Legal

Privacy Policy

Last updated: 8 August 2026

OPCG Online is an unofficial fan-made online card-game application. This policy explains how the OPCG Online project processes personal data when you use the application, website and online services.

Data we process

• Account data, including your email address, account identifier, username, country, language and profile role.
• Authentication data supplied by Google when you choose Google sign-in. OPCG Online never receives your Google password.
• Game and social data, including decks, matches, rankings, replays, friends and invitations.
• Technical and security data, such as IP address, client version, timestamps, server logs and diagnostic information needed to operate and protect the service.
• Purchase and entitlement status when paid features are enabled. Payment card details are processed by the relevant store or payment provider, not by OPCG Online.
• Images or files only when you explicitly select them for an import or sharing feature.

Why we use this data

We use personal data to create and secure accounts, provide multiplayer and social features, preserve game progress, enforce compatible client versions, provide support, prevent abuse and maintain the reliability of the service. We do not sell personal data or use it for cross-app tracking.

Service providers

Data may be processed by infrastructure and distribution providers such as Scaleway and Cloudflare, by Google for optional authentication, and by Apple, Google Play or Paddle when their payment or distribution services are used. Each provider processes data under its own terms and privacy policy.

Retention and security

Account and game data is retained while your account is active and for as long as needed to provide the service, resolve disputes, prevent fraud and meet legal obligations. Operational logs are retained only for a limited period appropriate to security and diagnostics. Data is protected in transit with HTTPS/TLS and access to production systems is restricted.

Your choices and rights

You may request access, correction, export or deletion of your personal data, or object to certain processing, subject to applicable law. You may also disconnect Google sign-in from your Google account. Send requests to [email protected].

Children

OPCG Online is not directed to children below the minimum digital-consent age applicable in their country. A parent or guardian who believes a child supplied personal data should contact us so it can be reviewed and, where appropriate, deleted.

Changes and contact

We may update this policy when the service or legal requirements change. The current version is always published on this page. Privacy and support enquiries can be sent to [email protected].