Privacy Policy

Wizard Card Game — BrilliantIdea

Last updated: March 2025

This Privacy Policy describes how Wizard Card Game (“we,” “our,” or “the app”) handles information in connection with the Wizard Card Game application and any related online services (including the multiplayer API). By using the app, you agree to this policy.

1. Information We Collect

Information you provide

Online play. If you use the optional multiplayer feature, the app creates or joins games using game IDs and join codes. We do not require an account, email, or name. The app may store a per-game player token on your device and send it to our servers to authorize your moves.

Information collected automatically

Game and API usage. When you use multiplayer, our servers (hosted on Vercel and using Neon for database storage) receive and store: game identifiers, join codes, player tokens, and game state (e.g., board, wizards, spells, scores) necessary to run the game. We may also log request metadata such as IP address and request timing for security and operation (e.g., rate limiting).
Device and app. The app runs on your device (iOS or macOS). Game progress and preferences may be stored locally on your device. We do not collect or transmit your contacts, photos, or other device data except as needed for the features you use (e.g., multiplayer game state).

2. How We Use This Information

To provide and maintain multiplayer (create/join games, sync state, enforce turn order).
To protect our services (e.g., rate limiting, abuse prevention, CORS, and token-based authorization).
We do not use your data for advertising or to build a profile about you for marketing.

3. Sharing and Third Parties

We do not sell your personal information. Game data and tokens are processed by our infrastructure (Vercel for hosting and API, Neon for database storage). These providers process data on our behalf to run the service. We do not share game or player data with other third parties for their own marketing or advertising.

4. Data Retention

Game data (game IDs, join codes, state, player tokens) is stored as long as needed to operate multiplayer. We may retain logs (e.g., IP, request metadata) for a limited period for security and debugging. We do not commit to a specific retention period; you can treat game data as persistent until we change our systems or policies.

5. Security

We use industry-standard measures (HTTPS, token-based auth, rate limiting, and payload limits) to protect data in transit and to reduce abuse. No system is completely secure; use the app at your own risk.

6. Children

The app is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will take steps to delete it.

7. Your Rights

Depending on where you live, you may have rights to access, correct, or delete your data or to object to certain processing. We do not maintain user accounts; game data is tied to game IDs and tokens. To exercise rights, contact us (see below) and describe the game or identifier so we can assist.

8. International Transfer

Our servers and database providers may be located outside your country. By using the app and multiplayer, you consent to the transfer and processing of data in those locations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when we make material changes. Continued use of the app after changes constitutes acceptance of the updated policy. For significant changes, we may provide additional notice where feasible (e.g., in the app or on this page).

10. Contact

For questions or requests about this Privacy Policy or your data, contact BrilliantIdea at thefamilygamerdad@gmail.com.