Last updated: 19 July 2026. This explains what LinguineTCG Express stores, why, and what control you have over it.
We do not collect location data, we do not use advertising or analytics trackers, and we do not buy data about you from anyone.
Your collection, scans, billing and email are private by default. Public only if you choose it: your chef profile page at https://linguinetcg.com/chef/<username>, which shows your username, motto, profile picture, the cards you feature as "finest dishes", and your card count and estimated collection value; and anything you post publicly in the Dining Hall. Your email address is never shown publicly.
We do not sell your personal data, and we do not share it for advertising.
Our servers are in the United States. If you use the service from outside the US, your data is transferred there. Where required we rely on Standard Contractual Clauses or an equivalent safeguard with our processors.
One essential cookie keeps you signed in. It is HttpOnly, SameSite=Lax, and served only over HTTPS in production. There are no advertising, profiling, or cross-site tracking cookies, which is why you are not asked to consent to any.
The page-view log described above is deleted after 90 days. Account and collection data are kept while your account exists. Scan images and their review history are kept while your account exists so you can revisit them. Billing records are kept for up to seven years where tax and accounting law requires it, even after account deletion, reduced to the minimum needed. Backups roll over on a schedule and deleted data disappears from them as they age out, normally within 30 days.
What we may keep indefinitely. Some things are kept for as long as we operate the service, because deleting them would defeat the purpose of holding them at all:
Your cards, scans and images remain yours. To operate the service we need your permission to handle them, so you grant us a worldwide, non-exclusive, royalty-free licence to store, copy, resize, re-encode, watermark, back up and display that content solely for the purpose of providing the service to you -- for example producing thumbnails, hosting listing photos you have asked us to host, and showing your public profile.
This licence ends when you delete the content or your account, except for copies in backups that age out normally. We do not sell your personal information, and we do not use your card images to advertise to you or license them to anyone else. If we ever wanted to use your content for anything beyond running the service, we would ask first.
You can do the main things yourself, immediately:
Depending on where you live you may also have the right to access a copy of your data, restrict or object to processing, withdraw consent, or complain to your data protection authority (in the UK, the ICO; in the EU, your national authority). Californian residents have the right to know, to delete, and not to be discriminated against for exercising those rights; we do not sell or share personal information as the CCPA defines it. To exercise anything not available in the app, contact us.
Passwords are stored salted and hashed. Optional two-factor authentication is available. Sessions are signed, traffic is HTTPS in production, and the app applies rate limiting and same-origin checks on state-changing requests. No system is perfectly secure; if a breach affects your data we will notify affected users, and the relevant authority where the law requires it.
LinguineTCG Express is for adults aged 18 and over. It is not directed to children, and we do not knowingly collect data from anyone under 18. Users can publish text and images to public profiles and that content is not reviewed before it appears, which is why the service is restricted to adults. If we learn an account belongs to someone under 18 we close it and delete the data.
Material changes will be announced on the site and the date above will change.
If you are a Texas resident, the Texas Data Privacy and Security Act gives you the right to confirm whether we process your personal data, to obtain a copy of it, to correct it, to delete it, and to appeal a refusal. We do not sell personal data and we do not use it for targeted advertising or profiling that produces legal or similarly significant effects. To exercise any of these rights, or to appeal a decision, contact us using the details below; if we refuse an appeal we will explain why and tell you how to complain to the Texas Attorney General.
For any privacy question or request, send us a message. We aim to respond within 30 days.