DeckMaster uses only strictly necessary storage. No consent is required for these and there is no cookie banner.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
__Host-dm_s | cookie, HttpOnly, Secure, SameSite=Lax | keeps you signed in | up to 14 days idle / 60 days |
NEXT_LOCALE | cookie | remembers your language, set only when you use the language switch | 1 year |
dm-theme | local storage | remembers light or dark | until cleared |
We do not use advertising, analytics or social-media cookies or pixels, and we do not load third-party scripts that track you. Card images are served from our own domain (assets.deckmaster.io), so your browser does not contact the card-data source. Your browser may send Global Privacy Control; we treat it as an opt-out even though we sell or share nothing.
Consent texts (UI strings, versioned with the policies)
- Guardian consent, Basic: "I am the parent or legal guardian of [child]. I have read the Children's notice. I consent to DeckMaster collecting and using [child]'s profile data (birth month, generated username, collection) so [child] can track cards. I know I can review, export or delete it at any time."
- Guardian consent, Social: "In addition, I allow [child] to request friendships, trades and shares. I will approve or decline each one. Only a generated username is shown to other users."
- Teen sign-up: "I am 13 to 17. I have asked a parent or guardian, whose email I entered, to approve my account. I accept the Terms and have read the Privacy Policy."
- Adult sign-up: "I am 18 or older. I accept the Terms and have read the Privacy Policy." (unticked checkbox, version recorded)
- Launch waitlist ("notify me"): "Email me once when DeckMaster Pro launches. No other marketing. You can unsubscribe with one click." (unticked, separate, recorded with date; adults only, never minors)
- Marketing email (if ever added): separate unticked opt-in, one-click unsubscribe.