Nightfall HistoryNightfall History

Privacy Policy

Last updated: August 28, 2026

Nightfall History is a history site. You can read every article and watch every video without giving us anything at all. We only collect personal information when you choose to do something that needs it: subscribe to the newsletter, create an account, or collect trading cards.

Information We Collect

Newsletter

If you subscribe, we collect your email address so we can send you updates about new articles and historical content.

Accounts

If you create an account to collect trading cards, we store your email address, your display name, and either a hashed password or, if you sign in with Google, the basic profile information Google returns to us (your name, email address, and profile picture). We never receive your Google password.

We also record a one-way hash of the IP address used to create the account. We do this to detect bulk or automated sign-ups. It is a SHA-256 hash rather than the address itself, so it cannot be reversed back into an IP.

Trading cards

Your collection is data we have to keep for the feature to work: which packs you have opened and when, which cards you were issued, their serial numbers, and your daily streak. Serial numbers and their issue dates are publicly verifiable on the card verification pages, which is the point of a numbered card. Those pages do not show your email address.

Opening packs before you sign up

You can open preview packs without an account. To stop one person claiming an unlimited number of them, we store a short-lived anonymous session that contains a hash of your IP address and a hash derived from your browser configuration, along with a count of packs opened. These records and the cards they hold are temporary and expire a few hours after they are created unless you sign up and claim them.

Card reminders

If you turn on reminder emails, we store your reminder preferences, the address they should go to if it differs from your account email, and a log of which reminders were sent to you and whether they were delivered. We record bounces and spam complaints so we can stop emailing an address that does not want us to.

Analytics

We use PostHog to understand how the site is used: pages viewed, general interactions, approximate location derived from your IP address, device and browser type, and errors the site runs into. This is served through our own domain rather than a third-party script host.

How We Use Your Information

  • Send you the newsletter and blog updates
  • Create and secure your account, and keep you signed in
  • Run the trading card feature: issue cards, track supply and serial numbers, and maintain your collection and streak
  • Send the reminder emails you asked for
  • Prevent abuse, including automated sign-ups and attempts to claim more free packs than the rules allow
  • Understand what people read and improve the site
  • Respond to your inquiries and requests

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Who Processes Your Data

We use a small number of service providers, who handle your data on our behalf and under their own privacy policies:

  • MailerLite stores newsletter subscribers and sends the newsletter.
  • Resend delivers account and card reminder emails.
  • Google handles sign-in, if you choose to use it.
  • PostHog processes analytics and error data.
  • Vercel hosts the site, and Railway hosts the database where accounts and collections are stored.

These providers operate in the United States, so using the site involves your information being processed there.

Cookies and Local Storage

We use the following, and no advertising cookies at all:

  • A session cookie that keeps you signed in to your account. Without it you cannot stay logged in.
  • A short-lived cookie identifying an anonymous pack-opening session, so preview packs you open before signing up can be claimed afterwards.
  • Local storage holding your theme preference.
  • PostHog cookies, which recognize a returning browser so repeat visits are not counted as new people.

How Long We Keep It

  • Anonymous pack-opening sessions and the cards they hold expire a few hours after they are created if you never sign up.
  • Account data, including your collection, is kept for as long as your account exists.
  • Newsletter subscriber data is kept until you unsubscribe.
  • Reminder send logs are kept as a short operational record so we do not email you twice for the same day.

Your Rights

You have the right to:

  • Unsubscribe from the newsletter at any time
  • Turn off reminder emails, either in your card settings or with the unsubscribe link in any reminder
  • Ask us to delete your account and the data attached to it, including your collection
  • Ask us what information we hold about you

Deletion is handled by hand when you ask for it, and it is permanent: your collection, including any cards you pulled, goes with the account. Please be sure before you ask.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.

Contact Us

Reply to any email we send you, whether that is a newsletter or a card reminder, and it reaches us. Use the same route for questions about this policy, or to ask for access to or deletion of your data.

Changes to This Policy

We will update this page when what we collect changes, and revise the date at the top. See also our Terms of Service.