Privacy Policy

1. The short version

bonkurei is a public, read-only website. There is nothing to register for, we set no cookies, and we run no analytics. We do not sell personal data — we do not hold the kind of data anyone would want to buy.

Three things are recorded when you visit: our hosting providers keep ordinary server request logs, our error reporter keeps a record of pages that break, and your own browser remembers whether you chose the light or the dark theme. The rest of this policy explains each of those in plain terms, and nothing else is happening behind them.

2. Who we are and what this policy covers

bonkurei (“bonkurei”, “we”, “us”, “our”) operates the website at bonkurei.com, including the One Piece TCG statistics pages at /optcg. This policy explains what happens to information when you use that website, and it covers bonkurei.com only.

bonkurei is an unofficial fan project. It is operated from the United States, and the providers described below process information in the United States. If you use the site from another country, your request travels to servers in the United States, where data-protection law may differ from the law where you live.

You can reach us at hello@bonkurei.com. That address is the right place for privacy questions, data questions, and takedown requests.

3. No accounts

There are no accounts on bonkurei. You cannot register, there is no profile to fill in, and no page on the site asks for your name, email address, phone number, or payment details. We run no mailing list, and we have no way to recognize a returning visitor.

Because of that, we hold no personal profile about you at all. The only trace of your visit is the technical record described under “What our servers record” below.

If you write to us by email we will of course have your address and whatever you wrote. We use it to answer you, we do not add it to any list, and we keep it only as long as the conversation is useful.

4. No cookies, no analytics

We set no cookies. bonkurei uses no analytics product, no advertising or ad-measurement script, no tag manager, no session recording or heatmaps, and no social media plugins. There is no cross-site tracking and no device fingerprinting. Nothing about your visit is used to profile you or to target advertising, and we carry no advertising.

If that ever changes, this page changes first.

5. What our servers record

The website is hosted on Vercel, and the statistics it displays come from our own API hosted on Fly.io. Like every web host, both keep ordinary request logs. A log line records the IP address the request came from, the browser’s user-agent string, the URL requested, the time, and the response status. Nothing you typed is in there, because the site gives you nothing to type into.

Vercel and Fly.io hold those logs on our behalf for the period each provider retains operational logs under its own policy, after which they are discarded. We use them only to keep the site running, to investigate errors and abuse, and to keep the site secure. We do not use them to build profiles of visitors, we do not combine them with any other source, and we do not publish or share them.

The site is served over HTTPS. No system is perfectly secure, but the strongest protection here is structural rather than technical: there is no credential store and no customer database to breach, because there are no accounts.

6. Error reports

Errors on this site may be reported to Sentry (page URL, browser type, IP address) to help us fix them.

Sentry is an error-monitoring service acting as our processor. A report holds the technical details of a failure — the page that failed, the kind of browser it failed in, the IP address of the request, and the error itself — so that we can see that something broke and why. It contains nothing you typed, it is not used to track you between visits, and it exists for one purpose: fixing the bug.

7. What your browser stores

One thing, and only one thing: your theme preference. When you switch the site between light and dark, the choice is stored in your browser’s local storage under the key bonkurei-theme, so the next page you open does not flash the wrong theme at you. It holds a single word — “light” or “dark” — and until you make a choice it is not there at all, which is how the site knows to follow your system setting.

That value stays in your browser. It is never sent to us, it is not a cookie, it is not readable by any other site, and it cannot identify you. Clearing site data for bonkurei.com removes it and the site returns to following your system setting.

8. Third-party content and links

The simulator statistics, decklists, and prices on bonkurei are mirrored daily from a public One Piece TCG simulator data source, and card images are served directly by TCGplayer’s image CDN rather than copied onto our servers. The second half of that has a privacy consequence worth stating plainly: when a page shows card art, your browser fetches those images from TCGplayer’s CDN, and that request reaches TCGplayer with your IP address and user-agent, under their privacy policy rather than ours.

The same applies to any link that takes you off bonkurei. We do not control those sites and this policy stops at our edge.

9. We do not sell personal data

We do not sell personal data. We have never sold it, we do not “share” it for cross-context behavioral advertising, and we do not rent, trade, or otherwise disclose it for anyone else’s commercial purposes.

We disclose information only to the providers named in this policy — Vercel, Fly.io, and Sentry — which process it on our behalf to operate the site, and where the law requires it, such as in response to valid legal process or to protect the rights and safety of people using the site. If bonkurei were ever transferred to someone else, this policy would travel with the site and you would be told before anything about it changed.

10. Your choices and your rights

Depending on where you live, you may have the right to know what personal information a business collects about you, to obtain a copy of it, to have it corrected or deleted, and not to be treated differently for exercising those rights. California residents hold these rights under the CCPA as amended by the CPRA, and comparable rights exist in other states and countries. We honor them.

One honest caveat about what we can do: because there are no accounts, we usually cannot connect a request log line or an error report to a particular person. If you write to us with enough detail to identify the records — roughly when you visited and the IP address you were using — we will look for them and delete what we find in the systems we control; where a record sits in a provider’s request logs, we ask the provider to remove it, and otherwise it expires with the provider’s retention period. If we cannot verify that records are yours, we will say so rather than hand someone else’s data to you. There is no charge for any of this, and asking costs you nothing else either: the site behaves identically for everyone.

Where the law allows it you may use an authorized agent. Write to hello@bonkurei.com.

11. Children’s privacy

bonkurei is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 13 years old to use the site; our Terms of Service at /terms say the same.

If we learn that we hold personal information from a child under 13, we delete it. If you believe a child under 13 has given us personal information, write to hello@bonkurei.com and we will delete it.

12. Changes to this policy

We may update this policy. When we do, the effective date at the top of the page changes, and a material change — anything that widens what is collected, who receives it, or what it is used for — is described here rather than slipped in quietly. Continuing to use the site after a change takes effect means you accept the updated policy.

13. How to contact us

Privacy questions, data questions, corrections, deletion requests, and takedown requests all go to hello@bonkurei.com. Our Terms of Service are at /terms, and /about explains where the data on this site comes from.