Privacy Policy

Information you provide

Depending on how you use the app, we receive:

• Account information such as your email address, username, first and last name, date of birth, gender choice (including “prefer not to answer”), and profile information. Local passwords are stored as password hashes.
• If you choose Google sign-in, information Google provides for authentication, including your Google account identifier, email address, name, and email-verification status. We do not request access to your Google contacts or calendar for this sign-in.
• Game activity, scores, rankings, friends and friend requests, account tier, and preferences.
• Messages, reports, and support requests, including any files you attach. Support requests may be emailed to the support inbox with account and technical information needed to investigate.
• If custom cards become available, the images and associated names, descriptions, credits, and information you submit about their source or permissions.

Information collected when the app runs

The service processes IP addresses, request headers, browser or device information, authentication attempts, timestamps, and operational or security logs. Some authentication records retain request headers and remarks. We use this information to provide access, diagnose problems, and investigate misuse.

Sign-in cookies keep you signed in. Guest access uses an identifier and token stored in your browser’s session storage. Browser storage remembers settings such as audio and appearance, and the installed web app may cache app files for loading and offline behavior. Clearing browser data can sign you out or reset those settings.

How information is used

We use information to operate accounts and games, authenticate users, maintain rankings and social features, remember preferences, send account and security messages, answer support requests, enforce rules, and respond to legal requests.

• Email is used for verification, password recovery, account-security and other service communications. This does not enroll you in an unspecified marketing program.
• Account tier controls available benefits. The app does not currently provide a payment checkout; a future purchase flow must explain the payment provider and information involved before collecting payment details.
• We store whether you completed the agreement step with your account, so it carries across browsers and devices. This field is not displayed on your public profile.

What other people can see

Usernames, guest display names, profile icons, biographies, game activity, and ranking or score information can appear in player profiles, games, and leaderboards. Some leaderboard information is available without signing in. Messages you send through chat are shared with other users; do not send private information you would not want them to receive or copy.

If custom cards launch with the planned sharing model, any signed-in user who joins the owner’s custom game can see its cards. An owner-only hosting rule does not make the pictures private. Other users can capture or retain what they see.

Your account email, password hash, and date of birth are not intended to be public profile information. Administrators and service providers may access information needed to operate, support, or protect the service.

Service providers, analytics, and advertising

We use Hostinger for cloud hosting and MongoDB Atlas for database services. We also use email-delivery and related technical services to run the app. These providers process information needed for their tasks.

The website includes Google Analytics to measure visits and usage. It can use cookies and similar identifiers and collect page views, browser and device information, and approximate location to produce usage reports.

The app includes Google sign-in and Google AdSense advertising. Google advertising requests may occur even when no advertisement is displayed, including on member tiers that hide ads. Google may receive information such as IP address, browser information, and advertising or cookie identifiers and use it under its own policies and applicable settings.

When ads are served, Google and participating advertising partners may use cookies and similar technologies to collect information about visits to this app and other websites over time, and to personalize ads based on those visits. You can manage Google ad personalization through Google Ads Settings.

Advertising-related disclosures may be treated as a sale or sharing of personal information under some privacy laws even when no account information is sold for money.

If disclosure is legally required or reasonably necessary to protect people, rights, or the service, we may provide relevant information to authorities or other appropriate parties. Copyright reports may be shared with the other party as explained in the Copyright Policy.

Google Privacy Policy

How Google uses information from partner services

Google Ads Settings

Keeping information and deleting an account

Information is retained in active accounts, game and security records, support mail, and operational systems. Some temporary codes and sessions expire automatically.

The account-deletion process removes the active account and associated active authentication and game-history records, but first archives the account and those histories for possible reinstatement at your request. It is not an automatic erasure of all personal information. The archive has no automatic expiration. Copies may also remain in support mail, logs, backups, or information already received by another player.

You can start account deletion from the account controls; this requires a verified email address and a one-time code to protect your account. You can also request deletion or ask about retained information using the privacy contact. We may need to verify your identity, and legal obligations or a dispute may affect what must be retained. Do not send a password or a copy of an identity document unless a specific, appropriate verification method has been arranged.

Your choices and requests

You can change supported profile and preference settings, clear browser storage, and stop using the service. Browser and Google settings provide additional controls for their services. Blocking essential cookies can prevent sign-in and other features from working.

The current app does not automatically change its information handling in response to browser Do Not Track signals. It also does not implement an app-level response to Global Privacy Control or an in-app advertising-consent or opt-out control. Third-party services may respond to browser settings under their own policies. You can contact us about privacy choices or requests that apply to you.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or receive a copy of your information, or to limit certain processing or advertising-related sharing. Contact us with your request. We will assess it under applicable law, verify identity where necessary, and explain any applicable limitation or available appeal. Nothing in this policy waives mandatory privacy rights.

Parents or guardians who believe a child has supplied information can contact the privacy contact to request review and appropriate action.

Security, location, changes, and contact

We use account authentication and technical access controls, but no service can guarantee complete security. Avoid sending sensitive information through public profiles or chat. The operator is based in the United States.

We will update the effective date when this policy changes and notify users of material changes through a prominent in-app notice or the email address associated with their account. A change to the wording does not itself authorize a new use of information that requires separate consent.

Contact: temporarily unavailable. Operator: the app operator (name temporarily unavailable).