Privacy Policy

The short version

Inkdex doesn't track you. The site is fully static — there's no analytics, no third-party tracking pixels, no advertising network, no user accounts, and no cookies. We don't collect personal data because we don't have anywhere to store it. The longer sections below explain the small exceptions to that (server logs, third-party CDN, outbound links) and your rights under privacy laws.

1. Information we collect directly

Inkdex does not ask for your name, email, location, age, or any other personal information. There are no forms on the site, no sign-up, no comment system, no newsletter, and no user-generated content. The pages are static HTML files served as-is.

The site does not use cookies, local storage, session storage, or any other client-side state to identify you across visits. The only client-side JavaScript on the site powers the burger menu and the on-page card filter UI — neither stores anything.

2. Information automatically collected by hosting infrastructure

When you visit any website, your browser sends standard information to the server: your IP address, the page you requested, the referrer (if any), your browser's user-agent string, and the timestamp. Our hosting provider may write this to server access logs as part of normal operation, primarily for security, abuse prevention, and uptime troubleshooting.

We do not access these logs for analytics or marketing. We do not link them to any other identifier. Hosting providers typically rotate logs out within 30 days. If you'd like to know more about our hosting provider's specific log retention practices, contact us and we'll point you to the relevant policy.

3. Third-party services

Three third-party services are involved in delivering Inkdex pages to your browser:

• Card images — Card art is hosted on Lorcast's CDN at cards.lorcast.io. When a page loads, your browser fetches images directly from there. Lorcast may log standard request information (IP, user-agent) for the same kinds of operational reasons described above. See lorcast.com for their policy.
• Card data — All card metadata (names, abilities, prices, etc.) is fetched from the Lorcast API at build time and baked into our static pages. Your browser never calls the Lorcast API directly.
• Hosting and DNS — Standard infrastructure that any website needs. They see request information but cannot identify you.

Inkdex does not use Google Analytics, Meta Pixel, Cloudflare Web Analytics, Hotjar, Plausible, or any other analytics or measurement service. There are no tag managers, no A/B testing scripts, no chat widgets, no consent management platforms.

4. Outbound links

Some card pages link to tcgplayer.com for purchasing cards. When you click an outbound link you leave Inkdex and the destination site's privacy policy applies. We don't earn affiliate commission on these links — they're a convenience for users who want to buy a card after viewing it here. We have no commercial relationship with TCGplayer, Lorcast, or any other site we link to.

5. Cookies and tracking

Inkdex does not set any cookies. If your browser shows a cookie attributed to this domain, it's not from us — please report it via the contact page. We do not use any of the following:

• First-party tracking cookies (we don't have any)
• Third-party tracking cookies (none either)
• Local storage or session storage for tracking
• Browser fingerprinting techniques
• Pixel tags or web beacons

Because we don't track, there's no cookie banner — there'd be nothing to consent to.

6. Children's privacy

Disney Lorcana is a family-friendly trading card game and we expect some visitors are under 13. Inkdex doesn't knowingly collect personal information from anyone, regardless of age. We don't have user accounts, message boards, or any feature that would let a child submit personal data. If you believe we've inadvertently received personal information about a child, contact us and we'll investigate.

7. Your rights (GDPR, CCPA, and similar laws)

If you're in the EU, UK, California, or another jurisdiction with data-protection laws, you have rights regarding personal data. Because Inkdex doesn't collect or store personal data about you, most of these rights don't have anything to apply to:

• Right to access — we have no data to share about you.
• Right to deletion — there's nothing to delete.
• Right to data portability — same.
• Right to opt out of sale of data — we don't sell data.
• Right to know what we collect — answered above (effectively nothing).

If you believe our hosting provider has retained logs that contain your IP address and you'd like them deleted, contact us and we'll relay the request — though most providers automatically purge logs within 30 days.

8. International users

Inkdex is accessible globally. Our servers and hosting infrastructure may be located outside your country of residence. By using the site you understand that any technical request information (IP address, etc.) handled by our hosting provider may be processed in the country where the servers are located.

9. Security

Static sites have a small attack surface — there's no database, no login system, no user-generated content to be exploited. The site is served over HTTPS with standard browser security. We can't promise the site will never have a vulnerability, but we can promise that even in a worst case, there's no personal data about you for an attacker to steal.

10. Changes to this policy

If we change how the site works in a way that affects this policy, we'll update the "Last updated" date at the top and revise the relevant sections. Substantive changes (adding analytics, introducing accounts, etc.) will be highlighted at the top of the page for at least 30 days. The current version is always the version live on this page.

11. Contact

For privacy questions, complaints, or requests, email hello@inkdex.gg or use the contact page. We aim to acknowledge privacy-related messages within seven days.