We use Google Analytics to understand how visitors use this site. Analytics cookies are only activated with your consent. For details, read our Privacy Policy.
Legal
Privacy Policy
Last updated: May 2026
1. Introduction
This Privacy Policy describes how Legends Database (legendsdatabase.com) collects, uses and protects information about visitors to this website.
This website is operated by a private individual based in Italy. For any privacy-related enquiries, please use the contact form or write to info@legendsdatabase.com.
This website complies with the EU General Data Protection Regulation (GDPR) (Regulation EU 2016/679) and the applicable Italian data protection legislation.
2. What data we collect
We collect the following categories of data:
Usage data — pages visited, time spent on pages, browser type, device type, approximate geographic location (country/city level), referring website. This data is collected only with your explicit consent via Google Analytics.
Contact data — if you use the contact form, we receive the information you voluntarily provide (name, email, message). This data is handled by Web3Forms, used solely to respond to your enquiry, and not used for newsletters, accounts or public database writes.
Saved Legends data — saved players are stored locally in your browser by default. If you choose to sign in with Google, your saved player slugs are synced to your private Supabase account so the shortlist can follow you across devices.
Account data — if you sign in with Google, Supabase Auth receives the basic account information required for authentication, such as your email address and profile identifier. We use it only to provide login and Saved Legends sync.
Community vote data - if you vote in a duel, we store the selected option and an anonymous anti-duplicate fingerprint generated from technical request data. We do not store the raw IP address in the voting table.
We do not collect sensitive personal data. We do not use advertising cookies or profiling cookies of any kind.
3. Cookies and tracking
This website uses cookies in the following way:
Consent cookie (ld_cookie_consent) — a technical cookie stored in your browser's local storage to remember your cookie preference. It does not track you and contains no personal data.
Google Analytics cookies — only activated if you click "Accept" on the cookie banner. These cookies (including _ga, _ga_*) are set by Google LLC and are used to analyse how visitors use this site. IP addresses are anonymised before processing.
If you click "Reject", no analytics cookies are set and Google Analytics is not loaded. You can change your preference at any time using the button below.
4. Google Analytics and data transfers
When you consent to analytics cookies, data about your visit is sent to Google LLC (USA). Google LLC is certified under the EU-US Data Privacy Framework, which provides an adequate level of data protection recognised by the European Commission.
Google Analytics is configured with IP anonymisation enabled. Google's privacy policy is available at policies.google.com/privacy.
We use Google Consent Mode v2, which ensures that no analytics data is collected before you provide your consent.
5. Legal basis for processing
Analytics cookies — processed on the basis of your explicit consent (Art. 6(1)(a) GDPR).
Contact form data — processed on the basis of your request to communicate with us (Art. 6(1)(b) GDPR).
Saved Legends data — stored locally on the basis of your request to remember selected players. If you sign in, cloud sync is processed on the basis of your request to use the account sync feature (Art. 6(1)(b) GDPR).
6. Data retention
Google Analytics data is retained for 14 months, after which it is automatically deleted. Contact form messages are retained only as long as necessary to handle your enquiry. Saved Legends are retained locally in your browser until you remove them, clear the shortlist, or clear your browser storage. If you sign in, synced Saved Legends remain in your private account until you remove them from the shortlist or request deletion.
7. Your rights
Under GDPR you have the following rights regarding your personal data:
Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
To exercise any of these rights, please contact us via the contact form or at info@legendsdatabase.com. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) at garanteprivacy.it.
8. Third-party services
Supabase — database, authentication and storage provider. Public archive content is loaded from Supabase; optional account login and Saved Legends cloud sync are also handled through Supabase Auth and database services.
Google OAuth — authentication provider used only when you choose to sign in with Google.
Vercel — website hosting provider. May process server logs including IP addresses for security and operational purposes.
Google Analytics — analytics service (activated only with consent, see section 3).
Web3Forms — contact form service. Processes data you voluntarily submit via the contact form.
Google Fonts — font delivery service. May process your IP address when loading fonts.
9. Children's privacy
This website is not directed at children under 16 years of age. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of the page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.
11. Contact
For any questions or requests relating to this Privacy Policy or the processing of your personal data, please use the contact form or write to info@legendsdatabase.com.
