Privacy policy
Last updated: October 19, 2026.
What we collect
- Account details: your email address, chosen username, age range (under 13, 13–17, or 18+) and country. We store age ranges, not birthdates.
- Gameplay data: your card collection, packs, decks, quiz answers, battle results and reward history.
- Support messages: requests you send us, including reports and privacy requests.
- Parent consent: for under-13 players, a record linking the child’s account to the consenting adult’s account and the administrator’s review decision.
What we never do
- We never sell your data or show advertising.
- We never publish email addresses, age ranges or raw match logs.
- There are no purchases on ModelCards, so we never collect payment details.
Children’s privacy
Players under 13 receive a generated username, a permanently private profile, and no access to the AI coach. Gameplay begins only after a linked adult’s consent and an administrator’s review. Parents can pause gameplay, packs and rewards, or revoke consent at any time from their own account.
Public profiles
Profiles are private by default. Only eligible adults can opt in to a public profile, and sharing decks or battle history is a separate choice you control.
How we use information
- To run the game: collections, packs, battles, rewards and the leaderboard.
- To keep players safe: age-appropriate features, regional eligibility, moderation and abuse prevention.
- To respond to support and privacy requests.
Your rights
- Download your data: signed-in players can export their account data from Help & privacy.
- Correct your details: contact support to fix a wrong age range or country.
- Delete your account: submit a deletion request from Help & privacy. Requests are reviewed by an administrator; automated permanent deletion is not yet available.
Data retention
Account and gameplay data is kept while your account is active. Support requests and moderation records are kept as long as needed to operate the service and resolve disputes. When a deletion request is completed, personal data is removed except where a record must be kept for safety or legal reasons.
Security
Access to private data is controlled by server-side rules. Game outcomes and rewards are decided and verified on our servers. Administrative actions are recorded in an audit log.
Contact
Questions or privacy requests: use the support page. Do not send passwords or identity documents in support messages.