Legal

Privacy Policy

How Thyme Labs processes personal data for TCG Templates.

Last updated: 13 September 2026

Controller

Thyme Labs is the controller for TCG Templates. You can contact us at info@thymelabs.nl. We are based in The Netherlands.

Data We May Process

Account data

Examples include your email address, display name, and authentication or account identifiers.

Project data

Examples include saved project configuration, selected cards or entries, style and paper settings, project lifecycle information, and project adjustments.

Payment and purchase data

Examples include purchase records, credit packs, amounts, currencies, Stripe transaction or session identifiers, and refund status where relevant. Full payment-card details are processed by Stripe and are not intended to be stored directly by TCG Templates.

Support communication

We process information you send when contacting support.

Technical information

Limited technical and security information may be processed by us and infrastructure providers for authentication, fraud and security, reliability, troubleshooting, and service delivery.

Local Artwork

Artwork and images imported into the Binder Builder are designed to remain stored locally in your browser or device using browser storage such as IndexedDB. They are not normally uploaded as part of the cloud project configuration.

Because this storage is local:

  • clearing browser or site data can delete artwork;
  • artwork does not automatically move to another device; and
  • you should keep your own original files and backups.

Local Storage and Browser Storage

TCG Templates may use browser storage for essential functions such as authentication and session handling, theme preference, local Builder recovery, local artwork, and application state needed to provide the requested service.

TCG Templates does not currently use advertising or behavioural marketing trackers.

Why Data Is Used

We use data to:

  • provide accounts, authentication, and saved cloud projects;
  • process purchases and credits, and operate the project lifecycle;
  • provide customer support;
  • prevent abuse and help secure the service; and
  • meet accounting, tax, legal, and reliability obligations.

Depending on the activity, our legal bases include performance of a contract, compliance with legal obligations, and legitimate interests such as security and service reliability.

Service Providers

We use necessary providers to operate TCG Templates, including:

  • Supabase for authentication and database/backend infrastructure;
  • Stripe for payment processing, payment-related fraud and security, and taxes where applicable;
  • Brevo for transactional and authentication email delivery; and
  • necessary hosting and infrastructure providers used to operate tcgtemplates.com.

Thyme Labs does not sell your personal data.

International Processing

Some service providers may process information outside your country or the European Economic Area. Where legally required, such transfers are subject to appropriate legal safeguards provided by the relevant service provider.

Retention

  • Account and project data is kept for as long as needed to provide the service or until deletion, subject to legal and technical requirements.
  • Transaction and accounting records may be retained for periods required by applicable Dutch tax and accounting law.
  • Support records are kept only as long as reasonably necessary.
  • Local browser data remains on your device until it is deleted by you, your browser, or the application lifecycle.

Your Rights

Where applicable, you may have rights to access, correction, deletion, restriction, data portability, and objection.

To exercise these rights, contact info@thymelabs.nl. If you are in the EU or EEA, you may also lodge a complaint with your local data-protection authority, including the Dutch Autoriteit Persoonsgegevens.

Security

We use reasonable technical and organisational measures to protect information. No internet service can guarantee absolute security.

Changes

We may update this policy when the service or legal requirements change. The latest version will be published on this page.