Sign-in, security and the language or theme you pick use cookies the site needs. With your permission we also count page views (without cookies) to see what to improve, and show YouTube videos, which let Google set cookies. You can change this any time under “Cookie settings”. Privacy policy
Privacy policy
Last updated 29 September 2026
This policy explains what personal data VanguardDeeDeeAtlas collects, why, who helps process it, how long it is kept and the rights you have under the Personal Data Protection Act B.E. 2562 (PDPA).
1. Who is responsible
VanguardDeeDeeAtlas is a personal, non-profit fan project run by an individual developer (the data controller). It is not affiliated with Bushiroad. Requests about your data go through the feedback page; signed-in requests are answered at your account email.
2. What is collected
Account: email address, display name, password (stored in a protected form that nobody can read back), and whether the email is confirmed.
Sign-in with Google or Discord: that provider’s account id, and the name, email and picture it shares.
Decks: deck lists, notes, drafts, saved versions, sharing settings and the people you share with.
Community: comments you post, decks you like, and reports you send about content.
Feedback: your message, pictures you attach, the page it was sent from and, if you give one, a reply address.
Sessions and security: sign-in time, IP address and browser type while a session lasts; short-lived counters of requests per account or IP address to stop abuse; an automated check that you are not a bot on some forms.
Deck views: for visitors who are not signed in, an anonymous daily code derived from the connection, so a view is counted once a day. The IP address itself is not stored.
Moderation: if an account is suspended, the date and the reason.
3. Why it is used, and the legal basis
To provide the service you signed up for (PDPA s.24(3), contract): your account, decks, profile, sharing, comments and emails such as sign-in codes.
To keep the site safe and fair (s.24(5), legitimate interest): security checks, rate limits, spam and profanity filtering, handling reports and suspending accounts that break the Terms.
To improve the site, only with your consent (s.19): anonymous usage statistics, and YouTube videos on the home page.
There is no advertising, no sale of data and no tracking across other websites.
4. Cookies and browser storage
You choose in the cookie banner, and can change your choice at any time with “Cookie settings” at the bottom of every page.
Necessary (always on): the sign-in session; the language and theme you pick; your cookie choice and its date (kept 12 months); and the bot check on forms that send email.
Preferences kept only in your browser: background music on/off, zoom level, and which panels you left open.
Usage statistics (optional): anonymous page-view counts, without cookies and without building a profile of you. Loaded only after you allow it.
Videos (optional): YouTube videos load only after you allow them; YouTube (Google) may then set its own cookies under its own policy.
5. Who processes it for us
Carefully chosen service providers process data on the site’s behalf, under their own security and data protection terms. Some are located outside Thailand; transfers rely on the providers’ contractual safeguards (PDPA s.28–29). The categories are:
Hosting and delivery of the website, including the optional usage statistics.
Database and file storage (decks, accounts, card images and uploaded pictures).
Email delivery (sign-in codes and password-reset emails).
Network protection and the bot check.
Google or Discord, only if you choose to sign in with them.
A breached-password check: when you set a password, only a small anonymous fragment is used to check it against known leaks. Your password never leaves the site.
6. What other people can see
Your display name, picture, banner, bio, links, favourite nation and cards, public decks and comments are visible to everyone. Decks shared by link or with named people are visible to them. Your email address is never shown to other players. Moderators can see reports and hidden content.
7. How long it is kept
Account, profile, decks and comments: while the account exists, or until you delete them.
Sessions: until you sign out, or 7 days without use.
Rate-limit counters: at most a day. Daily view codes: kept only as counts.
Reports and moderation decisions: kept as a record while the content or account exists; a report stays without your name if you delete your account.
Feedback: kept to plan the site; it stays without your name if you delete your account.
8. Your rights
Under the PDPA you may ask to access and get a copy of your data, move it elsewhere, correct it, delete it, restrict or object to its use, and withdraw consent at any time without affecting earlier processing.
Settings → Account: download all your data (JSON), change your email or password, or delete your account and everything in it.
Settings → Profile: correct or remove profile information.
Cookie settings: withdraw consent for statistics or videos.
Anything else: write through the feedback page. Requests are answered within 30 days.
If you think your data is mishandled, you may complain to the Office of the Personal Data Protection Committee (PDPC) of Thailand.
9. How it is protected
Connections are encrypted, passwords are stored so that nobody can read them, access is checked for every action, and uploaded pictures are cleaned before they are stored. More on the Technical security & operations page. If a breach puts your data at risk, the PDPC will be notified within 72 hours where the law requires it, and affected users will be told.
10. Changes to this policy
This policy changes when the site does. The date at the top shows the current version; important changes are announced on the site.
