Privacy Policy
Last updated: April 29, 2026
How we collect, use, disclose, and safeguard your information. We value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.
1Data Controller
CardGames Social is the data controller responsible for your personal data collected and processed through this Service.
For any questions or concerns about how we process your personal data, or to exercise your data protection rights, please contact us using the details above.
2Information We Collect
We collect information that you voluntarily provide to us when you use our Service, as well as information that our systems automatically collect during your interactions with CardGames Social.
3Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
3.1Consent
Where you have given us clear consent to process your personal data for a specific purpose, such as subscribing to communications or enabling optional analytics cookies. You may withdraw your consent at any time by changing your browser storage settings or contacting us.
3.2Contractual Necessity
Processing necessary to perform our contract with you — for example, to create and manage your account, provide the Service, and respond to your support requests.
4Use of Your Information
Having accurate information about you allows us to provide you with a smooth, efficient, and customized experience. We use information collected about you for the following purposes:
- Create and manage your account
- Send you updates and information related to your account and service changes
- Enable user-to-user communications and community features
- Personalize your experience and make future visits to our Service more useful
- Monitor and analyze usage patterns and trends to improve your experience
- Notify you of updates to the Service and new features
- Respond to your requests and customer service inquiries
- Request feedback and contact you about your use of the Service
- Resolve disputes and troubleshoot problems
- Prevent fraudulent transactions and protect against criminal activity
- Perform other legitimate business purposes
5Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
5.1By Law or to Protect Rights
If we believe the release of information about you is necessary to respond to legal processes (such as subpoenas or court orders), to investigate potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by applicable law, rule, or regulation.
5.2Third-Party Service Providers
We may share your information with third parties that perform services for us or on our behalf. These service providers are contractually obligated to use your information only for the purpose of providing services to us. Our key service providers include:
- Firebase (Google) — authentication and user account management
- Hosting providers — infrastructure and content delivery
- Analytics providers — usage analysis and service improvement
6Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
- Account data: Retained for the duration of your account. When you delete your account, we will delete or anonymize your personal data within 30 days, unless retention is required by law.
- Automatically collected data: Server logs and analytics data are retained for up to 26 months and then automatically deleted or anonymized.
- Communication records: Support requests and related correspondence are retained for up to 3 years after your last interaction.
When data is no longer needed, we securely delete or anonymize it so that it can no longer be associated with you.
7Your Rights
Under the GDPR and other applicable data protection laws, you have the following rights regarding your personal data:
7.1Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
7.2Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
7.3Right to Erasure
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent and there is no other legal basis for processing.
7.4Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances, for example while we verify the accuracy of your data.
7.5Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer it to another controller where technically feasible.
7.6Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
7.7Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7.8Right to Lodge a Complaint
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority. In Portugal, the relevant authority is the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.
To exercise any of these rights, please contact us at info@cardgames.social. We will respond to your request within 30 days.
8Tracking Technologies & Cookies
We and our service providers use various tracking technologies to help customize the Service and improve your experience.
8.3Website Analytics
We partner with selected third-party vendors, such as Google Analytics, to track user behavior and analyze usage patterns. These vendors use first-party and third-party cookies to collect and analyze information about how users interact with the Service, including which pages are most popular and how users navigate the site. We only load optional analytics after you accept analytics cookies.
You may opt out of Google Analytics by visiting Google's opt-out page.
9Third-Party Websites
The Service may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with or controlled by CardGames Social. Once you have used these links to leave the Service, any information you provide to these third parties is not covered by this Privacy Policy.
We cannot guarantee the safety and privacy of your information on third-party websites. We recommend that before visiting and providing any information to any third-party website, you review their privacy policies and practices to understand how they handle your personal information.
10Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include secure servers, encryption, and limited access to personal information.
While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable. No method of data transmission over the Internet or electronic storage is 100% secure. If you have concerns about the security of your information, please contact us at the email address provided below.
11International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), for example where our service providers are located. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.
12Policy for Children
We do not knowingly solicit information from or market to children under the age of 16. If we learn that we have collected personal information from a child under age 16 without parental consent, we will delete that information as quickly as possible and will not use it for any purpose.
Parents or guardians who believe their child has provided us with personal information are encouraged to contact us immediately at info@cardgames.social.
13California Privacy Rights
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits California residents to request and obtain information about the categories of personal information we have disclosed to third parties for their direct marketing purposes, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.
If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below. We will respond to your request within 30 days of receipt.
14Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last updated" date and may notify you via email or through the Service.
Your continued use of the Service after changes take effect means you accept the updated Privacy Policy. If you do not agree with the changes, please stop using the Service and contact us to request deletion of your data.
15Contact Us
If you have questions or comments about this Privacy Policy, or if you wish to exercise any of your rights regarding your personal information, please contact us at:
You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) if you believe your data has been processed unlawfully.
5.3Social Media Contacts
If you connect your account through a social network, your profile information and activity descriptions may be visible to other users within the context of the Service. Refer to the specific social network's privacy settings for more control over your information.