identifier (Keycloak "sub")
  • Preferred language

3.2 Authentication Technical Data

  • Access token (temporary)
  • Refresh token (securely stored and encrypted)
  • Token expiration date

This data is necessary to maintain your session and provide access to the website’s features.

4. Purpose of Processing

The data is used to:

  • Enable authentication via a third-party service
  • Identify users on the platform
  • Display decks and card collections
  • Ensure proper technical operation of the website

5. Legal Basis

Processing is based on:

  • Performance of the service (authentication and access to features)
  • Legitimate interest (security and service improvement)

6. Third-Party Authentication

Authentication on AlteredCore relies on an external OAuth service (Keycloak) provided by Altered.re.

By logging in:

  • You authorize the transfer of certain data (email, identifier, etc.)
  • You accept that authentication is handled by an independent third-party service

AlteredCore does not have access to your password.

7. Third-Party Services and External APIs

The website relies on external services to retrieve certain data, including:

  • Card management APIs
  • Deck management APIs
  • Collection management APIs
  • Ownership management APIs

These services are hosted and operated by independent third parties.

  • Some requests may involve data exchanges with these services.
  • AlteredCore cannot be held responsible for how these third parties process data.

Subdomains (e.g., cards.alteredcore.org, decks.alteredcore.org) may redirect to these services.

8. Data Retention

Data is retained:

  • As long as the user account is active
  • For a reasonable period after inactivity (24 months)

Data may be deleted upon user request.

9. Data Security

AlteredCore implements appropriate security measures:

  • HTTPS connection
  • Secure and encrypted token storage
  • Restricted access to data

However, no system is completely secure, and some level of risk remains.

10. User Rights

In accordance with the GDPR, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability

To exercise these rights, contact: .polluxtroy on Discord

11. Account Deletion

You may request deletion of your account and personal data at any time by contacting: .polluxtroy on Discord
Deletion will be processed within a reasonable timeframe.

12. Cookies

The website may use technical cookies necessary for its operation (authentication, session).
No tracking or advertising cookies are used without your consent.

13. Policy Changes

This policy may be updated at any time.
The latest update date is shown at the top of this page.

14. Contact

For any questions regarding this policy, contact:
.polluxtroy on Discord

15. Supervisory Authority

In case of a dispute, you may file a complaint with the CNIL.

 

Legal Notice – AlteredCore

Last updated: 04/28/2026

1. Website Publisher

The website AlteredCore (alteredcore.org) is published by:

PolluxTroy
Status: Individual
Contact: .polluxtroy (Discord)

2. Hosting

The website is hosted by:

OVHcloud
2 rue Kellermann
59100 Roubaix – France

3. Website Access

The website is accessible at all times, except in cases of maintenance, updates, or force majeure.
The publisher cannot be held responsible for interruptions or malfunctions.

4. Intellectual Property

All content on the website (texts, code, graphics, logos, etc.) is protected by applicable laws.
Some content related to Altered (images, data, graphics) belongs to their respective owners.
Any unauthorized reproduction or use is prohibited.

5. Liability

The website is provided "as is".
The publisher strives to provide reliable information but does not guarantee accuracy, completeness, or availability.
Use of the website is at the user’s own risk.

6. Third-Party Services

The website relies on external services for certain features (including card and deck management).
Some subdomains (e.g., cards.alteredcore.org, decks.alteredcore.org) may redirect to these services.
The publisher cannot be held responsible for the content or operation of these third-party services.

7. External Links

The website may contain links to third-party websites.
The publisher is not responsible for the content or practices of these external sites.

8. Personal Data

Information regarding the collection and processing of personal data is available in the website’s privacy policy, in accordance with the GDPR.

9. Governing Law

This website is governed by French law.
In the event of a dispute, and failing amicable resolution, French courts shall have exclusive jurisdiction.