About

FaB Collection is a free community project for tracking a Flesh and Blood card collection, wants and duplicates. It is run privately, has no ads and doesn't sell anything.

It is an unofficial fan project, not produced, endorsed, supported or affiliated with Legend Story Studios. Flesh and Blood, the card names, card texts and card images are trademarks and copyright of Legend Story Studios.

The card data comes from the open the-fab-cube/flesh-and-blood-cards dataset.

Imprint

Information according to § 5 DDG

Yannick Fleiter
Glücksburger Straße 168
24943 Flensburg
Germany
Email: yannick_pfeiffer@yahoo.com

Responsible for the content according to § 18 (2) MStV: Yannick Fleiter, address as above.

Privacy policy

Who is responsible

Yannick Fleiter (contact details in the imprint above) is responsible for processing personal data on this website.

What is stored, and why

Your account: username, display name, a hash of your password (never the password itself), who invited you and the invite links you created. Needed to provide the account you asked for (Art. 6 (1) (b) GDPR).
Your collection: the cards, wants, settings and decks you enter. Your duplicates and wants can be seen by anyone who has your share links, which contain your username.
Sign-in cookie: one encrypted cookie keeps you signed in for up to 30 days. It is technically necessary, so no consent is asked for (§ 25 (2) TDDDG). There are no tracking or analytics cookies and no ads.
IP addresses: to stop password guessing, failed sign-ins are counted per IP address in memory for 15 minutes (Art. 6 (1) (f) GDPR). The web server keeps no access logs.

Hosting

The site runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, under a data processing agreement (Art. 28 GDPR). Card images and fonts are served from this server. Only if an image is missing there, your browser loads it from Legend Story Studios' image storage (Amazon Web Services), which then sees your IP address.

How long

Until you delete your account (Settings → Delete account), which removes your data right away. Database backups are kept for 14 days and then deleted.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR). Write to the email address in the imprint. You can also complain to a data protection supervisory authority.