Privacy Policy

1. About this policy

TataDex ("we", "us", or "our") operates https://tatadex.org. It is an independent, unofficial Clash of Critters reference and community site. This policy describes the information handled by the current website and its supporting services.

2. Information you provide

• Account information: email address, display name, password credential stored as a password hash, and the Tatari avatar selected for your account.
• Published content: tier lists, team builds, guides, redeem-code submissions, comments, votes, reactions, and the source links or media included with that content.
• Card exchange information: server, numeric game ID, cards you mark as available, cards you want, album version, status, and update timestamps. Shared exchange pages can make selected trade information visible to other visitors.
• Messages: if you email us, we receive the message and the information you choose to include.

3. Ko-fi support payments

If you voluntarily support TataDex through Ko-fi, Ko-fi processes the payment and sends TataDex a payment notification. TataDex stores the payment type, amount, currency, transaction and message identifiers, time, supporter display name and email, and membership tier when provided. We do not receive or store your payment-card details. Shipping addresses, private messages, and the Ko-fi verification token are not retained in the webhook audit record. Ko-fi handles information under its own privacy terms.

4. Information collected automatically

• Operational data may include IP address, browser or device information, referrer, request timestamps, and security or abuse signals recorded by hosting and edge services.
• The site uses an HttpOnly session cookie for signed-in accounts and additional short-lived cookies for some protected media access flows.
• The site uses browser local storage and session storage for features such as drafts, votes, builder state, exchange preferences, language or interface state. These values are stored in your browser and are not all sent to TataDex.
• The current templates include Google Analytics 4, a self-hosted Plausible analytics instance, and Google AdSense code. TataDex does not intentionally pass account email addresses, passwords, game UIDs, trade records, or transaction fields to its analytics tags. Their cookies, identifiers, IP handling, and advertising choices are governed partly by the respective providers and by the consent configuration used when those services are enabled.

Ad safety monitoring

If third-party ads are enabled, TataDex may record a cross-site navigation from an ad page to investigate unexpected redirects. The record includes the page path, ad placement, destination domain, time, country, browser information, and whether a recent user action occurred. We do not store the destination URL path or query, or the raw IP address in this event record. A salted digest of the visitor IP helps identify independent reports. Event and switch-action records are deleted after 30 days. Administrators may use these reports to pause future ad loads and investigate with the ad provider. If an administrator alert webhook is configured, the event time, page path, placement, country, destination domain, and action are sent to that alert service.

5. How we use information

• to create and secure accounts;
• to publish, display, moderate, and attribute community content;
• to operate card exchange matching and public sharing features;
• to record and reconcile voluntary Ko-fi support payments;
• to measure site use, improve pages, prevent abuse, and protect the service;
• to respond to messages, handle privacy or copyright requests, and comply with legal obligations.

6. Sharing and service providers

We share information with the hosting, edge delivery, database, storage, payment-support, analytics, advertising, and security services needed to operate TataDex. Ko-fi processes voluntary support payments; current Google services include Google Analytics 4 and Google AdSense. These providers process information under their own policies. We do not sell your personal information. We may disclose information when required by law or when necessary to protect users, the service, or the public.

7. Advertising choices

When Google ads are served on TataDex, third parties, including Google, may place and read cookies in your browser or use web beacons, IP addresses, and other identifiers to collect information for ad delivery and measurement. Google may use advertising cookies to serve ads based on your visits to TataDex or other websites. You can manage personalized advertising through Google Ads Settings and learn more about Google data use through How Google uses data when you use our partners’ sites or apps. Blocking cookies can affect account or feature behavior. The availability and personalization of ads also depend on regional consent settings.

8. Retention and deletion

Account records are kept while the account is active or as needed for security and legal reasons. Published content and public comments can remain visible until deleted, unpublished, or removed through moderation. Payment records may be retained for reconciliation, fraud prevention, accounting, and legal obligations. Session records expire according to their cookie and server settings. Operational logs and provider analytics may have separate retention periods; we do not claim a fixed period here until each provider configuration is confirmed. You may email us to request account or personal-data deletion, subject to legal, security, accounting, and content-retention requirements.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export certain personal data, and to withdraw consent where processing relies on consent. You can update your display name, avatar, or password from your account page, and you can contact us for a request.

10. Children

TataDex is not directed at children under 13, and we do not knowingly request personal information from children under 13. Contact us if you believe a child provided personal information.

11. Changes and contact

We may update this policy when the site, services, or legal requirements change. The latest version will show its effective date. Questions and requests: contact@tatadex.org.

Monetag advertising

Eligible public pages may automatically show Monetag In-Page Push and Vignette advertising after our page, foreground-time and frequency checks. The provider may then process IP addresses, browser or device information, cookies and other advertising identifiers under its own privacy policy. In-Page Push is an on-page format; this integration does not request browser notification subscriptions.

The site stores advertising load times in your browser to limit repeated loading. These counters measure script-loading opportunities, not guaranteed impressions, and do not identify you across devices. Global Privacy Control and Do Not Track disable automatic advertising where those browser signals are available.

Clicking an ad may open a third-party advertising service or advertiser site. We do not add account emails, passwords, game UIDs or exchange records to advertising links or integration parameters. Read the Monetag Privacy Policy.