Privacy Policy

Last updated September 1, 2026.

novastack ("we", "us") is an unofficial, fan-made deckbuilder for the Cyberpunk TCG — see the disclaimer at the bottom of every page. This policy covers novastack.gg only: what we collect, why, and who it's shared with.

Information we collect

  • Account information. When you create an account, we store your username, email address, and a securely hashed password — we never store your password itself. If you sign in with Discord instead, we store the email address and account ID Discord provides, and may display the avatar image Discord gives us.
  • Session information. To keep you signed in, we store a session token and log the IP address and browser/device string tied to each session.
  • Content you create. Decks you build (including edit history) and decks you like are stored and tied to your account.

novastack has no payment or subscription features, so we never collect payment information. We don't run analytics, advertising, or tracking scripts of any kind.

How we use it

To create and secure your account, keep you signed in, send account-related email (verifying your address, letting you reset a forgotten password), and let you build, save, and share decks. We don't sell, rent, or share your information with anyone for advertising or marketing.

Third-party services

  • Discord. If you sign in with Discord, novastack receives basic profile info from Discord under OAuth, subject to Discord's Privacy Policy.
  • Resend. Sends our verification and password-reset email, subject to Resend's Privacy Policy.
  • Cloudflare. Hosts novastack and stores its data (Workers + D1), subject to Cloudflare's Privacy Policy.
  • api.netdeck.gg. The source of the public card database shown on novastack. No account information is ever sent to or shared with it.

Cookies

novastack sets a single, strictly-necessary session cookie to keep you signed in. No advertising or tracking cookies.

Your choices

You can update your username, email, or password anytime from your account page. You can also delete your account there at any time — this permanently removes your account, decks, and likes, and can't be undone. For anything else, contact us below.

Children's privacy

novastack isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll remove it.

Changes to this policy

We may update this policy occasionally. Changes will be posted here with a new "last updated" date.

Contact

Questions about this policy or your data: admin@novastack.gg.

Unofficial fan project. Not associated with or endorsed by the publisher. Card names, art and rules text are the property of their respective owners. Card data from api.netdeck.gg. Query language: Syntax. Terms. Privacy.