Privacy Policy - DestinyCards

DestinyCards explains here what data the game uses, why, where it is kept and for how long. It is written to be readable by our youngest players too.

1. Who is responsible for your data

The controller is Tekka Studio, SASU, 1 Impasse Bernard Blier, 78390 Bois-d'Arcy, France, registered with the Versailles trade and companies register under number 109 800 102. Questions: support@tekkastudio.com.

2. The data we use

Account: email address, player name, password (stored in encrypted form).
Profile and progress: avatar, language, level, experience, credits, Arena division and points, cards owned, decks, campaign progress, match history and tournament results, referral code and links.
Purchases: history of credit purchases and of the Adventurer Pass subscription, details of the cards obtained in packs. Payments go through Apple and Google; we never see your payment method.
Agreements given: the date on which you accepted the terms of use and, before a purchase, immediate supply.
Device: system (iOS or Android) and app version.
Notifications: your choice to allow or refuse tournament and reward reminders.
Internal statistics: session length and shop usage, stored in our own database. No third-party analytics or advertising tool is used.
Game integrity: match information (duration, result) and any sanctions, to detect cheating.

Some information is visible to other players: your player name, avatar, level, division, the rankings and your decks (used as opponents in quick play and in the Arena).

3. Why we use it

Why	Data concerned	Legal basis
Create your account and run the game	Account, profile, progress	Performance of the contract (terms of use)
Handle purchases and subscription	Purchases, account identifier, agreements given	Performance of the contract; legal obligation
Run tournaments, Arena and rankings	Name, results, decks	Performance of the contract
Send you reminders	Notification permission	Consent (your device setting)
Improve the game	Internal statistics	Legitimate interest
Fight cheating and fraud	Match data, sanctions	Legitimate interest
Answer your requests	Email, message content	Legitimate interest; legal obligation

We do not sell your data and we show no targeted advertising.

4. Where the data is and who can access it

Supabase hosts the database and account login, within the European Union (Sweden). The provider is Supabase Pte. Ltd (Singapore). A data processing agreement applies, with the European Commission's standard contractual clauses for any access to data from outside the European Union.
RevenueCat manages purchases and the subscription. The provider is RevenueCat, Inc. (United States). This data is processed in the United States, under a data processing agreement and the European Commission's standard contractual clauses.
Apple App Store and Google Play distribute the app and process payments under their own privacy rules.

We share your information with no one else, unless the law requires it.

5. How long we keep it

Data	Duration
Account and progress	While the account is active; erased when it is deleted
Inactive account	Deleted 2 years after the last login; we warn you beforehand so you can keep your account
In-game purchase history	Erased with the account
Details of the cards obtained in each pack	45 days, to handle a complaint
Accounting records of our sales (statements provided by Apple and Google, without your name)	10 years
Messages sent to support	3 years after the last exchange

6. If you are under 15

DestinyCards is rated PEGI 7: children can play it. If you are under 15, ask a parent or guardian before creating an account. We use as little data as possible, show you no targeted advertising and build no commercial profile.

Parents: you can ask for access to, correction or deletion of your child's data at support@tekkastudio.com. Purchases go through the Apple or Google account of the device; parental controls and spending limits are set directly in those two services.

7. Deleting your account

You can delete your account at any time, directly in the game. You can also write to support@tekkastudio.com with the subject "Account deletion": we reply within 30 days at most.

Your profile, progress, cards, decks, match history and in-game purchase history are then permanently erased. Apple or Google, which processed your purchases, keep their own records under their rules; we only keep the accounting statements they provide to us (part 5).

Deleting your account does not cancel a subscription: it is cancelled in the App Store or Google Play.

8. Your rights

You can ask for access to your data, its correction, its erasure, a limit on its use, a copy in a reusable format, and object to some uses. Where processing relies on your consent, you can withdraw it at any time (for notifications: in your device settings).

Write to support@tekkastudio.com; we reply within one month. If you think your rights are not respected, you can complain to the CNIL (cnil.fr).

Sanctions for cheating or abusive behaviour are decided by a person at the studio; you can contest them by email.

9. Security

Passwords are encrypted, access to data is limited by database rules, and sensitive operations (credits, rewards, purchases) are checked by our servers. No protection is perfect: if a breach puts you at risk, we will inform you and notify the CNIL within the legal deadlines.

10. Changes and contact

If this policy changes significantly, we say so in the app and on this page, with the update date. Contact: support@tekkastudio.com.