Privacy & cookies
Deckpacker is a personal site with the rules of card games. There are no accounts, comments or newsletters. The only form is "Report a problem", optional, described below. This page explains what data is still processed during a visit, and what is stored on the device.
Controller
The data controller is Andrea Basile, a private individual based in Italy. Contact: {{EMAIL}}. No data protection officer (DPO) is appointed, as none is required.
What is processed and why
Visiting the site (hosting). The site is hosted by Netlify, Inc. (USA). Like any web server, Netlify receives the IP address, browser, requested page and time with every request, and keeps them in its technical logs to serve the site and protect it from abuse. How long it keeps them is set by Netlify, in its privacy policy. Legal basis: legitimate interest in running the site securely (Art. 6(1)(f) GDPR). Netlify acts as a processor under its Data Processing Agreement. The controller does not use these logs for statistics.
Problem reports ("Report a problem"). Whoever uses the form sends the text they wrote and the address of the page they are on; with the request Netlify also receives the technical data described above. The form asks not to include personal data. The message is stored by Netlify (Netlify Forms) and, as soon as it is sent, copied as an issue into a private GitHub repository of the controller (GitHub, Inc.). There it is read by the controller to fix the site. The message is not used for anything else. Legal basis: legitimate interest in fixing the site when its users report a problem (Art. 6.1.f GDPR). The message stays on Netlify and in the repository until the controller deletes it. GitHub acts as a processor under its own terms.
The cookie choice. The answer to the banner ("Accept" or "Reject") is saved in the browser, so the banner does not come back on every page. It stays on the device, is sent to no one, and is needed to respect the choice made, so it does not require consent.
Visit statistics (Google Analytics 4), only with consent. After "Accept" the site loads Google Tag Manager and Google Analytics 4 by Google Ireland Limited. Before consent, or after a rejection, these tools are not loaded and no data is sent to Google. They show which pages and games are read, to decide what to improve and add. Google Analytics records:
- the pages visited and their title;
- scrolling, clicks to external sites, searches made on the site (the search text), form and video interactions, file downloads;
- every link click, sent by the site directly to Google Analytics: link address and text, page area (header, content, footer), page name and language;
- technical information: browser language, browser and operating system type and version, screen resolution, approximate location derived from the IP address.
For users in the European Union, Google states that it does not log or store IP addresses: it uses them only to derive approximate location, then discards them. The site denies Google consent for ads, ad user data and ad personalisation (Consent Mode). How Google uses data from sites that use its services is explained on this Google page.
Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Google Analytics data is kept for 14 months from the last visit (the count restarts with every new visit) and then deleted; only aggregated reports remain. Google acts as a processor under its data processing terms.
Cookies and local storage
| Cookie | Purpose | Duration |
|---|---|---|
deckpacker-analytics-consent (localStorage) | Technical, by Deckpacker: remembers whether statistics were accepted or rejected | Until it is cleared in the browser |
nuxt:reload (sessionStorage) | Technical, by Deckpacker: prevents a reload loop when part of the site fails to load; written only in that case | A few seconds, at most until the tab is closed |
_ga | Analytics, by Google Analytics, only with consent: tells visitors apart with a random identifier | Up to 2 years (some browsers shorten it) |
_ga_12503Z72M1 | Analytics, by Google Analytics, only with consent: keeps the state of the visit | Up to 2 years (some browsers shorten it) |
The site uses no profiling or advertising cookies. Fonts and icons are served by Deckpacker itself, with no requests to external services.
Some links to Amazon.it are affiliate links: they carry a code that lets Amazon know the visit came from Deckpacker. There is no Amazon script on this site. Opening Amazon, Ko-fi, GitHub or LinkedIn leads to their site, which may set its own cookies under its own policy.
Transfers outside the EU
Netlify, Inc., Google LLC and GitHub, Inc. are based in the United States, so data may be transferred outside the European Union. Google states that it bases these transfers on the EU-U.S. Data Privacy Framework and, as a fallback, on the European Commission's Standard Contractual Clauses. The safeguards Netlify applies are described in its privacy policy and its Data Processing Agreement.
Changing your choice
Consent can be given or withdrawn at any time from "Cookie preferences" at the bottom of every page. After withdrawal Google Analytics is no longer loaded and the _ga and _ga_12503Z72M1 cookies are deleted. Cookies and site data can also be cleared in the browser settings.
Your rights
Visitors can request access to their data, rectification, erasure or restriction, object to processing, and request portability (Arts. 15-21 GDPR) by writing to {{EMAIL}}. The controller does not know who visitors are and, for Google Analytics, sees only a random identifier. A complaint can be lodged with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the local authority. Providing data is not required: rejecting statistics leaves the site working exactly the same. There is no automated decision-making.