Privacy Policy
DCC Loot (dccloot.com) is an unofficial fan-maintained catalog. This page describes what the site stores when you create an account or use signed-in features. Questions go to admin@dccloot.com.
Information we store
- Account details you submit: username, email address, and a one-way password hash. We do not store the password itself.
- Inventory you choose to log: owned copies, grades, signatures, purchase notes, and wishlist items.
- A session token kept in your browser’s local storage so you stay signed in.
- If you use Google or Discord sign-in: that provider’s account id and the email they send us, linked to your DCC Loot account.
- Optional feedback, catalog suggestions, and the email address you include with them.
How it is used
We use this information to run the catalog, keep your inventory available on later visits, send a password-reset email when you ask for one, and review community submissions. We do not sell personal information.
Who else processes it
- Cloudflare hosts the site and database.
- Resend delivers password-reset email when that feature is enabled.
- Google or Discord, if you choose those sign-in buttons, authenticate you under their own policies.
How long it stays
Account and inventory data stay until an administrator deletes the account. Password-reset links expire after one hour. Signing out removes the session on the server; clearing site data in your browser removes the local session token.
Public sharing
If you turn on a collection share link, anyone with that link can see the inventory you marked as shared. The link does not include your username.
Children
The site is not directed at children under 13, and we do not knowingly collect their information.
Contact
To ask about this policy or your account, email admin@dccloot.com.