Privacy Policy

Who we are

Meticulous Archive is a map-first discovery site for Magic: The Gathering events and game stores, operated by Flexslot. Flexslot is the data controller for any personal data described in this policy. You can reach us at support@flexslot.gg.

What we collect and why

Most of what you see on this site is not personal data at all: the events and stores on the map are public information about businesses, aggregated from publicly available sources such as the Wizards of the Coast event locator. You can browse anonymously — that is the primary way the site is used.

• Location (with your consent). We only use the browser geolocation API after you explicitly click “use my location”. You can always type a place name instead. Your chosen location is kept in your browser’s localStorage when you are anonymous, and saved to your account when you are signed in. Legal basis: consent, which you can withdraw at any time.
• Account data (optional). If you create an account we store your email address, display name, saved location preference, locale preference, and event bookmarks. Legal basis: performance of a contract (providing the account features you signed up for).
• Product telemetry. We collect minimal first-party telemetry about feature usage, sent only to our own backend. We use no third-party analytics. Legal basis: our legitimate interest in understanding and improving the service.
• Technical logs. Like every website, our servers keep short-lived logs (such as IP addresses) for security and debugging. Legal basis: legitimate interest in keeping the service secure.

Who we share data with

We do not sell your data and we use no advertising technology. We rely on a small set of service providers (processors) to run the site:

• Vercel — hosts the website frontend.
• Neon (PostgreSQL) and Redis — our own backend’s database and cache, where account data is stored.
• Firebase / Google — handles sign-in (email/password or Google). After sign-in we issue our own session cookies.
• Photon (photon.komoot.io) — place-name search and reverse geocoding. Your search text or coordinates are sent to this provider through our server (proxied, so your IP address is not exposed to them).
• CARTO (basemaps.cartocdn.com) — serves the map tiles. Your browser requests tiles directly, so your IP address is visible to this provider, as with any image loaded from a CDN.

International transfers

Some of the providers above are based in the United States. Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses where applicable.

Cookies and local storage

We use strictly functional cookies only — no advertising or tracking cookies, and no third-party ad tech. Because none of our cookies are non-essential, no cookie consent banner is required.

• access_token — keeps you signed in (1 hour)
• refresh_token — renews your session (7 days)
• app_user — cached profile data (1 day)
• csrf_token — security protection (24 hours)
• locale — remembers your language

We also use your browser’s localStorage for your location preference (when anonymous) and for cached query data so pages load faster. This stays on your device and you can clear it through your browser at any time.

How long we keep data

Account data is kept until you delete your account. Server logs and telemetry are kept for a limited, bounded period and then deleted or anonymized.

Your rights

Under the GDPR and similar laws, you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent (for example, for geolocation) at any time without affecting prior processing. To exercise any of these rights, email support@flexslot.gg. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children

The service is not directed at children under 16, and we do not knowingly collect personal data from them.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date above.

Contact

Questions about this policy or your data? Email support@flexslot.gg.