Who is responsible
[to be completed by the publisher] ([to be completed by the publisher]) is the controller of the personal data processed by Cardverse.
What we collect
Account data: username, e-mail address, a hashed password (never stored in clear), the date you joined.
Game data: your collection, gold and gems, battles, market and trade history, tickets you write, notifications.
Technical data: your IP address and a limited log of sign-ins and security events (to fight abuse and fraud), kept for a limited time.
Why, and on what legal basis
To run your account and the game (performance of the contract: the terms), to keep the service secure and fair (legitimate interest), and to answer you (support).
We do not sell your data, we do not run advertising, and we do not profile you.
Cookies
The site only uses strictly necessary cookies: a session cookie to keep you signed in and protect forms (CSRF), and optional local settings such as sound or effects. No tracking or advertising cookies, so no consent banner is needed.
How long
Account data is kept while your account exists. Technical logs are kept for a limited period (typically a few months). Tickets are kept as long as needed to handle them.
Who sees it
Only the staff of the site and the host ([to be completed by the publisher]), who process data for us. Your username, collection and ranking are visible to other players; your e-mail address never is.
Your rights
You can ask to access, correct, export or delete your data, and to object to or restrict its processing, by writing to [to be completed by the publisher] or through a support ticket. If you are in the European Union you can also complain to your data protection authority (in France: the CNIL, cnil.fr).