FaB-Results

Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you use FaB-Results.

What Data We Collect

We collect minimal personal data necessary to provide and improve our services. This includes:

  • Authentication data: Your login credentials to securely access your account.
  • Technical data: IP addresses and device/browser information for security purposes.
  • Tournament data: Player names and results from publicly available tournament standings published by Legend Story Studios.
  • Usage statistics: Which pages and tools are used, plus the technical and approximate-location data described under Analytics below.

Cookies

We use only essential cookies required for website functionality. We do not use third-party cookies, tracking cookies, or analytics cookies; our analytics (see below) sets no cookies at all.

What Cookies We Use

  • Authentication Cookie: Used to verify your identity after login and maintain secure access to your account. This cookie is deleted when you log out or expires after your session.

Analytics

We use Umami, a privacy-focused analytics tool, to see which pages and tools are used and roughly how many people visit. We run it ourselves on our own server: it is first-party, no analytics data is passed to an analytics, tracking or advertising provider, it sets no cookies, and it does not follow you across other websites. All requests go to our own subdomain analytics.fab-results.net, and we do not store your IP address. It writes nothing to your device — no cookies, and nothing in your browser's local storage. The only thing it reads there is an opt-out flag you can set yourself, and it counts nothing at all if your browser sends a Do Not Track signal.

For every page view and tool interaction we record: the page or tool used and its URL, including any query parameters (if a link you followed carried a click identifier added by an advertising platform, such as fbclid, that is stored as part of the URL); the page you arrived from; your browser, operating system, device type, screen size and language; and the approximate location (country, region and city) derived from your IP address. For tool interactions we also record which tool was used and, in some cases, context such as the selected tab or format. The data carries no identifier for you and is never linked to your account.

We use these statistics only to understand how the site and its tools are used and to decide what is worth maintaining. We keep them for up to 12 months: anything older is deleted from the analytics database automatically every month.

How We Use Your Data

We use your data to:

  • Authenticate and secure your access to the website.
  • Ensure the security and integrity of our systems.
  • Display tournament results and statistics from publicly available sources.
  • Understand which pages and tools are used, so we can decide what is worth maintaining (see Analytics).

Legal Basis for Processing

Under GDPR, we process your personal data based on:

  • Legitimate interest: For displaying publicly available tournament data and maintaining website security.
  • Legitimate interest: For the first-party, cookie-less usage statistics described under Analytics, which tell us which pages and tools are worth maintaining. You can object to this processing at any time, and enabling Do Not Track in your browser is enough — our analytics respects it.
  • Consent: For user account creation and authentication (where applicable).

Data Retention

We retain data for the following periods:

  • User accounts: Until account deletion is requested.
  • Tournament data: Indefinitely, as it serves as a historical archive of public tournament results.
  • Technical logs: Maximum 30 days for security purposes.
  • Usage statistics: Up to 12 months; our analytics database deletes anything older automatically each month.

Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access: Request a copy of your personal data we hold.
  • Right to rectification: Request correction of inaccurate personal data.
  • Right to erasure: Request deletion of your personal data (subject to legitimate interests).
  • Right to data portability: Request your data in a machine-readable format.
  • Right to object: Object to processing based on legitimate interests.

Note: Tournament results from public standings may be retained based on legitimate interest in maintaining historical records, even if personal data deletion is requested.

Third-Party Services

This website runs on a server we operate ourselves, hosted by Hetzner in Finland, and for disaster recovery we keep encrypted copies of our databases, including the analytics database, with Amazon Web Services in Frankfurt, Germany. These providers process data only to keep the site online and recoverable.

Our pages also load card images from the image hosts Legend Story Studios provides, because that artwork is theirs. Serving a file to your browser reveals your IP address to whoever serves it — that is true of any externally hosted asset — and we send them nothing else. No analytics or tracking data is shared with them, and we do not use them to follow you. Every other asset this site needs — its stylesheets, scripts, icons, flags and fonts — is served from fab-results.net itself.

We use no third-party analytics, tracking, or advertising services: the analytics described above is self-hosted, and no analytics data is passed to an analytics provider.

Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at privacy@fab-results.net.