Privacy Policy

Last updated: Draft

Placeholder document. This text is a structural draft and requires specific legal review before publication.

1.Account data

Name, email and avatar provided at sign-up or through Google Sign-In.

2.Google Sign-In

We receive basic profile information from Google when you choose that method.

3.Cookies

Essential cookies for session management; analytics cookies only with consent.

4.Analytics and logs

Product events and technical logs used to operate and improve the service.

5.Companion data

Matches, decklists, deck versions and device identifiers, collected only after explicit consent and pausable at any time.

6.Decklists and matches

Used for your personal analytics and, in anonymised aggregated form, for public statistics.

7.Devices and IP address

Collected for security, abuse prevention and session management.

8.Payments and Stripe

Payment data is processed by Stripe. We never store complete card numbers.

9.Processing and storage

Data is processed on managed cloud infrastructure with access controls and encryption in transit.

10.Purpose of processing

Operating the service, producing statistics, generating AI analyses, billing and security.

11.Retention

Retention periods vary by plan and data category. [Legal review required.]

12.Sharing with processors

Limited to infrastructure, payment and analytics processors under contract.

13.Individual data of other players

Never exposed. Public data is aggregated and anonymised.

14.Deletion and export

Data & Privacy settings allow exporting your data, deleting Companion data and deleting your account.

15.Consent

Analytics, Companion collection and marketing communication each have separate, revocable consent.

16.LGPD rights

Access, correction, portability, anonymisation, deletion and information about sharing. GDPR alignment planned.

17.Controller contact

privacy@openmagic.gg (placeholder). [Legal review required.]