Mediatok
DiscoverTrendingPopularCardsMarketSocial
Log inSign up

Legal

Privacy Policy

Last updated: 1 de julio de 2026

This is informational and not a substitute for professional legal advice. The Spanish version is the authoritative one.

This policy explains what personal data we process on Mediatok, for what purpose and what rights you have. It complies with Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: Mediatok (personal project, no commercial activity).
  • Contact: houdr91@gmail.com

Mediatok is a personal, non-commercial project. The contact channel with the data controller, for all purposes, is the email address above.

2. What data we process

  • Account data: your email address and password (the latter is managed and encrypted by our authentication provider; we never see it).
  • Profile data: username, display name and bio. They are public within Mediatok.
  • Images you upload: your avatar and, if you create communities, their avatar and banner. They are public within Mediatok. If an image shows a person's face, it may constitute personal data; only upload images you hold rights to.
  • Activity: ratings, reviews, watch/read/play status, lists and who you follow. It's public, in the style of a media diary.
  • Game data: the cards you own, your Media Tokens balance, your daily pulls, purchases in the card shop, profile cosmetics, and your Market positions and trades. Your card album and the cards you feature on your profile are public; your token balance, your Market portfolio and your purchase history are private and only visible to you.
  • Technical data: IP address, browser type and server logs, processed for security and diagnostics.
  • Anonymous audience measurement: we count visits, page views, country of origin, device type and technical errors in an aggregated and anonymous way (no cookies, no storing your IP and no identifying you; the visitor count uses a technical identifier that regenerates daily and doesn't allow tracking you). Basis: legitimate interest in improving the service. Retention: 90 days maximum.

We don't process special categories of data or ask for more information than necessary.

3. Purposes and legal basis

  • Providing the service (creating your account, showing your profile and activity, social features) — basis: performance of a contract (GDPR art. 6.1.b).
  • Security and abuse prevention (rate limiting, logs) — basis: legitimate interest (art. 6.1.f).
  • Cookies and, in the future, advertising/analytics — basis: your consent (art. 6.1.a), which you can withdraw at any time. See the Cookie Policy.

4. Providers and third parties

  • Supabase — authentication, database and storing the images you upload (Supabase Storage: profile avatar and community avatar/banner). It acts as a data processor. The sole purpose of storing these images is showing them within the service (your profile, communities). They're kept for as long as you keep the image or your account; when replaced, the previous one is overwritten, and when deleted or the account is removed they're deleted from storage (see "Retention"). Depending on the Supabase project's region, data may be hosted inside or outside the EEA, in the latter case with appropriate safeguards (standard contractual clauses).
  • Cloudflare — application hosting and content delivery (global network; may process technical data such as IP address to serve and protect the site).
  • TMDB (The Movie Database) — we query its API to show the show catalog (titles, images, synopses). We don't send your personal data to TMDB; we only store each show's identifier. Mediatok uses the TMDB API but isn't endorsed or certified by TMDB.
  • MangaBaka — we query its API to show manga and light novel catalog data (titles, images, synopses). We don't send your personal data to MangaBaka; we only store each title's identifier.
  • RAWG — we query its API to show video game catalog data (titles, images, descriptions). We don't send your personal data to RAWG; we only store each game's identifier.
  • Hardcover — we query its API to show book catalog data (titles, covers, authors, synopses). We don't send your personal data to Hardcover; we only store each book's identifier.
  • Google AdSense — shows ads on Mediatok. It only loads if you accept advertising cookies in the Cookie Policy; it may use cookies and your IP address to personalise ads and measure their performance. Google acts as an independent data controller for this processing; see Google's Privacy Policy for details.

We don't sell your personal data.

5. Retention

We keep your data while your account is active. If you delete your account, we erase your profile, your activity (ratings, reviews, statuses, lists and follows) and the images you've uploaded (avatar and those of your communities). If you only change an image, the previous one is overwritten and not kept. Some technical logs may be kept for a limited time for security or legal obligations.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to houdr91@gmail.com (more channels in Contact and content notices). You can also file a complaint with the Spanish Data Protection Agency (aepd.es) if you feel we haven't addressed your request.

You can do much of this yourself, right away:

  • Rectify your profile and change or remove your avatar from Settings.
  • Edit or delete your reviews, lists, ratings and community messages.
  • Delete your account from Settings → Danger zone: your profile, activity, images and any communities you created are removed immediately.

7. Minors

Mediatok isn't aimed at people under 14. If you're younger than that, please don't create an account or give us any data.

8. Security

We apply reasonable technical measures: encryption in transit (HTTPS), row-level access control in the database (each user can only modify their own data) and rate limiting.

9. Changes to this policy

We may update this policy. We'll publish the current version on this page with its last-updated date.