Privacy Policy
Last updated 16 September 2026
In short
- No analytics, no advertising, no tracking pixels, no data sales.
- We only store what is needed to sign you in and run tournaments.
- Tournament results are public by design.
- Email [email protected] and we will delete your account data.
This policy covers reduformat.net (“REDU Format”, “we”, “us”), a community site for the REDU retro Yu-Gi-Oh! format that runs on Dueling Nexus.
What we store
You can read the site without an account, and then we store nothing about you. When you sign in or enter a tournament, we keep the following:
| Data | Why |
|---|---|
| Discord user ID, username, display name and avatar URLdiscord_accounts, players | Signing you in and showing who you are in brackets and standings. |
| Dueling Nexus name, user ID, avatar URL and contributor statusplayers | Matching you to your Nexus account, your decks and your duel replays. |
| Dueling Nexus token, encryptedplayers, encrypted session cookie | Reading your deck lists from Dueling Nexus so you can register and we can check deck legality. It is stored encrypted, and a one-way hash of it identifies your player record. |
| Tournament entries: display name, deck name, deck lists, results, drops, disqualifications, placings and ranking pointsregistrations, deck_snapshots, match_reports, tournament_placings | Running the event, enforcing deck locks and publishing results and the leaderboard. |
| Duel records: room codes, replay IDs, winners and redo requestsduel_slots, duel_attempts, redo_requests, nexus_replay_cache | Verifying match results against Dueling Nexus replays. |
| No-show and contest reports you file or that are filed about youmatch_flags | Resolving disputes. |
| Payment proof link and status (paid events only)registrations | Confirming entry fees. We never see or store card or bank details. |
| Prize codes assigned to youtournament_prizes | Delivering prizes. |
| Saved tournaments and notifications, including which ones you have readsaved_tournaments, notifications, notification_reads | Your dashboard and inbox. |
| IP address, paired with a counterrate_limits | Limiting repeated sign-in attempts. Not linked to your account, and deleted within a day. |
Tournament organisers’ actions are recorded in an audit log (their Discord identity, what they changed and when). That log can mention your registration.
Legal basis, where GDPR or Brazil’s LGPD applies: running the service you asked for (sign-in, registration, results), and our legitimate interest in fair play and preventing abuse (deck checks, replay verification, rate limiting).
What we don’t collect
- Your email address, phone number, real name or postal address.
- Your Discord or Dueling Nexus password. Sign-in goes through Discord itself.
- Payment card or bank details.
- Analytics, browsing history, device fingerprints or advertising identifiers.
- Third-party trackers or marketing cookies.
How long we keep it
- Account data: until you ask us to delete it. Deletion is handled by hand for now, so send the request to [email protected] and we will confirm once it is done.
- Your stored Dueling Nexus token: removed as soon as Dueling Nexus rejects it, when you link a different account, or on request.
- Cached copies of your Dueling Nexus profile: used for about a minute and deleted by a daily cleanup once they expire.
- Sign-in rate-limit entries (IP addresses): kept for one minute, then deleted by the same daily cleanup.
- Tournament results: kept as part of the event’s permanent record. If you ask us to delete your account, we can anonymise your name in past results.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, to object to how we process it, and to complain to your data protection authority (in Brazil, the ANPD). Signing out clears your session cookie immediately.
To make a request, email [email protected] from any address and include your Discord username. We will verify that the account is yours, usually by messaging you on Discord, and reply within 30 days.
Security
Dueling Nexus tokens are encrypted in our database with AES-256-GCM. Session cookies are encrypted, HTTP-only and sent only over HTTPS, so the page’s scripts can’t read your token. Only the site can reach the database. No system is perfectly secure, so if you think your Dueling Nexus token has leaked, regenerate it on Dueling Nexus. The old one stops working at once.
Children
Signing in needs a Discord account, and Discord requires users to be at least 13 (or older where local law says so). We don’t knowingly hold data about younger children. If you believe we do, email [email protected] and we will remove it.
Legal notices
REDU Format is a fan-run community project. It is not affiliated with, endorsed or sponsored by Konami, Discord or any other company unless stated otherwise. Yu-Gi-Oh! and all related names, card names and artwork are trademarks and copyright of their respective owners, used here only to identify cards.
The site is provided “as is”. We do our best to keep results, banlists and rulings accurate, but the organisers of each event have the final say. Prizes are delivered as each event describes.
Changes and contact
If this policy changes, we will update the date at the top and announce significant changes in our Discord.
For privacy questions or requests, email [email protected]. You can also reach the organisers in the organiser Discord.