Privacy Policy

Information You Provide Directly

When you create an account, join a team, or use our services, you may provide us with:

• Account information: Email address, password, first and last name, display name
• Profile information: Avatar/profile picture, timezone, country, bio
• Team profile: Jersey name, jersey number, t-shirt size (optional, use for team admin)
• Social links: Twitter/X, Twitch, YouTube, Instagram URLs (optional, displayed on public team pages)
• Team information: Team name, description, logo, banner image, website, Discord server, social media handles
• Match data: Match results, game records, deck information, venue details, play/draw decisions, mulligan counts, turn counts, life totals
• Deck information: Deck names, archetypes, card lists, deck notes
• Card borrowing data: Card requests, loan records, wishlists
• Tournament and event data: Event names, dates, locations, participant lists, RSVPs
• Custom form responses: Data submitted through team-created custom forms
• Communication preferences: Notification settings, email preferences

Information Collected Automatically

When you access or use Nexlog, we automatically collect certain information:

• Session information: IP address, device type (mobile/desktop/tablet), browser name and version, operating system
• Geographic location: Derived from IP address (city and country level)
• Activity data: Login times, last activity timestamps, session duration
• Security information: Two-factor authentication status, trusted devices, login attempts
• Usage analytics: Pages visited, features used, performance statistics viewed

Information from Third Parties

We may receive information about you from third-party services we integrate with:

• Stripe: Payment processing information (we do not store full credit card numbers)
• Team invitations: When you are invited to join a team, we receive your email address from the inviting team member

To Provide and Maintain Our Services

• Create and manage your account
• Process team memberships and invitations
• Record and analyze match results and game statistics
• Manage deck collections and track performance
• Facilitate card borrowing between team members
• Organize tournaments and team events
• Generate analytics and performance reports

To Communicate With You

• Send team invitations and membership notifications
• Notify you about card loan requests and returns
• Remind you about upcoming events and tournaments
• Send important service updates and security alerts
• Respond to your inquiries and support requests

For Security and Protection

• Verify your identity and prevent fraud
• Monitor for suspicious activity and unauthorized access
• Maintain session security and manage trusted devices
• Enforce our Terms of Service and protect user safety

To Improve Our Services

• Analyze usage patterns to improve user experience
• Debug and fix technical issues
• Develop new features based on user needs
• Monitor service performance and reliability

For Billing and Payments

• Process subscription payments and seat upgrades
• Generate and send invoices
• Manage subscription status and billing cycles
• Handle refunds and billing disputes

Within Your Teams

When you join a team, certain information is shared with other team members:

• Your display name, profile picture, and bio
• Your match results and performance statistics
• Your deck information (within team deck sharing features)
• Card borrowing activity (requests, loans, wants)
• Event participation and RSVPs

Public Team Pages

If your team has enabled a public team page, the following may be publicly visible:

• Team roster with member names and optional social links
• Staff members and their titles
• Team achievements and sponsors
• Team media gallery

Service Providers

We share information with trusted third-party service providers who assist us in operating our service:

Legal Requirements

We may disclose your information when required by law or in response to valid legal requests, such as:

• Court orders, subpoenas, or legal process
• Requests from law enforcement or regulatory authorities
• Protection of our legal rights or defense against legal claims
• Prevention of fraud or other illegal activities

Business Transfers

If Nexlog is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.

For EEA Residents (GDPR)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (with certain exceptions)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

For California Residents (CCPA)

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Exercising Your Rights

To exercise any of these rights, you can:

• Use the account settings in Nexlog to update or delete your information
• Contact us at george@flexslot.gg with your request
• Delete your account through the account settings page

We will respond to valid requests within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.