OriginsMeta does not use advertising cookies. The site is hosted on Vercel, which keeps standard server logs (IP address, user agent, requested page) for security and performance, and uses Vercel Web Analytics, a cookieless, aggregated measurement that does not identify you. If you write to us by email, we keep your message only to answer you. Data controller: OriginsMeta, staff@originsmeta.com. You can ask at any time what we hold about you and have it deleted.
If you create an account (Discord sign-in or email link), we store on Supabase (servers in Ireland, EU) your email, username, avatar and Discord ID, plus the decks you publish and the ratings you give. Decks and ratings are public under your username; your email is not. A session cookie keeps you signed in. Write to staff@originsmeta.com to delete your account and everything attached to it.
Cookies: the site sets only technical cookies, and only after you sign in (the Supabase session, names starting with sb-, kept for the duration of the session and refreshed while you use the site). Your cookie choice is saved in your browser's local storage. When you create an account, your browser also saves the time it was created in the same local storage, only so that our statistics do not count it twice; it is never sent anywhere. Vercel Web Analytics measures visits and a few actions on the site (for example copying a deck code, clicking through to Steam or searching the cards, including the search text) without cookies and without identifying you. YouTube and Twitch videos on deck pages and in guides, and Twitch live streams on the live streams page, load only when you press play: until then the page contacts neither service (details below, “YouTube and Twitch videos”). If you choose “Accept all”, Google Analytics 4 (Google Ireland Ltd) also runs: it sets cookies starting with _ga for up to 2 years to count visits, pages and the same actions, with IP anonymization and no advertising features; Google may process this data in the United States under its standard contractual clauses. With “Only necessary” nothing from Google loads; if you withdraw your consent, Google Analytics stops at once and the _ga cookies are deleted. No advertising or profiling cookies, no other third-party trackers unless you start a video. You can change your choice at any time from “Cookie preferences” in the footer.
YouTube and Twitch videos: on deck pages, in guides and in the video carousel on the home page, and for Twitch live streams on the live streams page, a video loads only when you press its play button. The one exception is the stream that takes the place of the slider on the home page when the official Origins TCG channel (or, on Italian pages, the Crimson Cup cast) is live: its Twitch player loads by itself, muted, as soon as the page shows it. Until then the page sends no request to YouTube or Twitch: the preview is an image served by OriginsMeta (for a YouTube video, its thumbnail, which our server fetches from YouTube without sending anything about you). By pressing play you choose to load that service's player, which from then on receives your IP address and may set cookies or use your browser's storage under its own rules: YouTube (Google Ireland Ltd), in the privacy-enhanced mode of youtube-nocookie.com, or Twitch (Twitch Interactive, Inc., United States), which has no cookie-free mode. It applies only to the video you start and only on that page: reload it and the preview is back. When the player would be too small, a Twitch video opens on Twitch instead. The links in a deck's Resources box are chosen by whoever published the deck and lead to outside sites with their own privacy rules.
Feedback: if you use the “Feedback” box, we receive your message, your name or nickname and your email address if you choose to add them (both optional), the page you were on and the site language. They reach a private channel on the staff's Discord server through a webhook, so they are processed by Discord Inc. (United States), and only the OriginsMeta staff can read them. We use them to fix problems and improve the site during its first weeks online, the only period in which the box stays active; the name tells us who wrote to us and is never published without asking you first; the email is used only to reply to you, never for newsletters or anything else. Your IP address is used only to limit spam: it stays briefly in the server's memory and is never sent with the message. The anti-bot check, when active, is provided by Cloudflare (Turnstile). To have a message deleted, write to staff@originsmeta.com. If you're signed in when you send feedback, it is linked to your account: the staff sees your username (in the Discord channel too) and we also save it in your inbox for as long as your account exists (see Messages).
Submitted guides: if you use the “Send us your guide” form, we receive the guide's title and text, the link and deck code if you add them, the byline you choose, your email address and Discord username if you decide to leave them (optional) and the site language. They reach the same private channel on the staff's Discord server that receives feedback, through a webhook, so they are processed by Discord Inc. (United States), and only the OriginsMeta staff can read them. We use them to review the guide, to write to you if needed and, with your permission, to publish it under your byline; your email and Discord username are never published or used for anything else. Until you send it, the draft stays only in your browser's local storage (without email or Discord username). Your IP address is used only to limit spam: it stays briefly in the server's memory and is never sent with the guide. The anti-bot check, when active, is provided by Cloudflare (Turnstile). To withdraw a guide or have your data deleted, write to staff@originsmeta.com.
Public profile. The bio, channels and languages you write under "Your public profile" (My profile › Edit my public page) are public: they appear on your /u page and, if you have the Creator, Author, Pro or Staff role, on the Creators and authors page and next to your name on your decks. You can change or delete them at any time. For people with one of these roles and a Twitch channel, our server asks Twitch whether the channel is live on Origins TCG (public channel data) at most once every 90 seconds, when someone opens a page that shows the badge; your browser does not contact Twitch until you open the link.
Name and username. You choose your display name and your username under "Name and username" (My profile › Edit my public page): they are public, on your page and next to what you publish. When you change your username we keep the old one linked to your account, so that old links lead to your new page and nobody else takes it; it is deleted with your account. We also store the date of the last change, for the limit of one new username every 30 days.
Photos and showcase. If you upload a profile photo (any member) or a cover (Creator, Author, Pro and Staff roles), your browser crops and shrinks it and re-encodes it, which removes data such as the location, and then stores it in our Supabase storage, in a folder of your account: it is public and appears on your /u page, next to your name on your decks and tournaments and in the site menu. When you replace or remove it the site deletes the old file; copies already downloaded may stay in caches for up to an hour. The same goes for the cover you upload for a community guide (roles that publish guides) and for the Legendary artwork of one of your decks (Creator and Staff): they are public on the guide and on the deck, in the lists and when the link is shared, and the site deletes the file when you replace it or delete the guide or the deck. The staff can remove a photo, cover, artwork or tagline that breaks the site rules. The showcase settings (cover, accent color, tagline, favorite Legendary, featured deck and video, stream schedule with your time zone, which is saved only together with a schedule) are public on your /u page; each visitor sees the schedule in their own time zone, computed in their browser. You can change or remove everything from My profile › Edit my public page at any time, even if you no longer have the role.
Deck stats: on a community deck page, and when you copy a game code from the deck list, the site counts, for each deck and each day, visits, game code copies, clicks on links and video plays, and shows these totals only to whoever published the deck and to the OriginsMeta staff (apart from the overall totals of all the published decks together that a showcase profile chooses to show on its public page: see “Achievements and public numbers on profiles”). Only the daily totals are stored, on Supabase (Ireland, EU): no IP address, no account and no identifier. The request goes through Supabase's servers, which, like Vercel, keep the usual technical logs (IP address included) for a short time, never linked to the totals. So that the same visit isn't counted twice, the browser notes which decks it has already counted in the tab's session storage, which is cleared when you close the tab and is never sent. Bots, staff browsers and people viewing their own decks while signed in are not counted.
Achievements and public numbers on profiles: the achievements on every public profile are worked out from data that is already public on the site (sign-up date, published decks and their votes, public tier lists, public tournaments played to the final). People with the Creator, Author, Pro or Staff role can also choose, from their account page, to show on their public page the totals of all their published decks together (decks, visits, game code copies, votes received; with a single deck they match that deck's numbers). The tables per day and per deck stay private, and the numbers can be hidden again at any time.
Messages: if you have an account, your profile has an inbox to write to the OriginsMeta staff and read our replies. We store your conversations on Supabase (servers in Ireland, EU), with the text, the date and who wrote each message; only you and the staff can read them, and they are never published. If you send feedback from the “Feedback” box while signed in, we also save it here as a conversation, so we can reply to you on the site. When you write to us, a notice with your username, the subject and the start of the message reaches a private channel of the staff's Discord server (Discord Inc., United States). We don't send you emails or notifications outside the site: new replies only show up in your profile. Messages are kept as long as your account exists and are deleted with it; to have a conversation deleted earlier, write to staff@originsmeta.com.
Follow and notifications: with an account you can follow the profiles with the role Creator, Author, Pro or Staff. We store on Supabase (servers in Ireland, EU) who you follow and since when, and the notifications we create for you (a new deck, a new guide or a Twitch stream of a profile you follow), with their date and whether you've read them. Only you can see who you follow and your notifications: a profile only shows how many followers it has, never who they are. To know who is live, every 10 minutes our server asks Twitch (Twitch Interactive Inc., United States) whether the Twitch channels listed in those profiles are streaming: nothing about you is sent to Twitch. Notifications stay only on the site (we don't send emails) and are kept for 90 days. To avoid duplicate or too frequent notifications, we keep for 180 days a log of every notification sent: which profile caused it (the deck, guide or stream), when and to how many people, without the names of who received it. You can unfollow at any time from your profile, and everything is deleted with your account.
Comics. Creators and Staff can publish comics among the news. The pages and the cover are stored like the other images you upload on the site (see above: your browser shrinks and re-encodes them, removing data such as the location); the title, the presentation and the texts of the pages are public on the comic's page, with your name and a link to your profile, and the site translates the title, the presentation and the texts into the other languages of the site with the same service used for the guides. When a comic comes out, whoever follows you receives a notice and our Discord announces it. You can edit a comic, move it back to drafts or delete it at any time: deleting it deletes its images too. The staff can hide a comic that breaks the site rules.
Community guides: the site's Authors, Creators, Pro players and Staff can publish guides under their username. Title, text, language, category, chosen cards, videos and links of a published guide are public; drafts and guides hidden by the staff are visible only to the author and the staff. They are stored on Supabase (servers in Ireland, EU) with the account. After publication the text of the guide (not the title) is sent to Anthropic's API (United States) to be translated into the site's other two languages, and nothing about the author is sent with it; a new guide is also announced, with its title, summary and author name, on the OriginsMeta Discord server (Discord Inc., United States). If you report a guide we keep who reported it, the reason and when, read only by the staff; the first report of a guide in a day also reaches the staff's private Discord channel, with the reason and your username. Your guides and the reports you made are deleted with your account; to delete a guide sooner use "Delete" or write to staff@originsmeta.com.
OriginsMeta Tracker: the Windows app only reads the files Origins TCG saves on your PC (profile stats, deck inventory and, when the game saves one, the replay of the last match) and never touches the game. Screen scanner: while the game is open, the app captures only the game's window, never other windows, and recognizes on your PC the cards on the board, the Legendaries on the opening screen and the mana; the images stay in memory on your PC and are never sent. Of what it sees, only the identifiers of the cards reach the site (the cards played by you and by your opponent, the opponent's Legendary), never names of players. On the opening screen it also reads the opponent's name, only on your PC and only to recognize matches against bots, which are not recorded: the name is never saved and never leaves your PCYou can switch the scanner off in the app. To show the cards, it loads their images from originsmeta.com. The app works only linked to an OriginsMeta account (with a one-time code created in /account/tracker): without the link it doesn't work. It checks the link when it starts and every 4 hours, sending only its token, no other data; if the site doesn't answer, it keeps working for 7 days from the last successful check. The matches it records are also kept on your PC, in the app's data folder. For each match it sends the site: a fingerprint of the match computed on the PC (never the game's identifier), end time, result, queue (ranked or normal), your deck (name, cards, game code), your rank, the rounds and the cards played round by round; of the opponent, only their Legendary and the cards they played. It never sends names or identifiers of players or matches, the opponent's rank, their full deck, or whether the opponent is a bot or a person. The site adds the patch in force and the deck's archetype. Matches are stored on Supabase (Ireland, EU) and only you can see them, in /account/tracker, together with the name of your linked PCs and the time of their last sync; for the link, the database keeps only a fingerprint of the token, which on the PC is encrypted with Windows data protection. The app's requests go through the servers of the site (Vercel) and of Supabase, which keep the usual technical logs (IP address included) for a short time. Anonymous stats: the matches of everyone who links the app always go into the site's stats (win rates of Legendaries, decks, archetypes and cards, Legendary matchups), which show only aggregate numbers per patch: never single matches or who played them. Linking the app, which is required to use it, means accepting this; if you don't want it, don't use the app. You can unlink a PC and delete all your matches from /account/tracker at any time: they also leave the stats at once, because they are computed on the fly. Download: when you click the download button on /tracker, the site records the click with your account (if you are signed in), the language of the page and the time, to know how many people download the app; never the IP address. If you delete your account the click stays without a name. Twitch extension (optional): if you link a Twitch channel in /account/tracker, during the match the app also sends the site what the Deck tracker shows (your deck with the copies drawn and played, the round, the opponent's Legendary and the cards they revealed, including spells); the site keeps only the latest version and passes it, through Twitch, to the viewers of your channel. Of the channel, the site keeps only its identifier. Never names, ranks or identifiers of players or matches. You can unlink the channel in /account/tracker. Deleting your account deletes everything else.
Interest in OriginsMeta Tracker (/analytics): when you press “Yes, I want it”, the site saves a random number that your browser keeps so you aren't counted twice, the page language, which of the two buttons you pressed, the date and, if you're signed in, your account (so you're counted only once from other devices too). No email and no IP address. We use it only to know how many people want the tool and to show the total to Koin Games. It is stored on Supabase (Ireland, EU); to have it deleted, write to staff@originsmeta.com; if you delete your account, the row linked to it is deleted too.
Draft against a friend (/draft): to run the room the site saves the room code, the format, the two accounts that play, the cards each one picks and the final decks. Only the two players see their room, and each one sees only what the game rules show (never the opponent's hidden cards). The room is deleted automatically: 2 hours after creation if nobody joins, 6 hours after the last move if the draft stops, 24 hours after the end. It is stored on Supabase (Ireland, EU); if you delete your account, your rooms are deleted too. The draft against the Brain stays in your browser and sends nothing to the site.
Card votes (from 6 October 2026): signed-in members can rate each card from 1 to 10 on its page or on /tier-list/votes. The vote is stored with your account (card, score, date) so you can change it; the pages show only averages, counts and the distribution of scores, never who voted what. No IP address is stored. Your votes are deleted with your account; to have them removed earlier, write to staff@originsmeta.com.
Comments on decks (from 22/10/2026): when you comment on a deck or reply to a comment, we store the text, your account and the time. Comments are public on the deck's page together with your name and photo; you can edit or delete yours at any time, the deck's publisher can delete those under their deck and the staff can hide or delete any of them. Whoever published the deck and whoever wrote the comment you reply to get a notification on the site. If you report a comment we store the report with your account and the reason, and the staff gets a message on its private Discord channel with your username. We keep a record of when you comment (without the text) for 2 days, to limit spam. Everything is deleted with your account.