Privacy
Last updated 20 September 2026
Zorua's Den is a private board with a handful of members. There is no advertising, no analytics, no tracking pixels, no third-party scripts measuring what you do, and nothing about you is sold or shared for marketing. The pages are marked not to be indexed by search engines.
What follows is everything the site stores about a member. It is written from the database, not from a template, so you can check it.
What is stored
| What | Why |
|---|---|
| Email address, and a password hash | Signing in. The password itself is hashed by Supabase and the site never sees it. |
| Discord account id, username, email and picture, if you connect Discord | Signing in, and matching you to your card collection. |
| Display name, profile picture, and which sections you have switched off | Your profile. Your name and picture are visible to other members. |
| US state and ZIP code, if you enter them | Sweepstakes operators exclude some states, and delivery offers are local. Only stored if you fill them in. |
| Phone number, if you turn on SMS alerts | Sending those alerts. Delivered through Twilio. |
| Browser push endpoint, its keys, and your browser’s user-agent string | Sending browser notifications, if you allow them. |
| Public wallet addresses you add, and the balances read from them | Showing what those addresses hold. Read-only, public chain data. The site never asks for and cannot hold a private key or a seed phrase. |
| Which products and coins you watch or have hidden | Your board, rather than everybody’s. |
| Which sweepstakes sites you have claimed from, and when | The daily claim tracker, so it knows what is left today. |
| Numbers you type into the delivery calculator | So a saved comparison is still there next time. |
| Card game: your Discord id, coins, level, cards, bids and notifications | The game. |
| The invite code you used, with the email and name you gave at the time | Knowing who let whom in, which is the whole of the access control on an invite-only board. |
Cookies
Session cookies, set by Supabase, that keep you signed in. Nothing else. There are no advertising or analytics cookies, which is why the site has never asked you about cookies.
Who else holds it
The site runs on other people’s infrastructure, so some of it necessarily passes through them. Each is used for one thing:
- Supabase — the database, sign-in, and uploaded pictures. Everything in the table above lives here, in the United States.
- Vercel — hosting. Sees the requests, including IP addresses, in ordinary server logs.
- Discord — if you connect Discord, or play the card game. Discord tells the site your account id, username, email and picture.
- Twilio — only if you turn on SMS. Receives your phone number and the message text.
- Anthropic — writes the short market notes and checks some scraped pages. Receives news articles and page text, not your profile or your holdings.
- Alchemy — reads balances for the wallet addresses you add. Receives those addresses, which are already public.
- impact.com, CoinGecko, The Odds API, GitHub, IsThereAnyDeal — data sources. They receive requests from the server, not from your browser, and are not told who asked.
- Card image hosts — card pictures in the game are loaded by your browser directly from images.pokemontcg.io and images.scrydex.com, which means those hosts see your IP address the way any image on any page would.
Following a link out to a retailer, a sweepstakes site or a delivery app hands you to them, and from that click on, their privacy policy is the one that applies. Affiliate links carry a tracking parameter so a commission can be attributed; see the affiliate disclosure.
How long
For as long as your account exists. Price history, stock history and the card game ledger are kept as long as the site runs, because they are what the site is; the entries tied to you are removed with your account.
Getting it deleted
Ask, through an email to support@zorua.cc, or a direct message to the admin in the Zorua's Den Discord server, and the account and everything in the table above goes. Two honest caveats. Cards and coins in the game belong to a Discord account rather than to a site account, so deleting a site account unlinks them rather than destroying them, and the game record can be deleted too if you ask for that as well. And things already sent out, such as an SMS already delivered, cannot be recalled from the company that delivered it.
Security
Every table carrying member data is protected by row-level policies that scope it to the account it belongs to, which is enforced by the database rather than by the pages. That is a real protection and not a complete one: this is a hobby project, not an audited system, and you should not keep anything here you would be hurt by losing.
Age
18 and over only. Nothing here is collected from or aimed at children.
Changes
This changes when what the site stores changes. The date at the top says when it last did.
Contact
Anything about your data goes to an email to support@zorua.cc, or a direct message to the admin in the Zorua's Den Discord server.