Document

Personal Data Processing Consent

The text of the consent you give at sign-up, and of the separate consent to publish your profile.

Version of 17 September 2026 · This document is maintained in Russian. The English version is a convenience translation; in case of discrepancy the Russian text prevails.

This is the text of the consent you give when you tick the box at sign-up. It lives here in full so that it can be read before agreeing and re-read at any time afterwards.

Consent to the processing of personal data

By signing up at waifucards.app I, acting of my own free will and in my own interest, give the WaifuCards site administration (“the Operator”; contact for enquiries — admin@waifucards.app) consent to process my personal data on the terms below.

Which data

username and password as an irreversible hash;
email address, Telegram handle, city — if I provided them;
profile content: avatar, background, “about me”, links to my social pages;
records of my activity: collections and card marks, listings and prices, orders, messages and attachments, reviews, support requests;
technical data: IP address, browser and device information, a device identifier in a cookie and in local storage, country by IP address, request timestamps;
delivery details — name, phone, address or pickup point — if I place an order;
payment records: amounts, dates, purpose, status. Bank card details are neither passed to nor processed by the Operator.

For what purposes

creating and maintaining an account, signing in and account recovery;
operating the Site's features: collections, gacha, marketplace, chat, subscriptions;
placing and following up orders between users;
communicating with me: service notifications, support replies;
security: protection against password guessing, farming and second accounts;
compliance with legal requirements, including tax law.

Which operations are permitted

Collection, recording, systematisation, accumulation, storage, updating and amendment, retrieval, use, transfer (provision, access) to the parties listed in the Privacy Policy, anonymisation, blocking, deletion and destruction — by automated means and otherwise.

Term and withdrawal

The consent is effective from the day it is given until it is withdrawn. It can be withdrawn at any moment — by email to admin@waifucards.app or through the feedback form on the Site.

What happens after withdrawal. An account is technically impossible without processing data, so withdrawing consent ends access to it. An account with no deals and no payments is deleted in full; if they exist, access is closed and the profile is anonymised — records with a second party and payment records remain, because they are not mine alone and are kept as the law requires. The procedure is the same as in the Privacy Policy.

Consent to the distribution of personal data

This is a separate consent: the law (art. 10.1 of Russian Federal Law 152-FZ) distinguishes processing data from publishing it. The first is a condition for the account to exist; the second is your choice, controlled by your profile settings.

I consent to the distribution (publication in the public part of the Site, visible to any visitor including search engines) of the following data about me:

always, while the profile exists: username, avatar, frame and badges, sign-up date, country, my collections and active listings, public cardlists, reviews I left, messages in open channels;
only if I enabled it in privacy settings: email address, Telegram handle, links to my social pages, city, online status.

The purpose of distribution is to let other collectors find me, my cards and my listings. I impose no conditions or prohibitions on further transfer of this data by third parties beyond what the law provides.

Withdrawal. Any of the fields above can be hidden in privacy settings, and the profile as a whole can be made private; that is the withdrawal of consent to distribution, effective from the moment the setting changes. A demand to stop distribution may also be sent to admin@waifucards.app — it will be carried out within three business days.

What withdrawal cannot do. Data that other people or search engines have already seen and saved cannot disappear from their copies. We will remove it from our pages and ask search engines to re-crawl them, but our reach ends at other people's copies. This is true of any public service on the internet.

Passing your data to a seller when you order

Name, phone and delivery address are a separate case: they go not into public access but to the specific user you ordered cards from, and only for that shipment. That is why consent to this transfer is asked separately, right in the checkout dialog, and applies to that single order.

The Rules forbid a seller to use this data for anything other than delivering your order or to pass it on (clause 2.4). If you notice a breach, write to us: it is grounds for banning the seller.

If you are under 18

Registration is possible from the age of 14. If you are between 14 and 18, you give the consent yourself, but use paid features with your parents' knowledge. For a child under 14 only a legal representative may give consent; accounts created by children under 14 are deleted.