Privacy Policy
Edison Online is a small, non-commercial fan project for playing Yu-Gi-Oh! Edison-format duels. This page explains what happens to your data. It is deliberately short, because the site collects very little.
What is stored
| What | Why |
|---|---|
| Username | your identity on the site, and the name your opponents see |
| Email address (optional) | only so the operator can reach you; it is not verified and not used for marketing |
| Password | stored only as a bcrypt hash — the original cannot be read back, by us or anyone |
| Profile icon | which card stands for you in a game |
| Decks | the decklists you save, their names and descriptions |
| Match history | who you played, which decks, the result and when |
| Replays | a transcript of each game you play, so it can be replayed or reviewed |
| Friends and invites | who asked to be your friend, and who invited you to a room |
| Invite keys | which account redeemed which alpha access key, to keep the alpha private |
| Play statistics | how many times you have played each card, and how — see below |
| When you accepted these terms | the date and time you confirmed your age and accepted the terms |
A replay contains both players' moves and hands. That is why deleting your account also removes games you played from your opponents' history — see “Your rights” below.
Play statistics and card rewards
The site counts how often you play each card — a summon, a Set, or the activation of a monster's, Spell's or Trap's effect — so it can show you how your decks actually play and unlock visual upgrades for the cards you use most: a foil sheen at 50 plays, a gold frame at 100 and a prismatic frame at 250. These are counts of card plays, not a log of your games: one player's figures are an aggregate per card, and no individual move, hand or game can be reconstructed from them.
Your play statistics are yours, and they are kept private within the PlayEdison service. They are used to render your own card rewards and statistics pages, and — because a reward is only meaningful if the other player can see it — the card cosmetics a player has earned are visible to their opponent in a game they are playing together. Aggregate community figures are shown only for cards that enough different players have played, so no individual's deck can be inferred from them. They are never sold, rented or shared with any third party, never used for advertising, profiling or anything outside the game, and they are deleted with your account.
What is not stored
- No cookies. Your signed-in session is a token kept in your browser's local storage. It is not sent anywhere except this site.
- No advertising, no tracking, no profiling. There is no advertising code, no third-party script, no fingerprinting and no cross-site tracking of any kind. The app serves nothing from other domains. Play statistics are described above and exist only to run the game itself.
- No IP addresses in the database. Requests are rate limited in memory using an IP address, and that is discarded when the process restarts. IP addresses do appear in the web server's access logs, which are kept briefly for security and then expire.
Who else sees it
Nothing here is sold, rented, shared or traded with anyone, and there is no advertising or profiling of any kind. The service is operated using infrastructure providers that process the data on the operator's behalf solely to run it — currently Amazon Web Services (a global content delivery network in front of the application) and a managed PostgreSQL host for the play statistics above. Those providers receive only what they need to serve the site, and the play statistics they hold are pseudonymous: a numeric account id, a card id and play counts, with no name, email address, decklist or transcript.
Other players see your username, your profile icon, your public decks, the card rewards you have earned on the cards you play, the games you play against them and any replay you share. Anything you mark private stays private.
How long it is kept
Until you delete your account, which you can do yourself at any time and which takes effect immediately. The operator may also delete very old replays to keep the site small. Backups are kept for a short period and roll off on their own.
Your rights
- Get a copy of your data — the “Download my data” button on your profile page produces a JSON file with your account, decks, match history and replay list.
- Delete your account — the “Delete my account” button on the same page erases your account, decks, match history, replays, friend requests and invites, and closes any game you are in. Because a replay records both players, this also removes those games from your opponents' history.
- Correct something — you can change your password and your profile icon yourself. For anything else, contact the operator.
- Complain — you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
Age
You must be 13 or older to use this site. Sign-up asks you to confirm this. The site is not directed at children, it does not knowingly keep data about anyone under 13, and if the operator learns that an account belongs to someone under 13 it will be deleted.
Changes
If this policy changes in a way that matters, the change will be announced on the site before it takes effect.
Contact
For anything to do with your data — a question, a request, a correction, or a
complaint — write to
privacy@playedison.com. That address
reaches the operator, and mail to any address at
playedison.com arrives in the same place.
This draft has not been reviewed by a lawyer. Do not treat it as final.
← Back to Edison Online