Privacy Policy
Last updated: November 12, 2026
SWU Competitive Hub (swu-competitivehub.com) is a free community fan site about the Star Wars: Unlimited trading card game: tournament results, meta statistics, decklists, a card library and a deck builder. This policy explains what personal data the site collects, why, who it is shared with, and the choices you have. We collect as little as we can: you can read the whole site without an account.
Who we are
The site is run by Charles (Paris, France), with the help of Vincent, as a personal non-commercial project. Charles is the data controller under the EU General Data Protection Regulation (GDPR).
For any question about your data or this policy, write to contact@swu-competitivehub.com.
Visiting the site
When you browse the site without an account:
- Technical data. Like any website, our hosting provider receives your IP address, browser type and the pages you request, to deliver the pages and keep the service secure.
- Audience measurement. We use Google Analytics to count visits and see which pages are read (pages viewed, approximate location, device and browser type, referring site). It sets cookies in your browser.
- Advertising. Ads on the site are served by NitroPay (NitroAds) and its advertising partners. They may use cookies and similar technologies to show ads, limit how often you see them, measure their performance and, where you allow it, personalize them. Where the law requires it (for example in the EU and the UK), they ask for your consent first, and you can change your choice at any time.
- Emails. If you email us (tournament results, feedback), we keep your message and email address to answer you and to publish the results you sent.
Signing in with Google or Discord
An account is only needed for the deck space (building decks, saving favorites). You sign in with Google or Discord: we never see or store a password. Your account is created the first time you sign in.
We receive from the sign-in provider, and only ask for:
- Google (permissions
openid,profile,email): your Google account identifier, your name and your email address, if Google has verified it. - Discord (permissions
identify,email): your Discord user identifier, your display name or username, your profile picture identifier and your email address, if Discord has verified it.
We store with your account:
- the Google and/or Discord identifier, to recognize you when you sign in again;
- your verified email address, so that signing in with Google and Discord using the same address gives you a single account;
- your nickname, suggested from your Google or Discord name and editable on your profile page (your name itself is not kept);
- your profile picture, if you upload one or choose to use your Discord picture;
- your decks (with their change history), your favorite decks and the date of your last sign-in.
Your decks are Private by default (only you can see them). If you make a deck Link only or Public, its content, your nickname and your profile picture are visible to anyone who opens it, and Public decks are listed on the site.
How we use Google user data
We use the data received from Google only to create your account, sign you in and suggest a nickname. We do not use it for advertising, we do not sell it, and we do not transfer it to anyone, except our hosting provider, which stores it for us. We do not access your Gmail, Google Drive, contacts or any other Google service.
SWU Competitive Hub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove the site's access at any time from your Google account (or, for Discord, in User Settings › Authorized Apps). This does not delete your account on our site: see Your rights.
How we use your data
We use personal data only to:
- run your account and the deck space: sign-in, saving your decks and favorites, showing your nickname on the decks you share (performance of the service you ask for);
- measure the audience and keep the site free with advertising (our legitimate interest, or your consent where the law requires it);
- keep the site secure and working (our legitimate interest);
- answer your emails and publish the tournament results you send us.
We do not sell your data, we do not send newsletters or marketing emails, and we do not use your account data to target ads.
Who we share it with
We share data only with the services that run the site:
| Service | Role | Data |
|---|---|---|
| Railway | Hosting of the site and its database | All the data described above, stored on our behalf |
| Sign-in with Google, Google Analytics | Sign-in exchange; browsing data for analytics | |
| Discord | Sign-in with Discord | Sign-in exchange |
| NitroPay and its advertising partners | Advertising | Browsing data and identifiers collected through their cookies |
Some of these providers are located outside the European Union, notably in the United States. Transfers rely on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We may also disclose data if the law requires it. Card images and card data come from the official Star Wars: Unlimited sources; no personal data is sent to them.
Cookies and local storage
| Name | Set by | Purpose | Duration |
|---|---|---|---|
swu_decks | SWU Competitive Hub | Keeps you signed in to the deck space (only if you sign in) | 30 days |
swu_decks_oauth | SWU Competitive Hub | Secures the Google or Discord sign-in exchange | 10 minutes |
_ga, _ga_* | Google Analytics | Audience measurement | Up to 2 years |
| Various | NitroPay and its partners | Advertising, ad measurement and consent choices | Set by each partner |
The card library also remembers your display choices (density, names shown) in your browser's local storage; this never leaves your device. You can delete cookies and local storage at any time in your browser settings; signing out of the deck space removes the swu_decks cookie.
How long we keep it
- Account data (identifiers, email, nickname, picture, decks, favorites): until you delete your account. Each deck's change history only covers its last 100 days of changes.
- Emails: as long as needed to answer you and keep track of the results you sent.
- Analytics: according to the retention settings of Google Analytics (14 months at most).
- Cookies: see the durations above.
Your rights and deleting your account
Delete your account yourself: on your profile page, open Delete account and confirm. Your account, decks, favorites and profile picture are deleted immediately and for good. Decks shared by link or publicly disappear from the site.
Under the GDPR you also have the right to access your data, correct it, receive a copy of it, object to its processing or ask us to restrict it. Your nickname and picture can be changed on your profile page; for anything else, write to contact@swu-competitivehub.com. We answer within one month.
If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country.
Security
The site is served over HTTPS only. Sign-in cookies are signed, inaccessible to page scripts and sent over secure connections. We never handle passwords for the deck space, and access to the site administration is restricted to its administrators.
Children
The site is not directed at children under 13, and children under 13 may not create an account. If you are under the age at which your country lets you consent to online services on your own (15 in France), ask a parent before creating an account. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We will update this page when the site starts collecting new data or changes service providers, and change the date at the top. If a change affects how we use your account data, we will tell you on the site before it applies.