Informativa sulla privacy

What this page covers

The Winning XI is a fan project run by one person. This page is about what happens to a message you send through the feedback form. Simply reading the site does not create anything tied to you.

What is stored

• Your message and the category you picked
• If you reported from a card view: the card id, the data snapshot your browser had loaded, and the figure you named
• The path of the page you sent it from, and the language you were reading in
• A way to reach you only if you filled one in — an email address or a LINE ID, never both
• The time you sent it, and the build of the code that took it
• A one-way hash of your IP address, keyed with a secret that rotates daily, used only to rate-limit submissions. The address itself is not stored.

No name, no phone number, no game account, and no login is asked for.

What it is used for

Checking and fixing what you reported, improving the card data and the site, and keeping spam out. Nothing is sold, shared or used for advertising. A contact detail you provide is used only if you ticked the consent box, and only to reply about that report. You can withdraw that consent at any time.

Who can read it

The site's single maintainer. A notification about a new report goes to a private Telegram channel without your contact detail — that stays in the database and is read at the moment a reply is actually written.

Where it is kept

In a Cloudflare D1 database. Cloudflare acts as our processor and may process the data outside Thailand. The form uses Cloudflare Turnstile to screen out bots, which inspects your browser environment at the moment you submit.

How long it is kept

• Spam — deleted within 30 days
• The IP hash — cleared when the report is closed
• Closed reports, including any contact detail — deleted within 90 days of closing
• What is kept afterwards is the anonymised technical finding: which figure on which card needed correcting

Your rights

You may ask to see, correct or delete what you sent, or withdraw your consent. Send the form again quoting the reference you were given, which for an anonymous report is the only thing that points back to your message. No identity documents are asked for.