Legal — Privacy
Privacy policy
The short version: we show you your data and then forget it. No accounts, no IP addresses in our logs or databases, no cookies of our own. The ads are explained below.
Last updated
- Cookies
- Only from Google ads
- IP addresses stored
- Never
- Advertising
- Google AdSense, consent in the EU
- Analytics
- Cloudflare Web Analytics, cookieless
- Email checker sends
- Only the domain
- Header analyzer sends
- Nothing
Who is responsible
Jakub Verner, email: privacy@myiphero.com.
What we process
| When | What and why | Kept |
|---|---|---|
| Any page | Your IP address, browser and the page requested, needed to deliver the page. Cloudflare hosts and protects the site. | Not stored by us |
| My IP, IPv6 test, IP API | Your IP address and its approximate location and provider, shown back to you. API requests are rate limited per IP. | Not stored; rate-limit counter about one minute |
| Email checker | Only the domain (e.g. example.org) is sent, to Cloudflare DNS and to the domain registry via our server. | Not stored |
| Header analyzer | Nothing. Headers are parsed in your browser. | – |
| Hero collection | The heroes and card editions you catch, saved in your browser's local storage. Never sent to us as a collection. | In your browser, until you delete it |
| Analytics | Cloudflare Web Analytics: aggregated page views, no cookies, no fingerprinting. | Aggregated reports only |
| Email to us | Your address and message, to reply. | Until resolved, at most 12 months |
| Ads | Google receives your IP, browser data and the page you're on, and may set cookies. | Google cookies, typically up to 13 months |
Legal basis: our legitimate interest in running a working, secure and fast site (Art. 6(1)(f) GDPR); for emails, answering your request; for ad cookies and personalised ads, your consent (Art. 6(1)(a) GDPR). A light/dark theme choice is saved in your browser's local storage and never sent to us.
Providers: Cloudflare (hosting, security, analytics; US-based, covered by the EU–US Data Privacy Framework), our email provider, and domain registries for domain lookups, plus Google for ads.
Your rights: you can ask us for access, correction or deletion of your data atprivacy@myiphero.com, or complain to the Czech data protection authority (ÚOOÚ). We usually hold nothing linked to you, since we don't store IP addresses. For ad data, use the consent settings below or contact Google directly.
Advertising
The site is paid for by Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet. See how Google uses information from sites that use its services. Google is an independent controller for this data.
In the EEA, the UK and Switzerland, Google's consent message asks for your choice first; if you decline, you see non-personalised ads. Change your choice any time with Privacy & cookie settings at the bottom of every page. Anywhere, you can opt out of personalised ads inGoogle Ads Settings or ataboutads.info.
Your hero collection
The heroes and card editions you catch are saved only in your browser, in its local storage under the keymyiphero.collection.v1. For each one it keeps the card's share code, whether you caught it yourself or added it from a friend's link, the date of the first catch and how many times you caught it. A share code holds the hero, its stats, item, edition and country, never your IP address. We do not receive the collection and cannot see or restore it.
To show the cards on the collection page, your browser loads each card's image from our server by its share code, the same as opening a shared card link. These requests are handled like any other page request above and are not stored.
The transfer link for moving your collection to another device carries the share codes after the# in the address. Browsers do not send that part of a link to any server, so the codes go only where you open or share the link. Anyone who has the link can import a copy of the cards.
To delete the collection, use Delete my collection on the collection page, or clear this site's data in your browser settings.
Changes
We update this page and the date at the top before any change takes effect. See also theterms of use.