Your privacy matters to us. This Privacy Policy explains what information Lilypad Legends collects, how we use it, and your rights regarding that information.
| Category | What We Collect | Source |
|---|---|---|
| Account Info | Twitch user ID, display name, profile picture URL | Twitch OAuth |
| Game Data | Card collection, binders, trade history, achievements, leaderboard ranking | Your activity on our platform |
| Technical Data | IP address (for security/CSRF), session cookies | Your browser/device |
We do not collect or store credit card numbers, bank details, or billing addresses. No payment processing is integrated into this platform.
Lilypad Legends uses Twitch OAuth to authenticate users. When you log in via Twitch, we receive your Twitch user ID, display name, and profile image URL. We do not receive your email address, password, or payment methods from Twitch.
Cards earned through Twitch interactions (subscriptions, channel points, gifted subs) are credited via Twitch EventSub webhooks. No additional personal data is collected through this process beyond what is described above.
We use a single HTTP-only session cookie to keep you logged in. We do not use advertising cookies or third-party tracking pixels. The session cookie is cleared when you log out.
We do not sell your personal data. We share limited data only with:
All providers are required to handle your data securely and only as directed by us.
The following information may be visible to other users on the platform:
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance reasons (e.g. purchase records).
Depending on your location, you may have the right to:
To exercise any of these rights, contact us at the address below.
Lilypad Legends is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we learn we have collected data from a child under 13, we will delete it promptly.
We use industry-standard security practices including CSRF tokens, HTTP-only session cookies, and encrypted connections (HTTPS). However, no method of transmission over the internet is 100% secure.
We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date. Significant changes will be communicated through the platform where practicable.