Privacy Policy

What We Collect

• Account data: email address, display name, and password hash.
• Game data: match results, rank score, and card collection.
• Technical data: IP address (for security and rate limiting), user agent string, and session metadata.

What We Do Not Collect

• We do not sell your data to third parties.
• We do not collect payment information directly (payments processed by third-party providers).
• We do not use tracking pixels or third-party advertising cookies.

How We Use Your Data

• To operate your account and game access.
• To provide customer support.
• To detect and prevent abuse, cheating, and unauthorized access.
• To display your display name on the public leaderboard (opt-out available in account settings).

Data Retention

Account data is retained while your account is active. You may request account deletion by contacting support. Game match records may be retained for statistical purposes in anonymized form after deletion.

Security

Passwords are hashed using industry-standard algorithms (bcrypt via ASP.NET Core Identity). Session cookies are encrypted, HTTP-only, and marked Secure. Communication with this site is encrypted via HTTPS.

Contact

For privacy questions or data deletion requests, contact us via the support page.