Privacy Policy

The short version

We ask for an email address and a username, and we keep what you do in the game so the game can remember it. We do not sell your data, we do not run advertising, and there are no third-party trackers or analytics on this website. You can download everything we hold about you, or delete the account outright, from your account page. Both take one click and neither needs you to ask us first.

What we collect, and why

• Your email address, to confirm the account is yours, to let you reset a forgotten password, and to reach you about a purchase or a moderation decision. Lawful basis: performance of our contract with you.
• Your username and password, to sign you in. The password itself is never stored. What we keep is a scrambled version of it that cannot be turned back into the original, which is why nobody here can tell you what your password is, only help you set a new one.
• Your game data: cards, decks, gold, wild tokens, cosmetics, duel record, daily quests, campaign progress and friend list. This is the game state; without it there is no game. Lawful basis: contract.
• Your purchases: what was bought, when, how much, and our payment provider's reference for it. Lawful basis: contract, and legal obligation (accounting and tax law).
• Blocks, mutes and reports: who you have blocked or muted, and any report you file or that is filed about you. Lawful basis: legitimate interest in keeping the game safe to be in.
• Your IP address, to stop someone guessing their way into an account. It is used as sign-ins happen and kept for a few days. Lawful basis: legitimate interest in security.
• Crash reports, if the game closes unexpectedly. See the section below, which sets out exactly what one contains. Lawful basis: legitimate interest in the game working.

We do not collect location data, contacts, device identifiers or anything from outside the game, and we do not build a profile of you or make automated decisions with legal effects about you.

Chat messages

We do not keep a copy of your friend chat. A message is passed from one player to the other as it is sent, and we hold no history of it afterwards.

That does not make chat a free-for-all. Reports are read by a person and acted on, accounts are restricted and closed for what is said in them, and repeat behaviour is visible to us across every report an account collects. What it does mean is that a report has to carry its own evidence: describe what was said when you report someone, because your description is what a moderator will be working from. You can also mute or block anyone at any time, from the friends panel, and that takes effect immediately.

Crash reports

When the game closes unexpectedly it writes a small text file describing what went wrong, and sends it to us the next time you launch it. Without this a crash on your machine is a crash we never find out about, so the bug stays in the game for everyone.

It is plain text, and it contains only:

• which version of the game you were running, and for which server;
• your Windows version;
• the username you were signed in as, if you were — so that we can come back to you and ask what you were doing when it happened;
• where in the program it failed, and the chain of calls that led there;
• the last few hundred lines of the game's own log for that session.

It is not a copy of your computer's memory, and it carries no files, no screenshots, no keystrokes and nothing at all from outside the game. Reports are read by us to fix bugs, are never shared with anyone, and are deleted after 90 days.

Cookies

One cookie, and its only job is to keep you signed in on this website. There are no analytics, advertising or tracking cookies, which is why this site has no cookie banner: there is nothing to consent to.

Who else sees it

• Anyone, if you climb the ranked ladder. Our leaderboard is a public page, and it lists the hundred highest ranked duelists by username, rank and ranked win record. Nothing else about you appears on it: not your email, not your purchases, not your collection. Only ranked duels put you there, so playing Normal duels keeps you off it entirely, and an account that is closed or waiting to be deleted is not listed at all. Your own position on the ladder is shown only to you, when you are signed in.
• Our payment provider handles the checkout and receives what a payment needs: your email address and the amount. Your card details go to them and never to us. We will tell you who they are if you write and ask.
• Our hosting and email provider runs the servers the game and this website sit on, and delivers the mail we send you. They act on our instructions only and do not use anything for their own purposes. We will tell you who they are if you write and ask.

That is the entire list. We do not sell, rent or share your data with anyone else, and we have no advertising partners. We would only ever hand data to authorities where the law actually requires it.

Where it is kept

On our provider's servers, which may sit outside the European Economic Area. Where your data does leave the EEA, it is covered by the standard contractual clauses the European Commission publishes for exactly that purpose.

How long we keep it

• Account and game data: until you delete the account.
• Purchase records: kept for as long as tax and accounting law requires (typically 7 years), even after you delete the account. They are severed from your identity at that point: the receipt keeps the amount and the payment reference, and stops naming you.
• Crash reports: 90 days, then deleted outright. They are diagnostics with a shelf life, not records: past that the build they describe is long gone.
• Reports: kept while the account exists and for a period after, so a pattern of behaviour is not erased by deleting and re-registering. A report you filed is anonymised when you delete your account.

Your rights

If you are in the EU or the UK you have the right to:

• see and export everything we hold, with one button on your account page giving you the lot as a file, immediately. That includes your game data, because your cards, decks and progress are records about you just as much as your email address is;
• delete it, also one button on the same page. Deleting signs you out everywhere and emails you to confirm; the account and everything on it are erased seven days later, and signing back in at any point before that cancels it. The wait is deliberate: erasure is permanent and there is no undoing it afterwards, so you get a week to change your mind. The purchase-record exception above still applies;
• correct anything wrong, by writing to us;
• object to or restrict processing we do on a legitimate-interest basis;
• withdraw consent where we relied on it, without affecting what was done before;
• complain to your national data protection authority. We would like the chance to fix it first, but you do not need our permission.

Export and deletion are built into the account page precisely so you never have to ask a human for them or wait 30 days. Anything else, write to support and we will answer within 30 days.

Children

Wildeck is not for children under 16 (or the digital-consent age where you live, if higher). We do not knowingly hold data about them; if you believe a child has an account, tell us and we will delete it.

Security

Passwords are never stored in the clear, and everything between you and us is encrypted. No system is perfect; if we ever suffer a breach affecting your data, we will tell you and the relevant authority within 72 hours of finding out.

Changes

A new edition is published here, stamped at the top, and you are asked to accept it before you play on, on the website and in the game alike.