^{Last update: 12/2023}
Hello! This Privacy Policy is where we explain how your personal data is collected, stored or used, and what happens to it when you're using TopDeck games and services. You will need to agree to this Privacy Policy before you use a TopDeck game or service for the first time. If you have any questions you can contact us at team@topdeck.studio. Here we go!

Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Data (as defined below) and how we will treat it.
This Privacy Policy applies to TopDeck’s games, apps, websites and related services (together, the “Services” or “games”, “apps”, “websites” for individual categories). This Privacy Policy explains how we, and affiliated companies (collectively, "TopDeck" or "we", "us", "our") collect, use, secure, and/or disclose end-users’ (“you” or “your”) or otherwise processes your personal information when you use our Services.
The data controller is TopDeck LTD.

1. INFORMATION WE COLLECT AND HOW
While using our Services, we may ask you to provide us with certain personal data or personal information that can be used to identify you (“Personal Data”, or “data” or “information” or “Personal Information”). We may also collect Personal Data automatically, or from third-party partners or services. The Personal Data we collect includes:

• Basic Identifiers and Contact Information

We collect some information from you when you provide it to us directly, such as via an email or online form, through the support feature embedded in our Services, or through another form of inquiry. This information may include your name, email, and phone number. If you apply for a job on our website, information you submit may also include a cover letter and any details included in your resume or curriculum vitae (CV).

• Device Information

When you download and use our Services, we automatically collect information on the type of device you use, operating system, resolution, application version, mobile device identifiers (such as your device ID or advertising ID), language, time zone and IP address.

• Usage Information

We collect information automatically about your activity through our Services (Usage Information), such as the date and time you used a service, features you have used, your in-app purchase history, subscriptions, your interaction with advertisements, and data generated when you use our Services (for example your game progress which may be stored with your Apple ID on iCloud for iOS Devices, with your Google Play Games profile for Android Devices and Steam Account profile for Steam (PC)).

• Location

When you download and use our Services, we automatically detect your general location, namely country and state through your IP address. We may collect, with your consent if applicable, other location information through your IP address, such as the city you are in.
Media and other files
We may ask for access to your camera in case you want to use certain features of our Services. In case you contact us through our in-app support feature and you need to upload any media or files as attachments, we shall ask for access to such files.
Information we obtain from third parties
We may receive information about you from our third party service providers, who collect this information through our Services in accordance with their own privacy policies. A list of the third parties that operate in our Services can be found in the APPENDIX B.

• Information we obtain when you connect with third parties

In cases we provide the option, and you decide, to connect our Services to your account with third parties like Apple, Facebook, Google, Steam we may receive certain publicly available information about you, as well as any information that you allow or your settings enable to be accessed, including your Apple ID, Facebook user ID, Android Gamer Name, Steam Account name, name, email and Telegram account name subject to your permission. If you would like to manage your use of “Sign in with Apple” please go to Apple’s website to find out more. If you would like to edit the privacy and settings on Facebook, please go to Facebook’s website to find out more. If you would like to manage your use of “Sign in with Google Play Games” please go to Google’s website to find out more. If you would like to manage your use of “Sign in with Steam” please go to Steam’s website to find out more.

• Information we obtain from Facebook

If you use our Services on Facebook or connect our Services to a Facebook account, we may receive any of the information you provide or permit to be provided to us via Facebook. Such information may include your user ID and your use of our game, including with whom you share our game on Facebook and your email address in case you opt to provide the same or wish to contact us for support. The information we receive depends on the Services you are using, Facebook's terms of service and privacy policy, your privacy settings, and, if applicable, your friends’ privacy settings. If you are uncertain about what information Facebook is sharing with us, please go to Facebook’s website to find out more about Facebook’s privacy practices.
The information we receive from Facebook and other third parties is stored and used by us in accordance with this Privacy Policy.
User generated content we obtain from you
We may collect content from posts or uploads on social networks or platforms or direct contact, subject to your consent if applicable. Such content may include, your name, social media username, image, likeness, voice, other identifiable information available in such user generated content.

• Cookies and similar data collection technologies

We and our third party advertising networks and their partners may use cookies and similar technologies, such as mobile “SDK”, to provide and personalize our Services and to provide targeted advertisements. Some of these technologies can synchronize behavior across different mobile apps, devices and websites so that advertisements can be tailored to your interests. This process is called personalized advertising. In addition, we and certain advertising networks may access your inventory of installed apps to avoid advertising already installed apps. If you'd like to opt-out from having advertisements personalized in this way on your mobile device, please see the ‘Opt-out of targeted advertising’ section.
Please note that, while your browser settings may allow you to transmit a “Do Not Track” signal when you visit the Services, our Services (including apps and websites) are not configured to respond to “Do Not Track” signals received from browsers.
For more information on how third parties may use tracking technologies in our apps, go to APPENDIX A and APPENDIX B.
For more information on the use of cookies on our websites can be found HERE for Reign.cards.

2. PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA
We have set out below a description of the ways in which we use your Personal Data, the legal bases we rely upon to do so and to provide you with an option to opt-out of certain practices, where applicable. We may use your Personal Data:

To provide and maintain our Services, recognize you when you return to our apps, to sync your progress across devices when you log in to your account with third parties and perform essential business operation, our legal basis for processing is performance of a contract with you which you entered into with us when you download our Services and accept our End User License Agreement.

To allow you to back-up and sync your progress using third party social networks to our Services, such as Google Play Games, Apple Game Center, Facebook or Steam Cloud. Some of our Services provide the option to sync and back-up your progress across different devices when you log-in through third party social networks. These services are not activated automatically, but require explicit authorization by you. Please note that the third party social networks mentioned in this section are governed by their own privacy policies, terms and end-user agreements and we are not responsible for and have no control over the sharing practices or policies of the third parties that operate those sites. Further, when you disable the back-up feature, certain information might remain on your device(s) or the third party social network. To delete these remaining data, please visit your device’s or third party social network settings.

To administer and protect our Services (including troubleshooting, data analysis, testing, support, fraud, reporting and hosting of data). Our legal basis for processing is legitimate interests for running our business, provision of administration and services.
To communicate with you about any career requests, contact forms, helpdesk support and to understand how you use our Services so that we can continuously improve our offerings. Our legal basis is performance of a contract, legitimate interests or consent depending on the particular case to keep our users updated about our Services and our new features in accordance with your preference, and to continue to improve the Services we offer.

To opt-out of communication with us for our Services, send us your request through the email contact team@topdeck.studio.

To perform analytics in order to gain insights into how our users interact with our products and services. We use first and third party analytical tools to understand how our users interact with our games. It helps us understand how users navigate in our games, what features they use, what actions they take, how long they play the game and how often they return. This helps us get insights into which parts of our games are popular and which parts need improvement. It also helps us understand what brought our users to our games and what keeps users engaged. With this information, we can give users a better experience (like making changes to our gameplay experience, changing annoying features, or troubleshooting bugs and problems).
Depending on your local privacy laws, to opt-out or withdraw your consent from processing of your information for Analytic Purposes, see the “EXERCISE YOUR PRIVACY RIGHTS” section below.

To cross-advertise our Services and products and to send push notifications for changes to our Services, to allow you to participate in new features of our Services when you choose to do so. Our legal basis is legitimate interests to be able to advertise our Services and products to our users and keep our users updated about our Services and our new features in accordance with your preference.
To opt-out of receiving advertisements for our Services and products, send us a request through the email team@topdeck.studio.
You can opt-out of receiving push notifications by turning them off at the device level through the settings of the device.

To serve personalized advertisements in our Services using third-party advertising networks. Our legal basis is legitimate interests to run our business. However, if you are in the European Economic Area, the United Kingdom (the "UK"), Norway, Switzerland or Brazil, some of our third-party advertising networks, will rely on your consent to process Personal Data in order to provide personalized advertising to you, therefore you will be asked whether you consent to the collection of your mobile device advertising identifier and IP address so that they can provide a personalized advertisement experience.
To opt-out or withdraw your consent from receiving personalized advertisements, see the ‘Opt-out of targeted advertising’ section below.

To use user generated content which has been provided by you and such content includes Personal Data. Our legal basis is consent which is obtained directly by you from the medium (e.g. e-mail, social networks, social platforms) used to obtain such content.
You may withdraw your consent by providing us with written notice by email at team@topdeck.studio.
To respond to legal proceedings and other obligations or requirements under applicable law.

3. RETENTION OF PERSONAL DATA
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, provide our Services and enforce our legal agreements and policies.
We will also retain Personal Data and Usage Information for internal analysis purposes and legitimate business interest to the extent necessary to improve the functionality of our Services, for business purposes or when we are legally obligated to retain this data for longer time periods.
Your Personal Data collected through our Services will be retained for as long as permitted by applicable law or necessary depending on the respective purpose of collection and shall be deleted when they no longer serve one of the above-mentioned purposes or shall be anonymized and therefore will no longer constitute Personal Data. It is clarified that in no case the retention period should exceed the 5 years from the date of collection. Once we have deleted or anonymized your Personal Data, you will not be able to exercise the right to access, the right to erasure, the right to rectification or the right to data portability.

4. PURPOSES FOR WHICH WE WILL SHARE YOUR PERSONAL DATA
We may share the above categories of Personal Data for certain business purposes, including:

Storage
Personal Data of our users are stored in our data centers of our third party service providers in Canada and Germany, who act as data processors.

Sharing with our service providers and partners
We use certain service providers and partners to help us operate and improve our Services. These service providers and partners assist us with various tasks, including hosting and maintenance, on-going development, analytics, customer care and marketing.

For certain USA residents, we may also “sell” or “share” your Personal Information, as defined under their respective State’s privacy laws, for the purposes set out below. For more information about your rights as a US resident, please visit the “SUPPLEMENTAL PRIVACY NOTICE AND RIGHTS FOR USA RESIDENTS” section below.

Advertising
We may share your information with advertising partners who distribute advertising in our Services. For further information on the advertising networks which may receive this information, go to ‘APPENDIX A - Advertising networks and their partners’. If you'd like to withdraw consent, or opt-out from having advertisements personalized in this way, please see the ‘Opt-out of targeted advertising’ section.

In addition to the above, we may share your Personal Data in the following circumstances or for the following purposes:

For corporate transactions
We may transfer your information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control.

When required by law
We may also share information if we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation, or to protect the rights, property, or safety of our business, our customers or others.

To enforce legal rights
We may also share information: (i) if disclosure would mitigate our liability in an actual or threatened lawsuit; (ii) as necessary to protect our legal rights and legal rights of our users, business partners or other interested parties; (iii) to enforce our agreements with you; and (iv) to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing.

With your consent or at your request
We may ask for your consent to share your information with third parties. In any such case, we will make it clear why we want to share the information.

Cross-border data transfers
Sharing of information sometimes involves cross-border data transfers, including transfers outside of the EEA in accordance with the law. We only transfer Personal Data to entities in third countries that have provided appropriate safeguards to ensure that their level of data protection is in agreement with this privacy policy and applicable law, under standard contractual provisions which have been deemed by the European Commission to provide sufficient safeguards for Personal Data.

Social sharing features
Some of our Services offer social sharing features which let you share actions you take in our Services with other media. You must be over the minimum age limit that is prescribed by the legislation in the individual jurisdictions to use any social sharing features integrated in our Services. The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. Our Services have social features from the following providers:
Facebook - https://www.facebook.com/about/privacy/
Instagram - https://help.instagram.com/519522125107875?helpref=page_content

5. AGE LIMITS
We appreciate the need to provide extra privacy protections to users who are children. Our Services are intended for general audiences over the age of 18 years and therefore children under the age of 18 years old (or older pursuant to applicable jurisdiction) should not download or use our Services. We do not knowingly collect personal information from children. If you believe that we may have collected personal information from a device of a child under the age of 18 years old (or otherwise as applicable), or for any other relevant reason, please send us a request for deletion and restriction of processing of Personal Data and opt-out from targeted advertising using the email team@topdeck.studio.

6. LINKS TO OTHER SITES​
Our Privacy Policy may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy terms of every site you visit. We have no control over and assume no responsibility for the content, privacy terms or practices of any third-party sites or services.

7. YOUR RIGNTS AND OPTIONS
Under the General Data Protection Regulation (GDPR), you have certain rights regarding your personal data. These rights include:

• Right to access: You have the right to request access to the personal data we hold about you.
• Right to rectification: You have the right to request that we correct any inaccuracies in your personal data.
• Right to erasure: You have the right to request that we delete your personal data in certain situations.
• Right to restrict processing: The right to require us to restrict processing of your personal data in certain circumstances, eg if you contest the accuracy of the data
• Right to data portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit that data to another data controller.
• Right to object: You have the right to object to the processing of your personal data in certain circumstances, including where we use your personal data for direct marketing purposes or in certain other situations to our continued processing of your personal data, e.g. processing carried out for the purpose of our legitimate interests.
• The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you

In addition to the above rights, you also have the option to withdraw consent if we are processing your personal data based on your consent, at any time.

To exercise any of these rights, please follow the instructions under the “EXERCISE YOUR PRIVACY RIGHTS” section found below, and follow the necessary steps. Please note that exercising some of these rights may impact our ability to provide our services to you. We will inform you of any such impact when you make a request to exercise your rights.

8. SUPPLEMENTAL PRIVACY NOTICE AND RIGHTS FOR USA RESIDENTS
We are committed to protecting your privacy and ensuring that your personal information is handled in accordance with applicable privacy laws in the United States, including the California Consumer Privacy Act, Virginia Consumer Data Protection Act, the Colorado Privacy Act and the Connecticut Data Privacy Act (“US Privacy Laws”). For more information about specific states, please visit their relative section below.
To exercise any other rights conferred under US Privacy Laws, please follow the instruction under the “EXERCISE YOUR PRIVACY RIGHTS” section found below, and follow the necessary steps.
We aim to respond to your request for access or deletion within 45 days of receiving that request. If we require more time, we will inform you of the reason and extension period in writing. If we cannot satisfy your request, we will respond to you with our justification for declining to take action. If you wish to appeal this decision, you can contact us through the method provided in “Contact Us” below.

CALIFORNIA
This Supplemental California Privacy Notice only applies to our processing of personal information that is subject to the California Consumer Privacy Act (“CCPA”). The California Consumer Privacy Act (“CCPA”), as amended and expanded by the California Privacy Rights Act (“CPRA”) provides California residents with the additional rights listed here. To exercise these rights, see the “EXERCISE YOUR PRIVACY RIGHTS” subsection below.
Right to know what personal information is collected (Right of Access)
You have the right to know and see what information we have collected about you over the past 12 months, including:

• The categories of information we have collected about you;
• The categories of sources from which the information is collected;
• The business or commercial purpose for collecting your information;
• The categories of third parties with whom we have shared your information; and
• The specific pieces of information we have collected about you.

For more information about specific pieces of information we collect, please visit the “INFORMATION WE COLLECT AND HOW” section above.

• Right to Delete

You have the right to request that we delete the information we have collected from you (and direct our service providers and third parties where your information has been “sold” or “shared” to do the same), unless this proves impossible or involves disproportionate effort. There are a number of exceptions, however, that include, but are not limited to, when the information is necessary for us or a third party to do any of the following:

• Complete your transaction;
• Provide you a good or service;
• Perform a contract between us and you;
• Protect your security and prosecute those responsible for breaching it;
• Fix our system in the case of a bug;
• Protect the free speech rights of you or other users;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.);
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interests that adheres to all other applicable ethics and privacy laws;
• Comply with a legal obligation; or
• Make other internal and lawful uses of the information that are compatible with the context in which you provided it.
• Right to Opt-out

You have the right to “opt-out,” or direct us to stop “selling” or otherwise sharing your information with third parties in exchange for monetary or other valuable consideration. To submit an opt-out request, please follow the instructions under the ‘Opt-out of targeted advertising’ paragraph found below, to configure the Privacy Setting in any of our apps or by checking your device privacy settings.

• Other Rights

You can request certain information about our disclosure of your information to third parties for their own direct marketing purposes during the preceding calendar year (to the extent we have shared information for such purposes within the given period). This request is free and may be made once a year. In certain cases, you may also have the right to correct inaccurate personal information we hold about you. You also have the right not to be discriminated against for exercising any of the rights listed above.

COLORADO, CONNECTICUT AND VIRGINIA
This Supplemental Privacy Notice only applies to our processing of personal information of personal data that is subject to the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”) and the Connecticut Data Privacy Act (“CDPA”). These State Laws provide their respective state’s residents with certain rights listed here. To exercise these rights, see the “EXERCISE YOUR PRIVACY RIGHTS” subsection below.

• Right of Access

You have the right to request from us to confirm whether or not we are processing their personal data and to obtain a copy of the personal data that you have previously provided to us in a portable and, to the extent technically feasible, readily usable format.

• Right of Rectification

Depending on your area, you have the right to request that we correct inaccuracies in their personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data.

• Right of Erasure

You have the right to request that we delete the information we have collected from you.

• Right to object / Right to opt-out

You have the right to “opt-out,” from targeted advertising, to the sale of your personal data, or depending on your state, to profiling in furtherance in decisions that produce legal or similarly significant events. To submit an opt-out request, please follow the instructions under the ‘Opt-out of targeted advertising’ paragraph found above, to configure the Privacy Setting in any of our apps or by checking your device privacy settings.

• Non Discrimination

In certain states, residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the US State Laws.

9. EXERCISE YOUR PRIVACY RIGHTS
To exercise your rights, please visit the Privacy Rights tab in any of our apps by navigating to your app’s homepage, clicking on the Gear Icon (three dots or more), then selecting Privacy Rights to choose the specific rights you wish to exercise. Alternatively, you can reach out to us through the support feature in our apps by going to your app’s homepage, clicking on the Gear Icon, selecting help or support, and then initiating a conversation by clicking the Start Conversation button.
Additionally, you have the option to contact us via email at team@topdeck.studio. However, please note that we might redirect you to use the in-app support feature where your identification is easier to achieve, or request additional information to facilitate your request. All requests are free of charge and will be promptly addressed, typically within one month.
You may also contact your local data protection authority within the European Economic Area or the UK or a relevant national authority for unresolved complaints.

10. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may change from time to time, and we encourage you to review it periodically. Your continued use of our Services signifies your acceptance of changes to this Privacy Policy.

In some cases, we may notify you of changes to this Privacy Policy with a prominent notice on our Services (for example by way of notification or pop-up), before the changes become effective and update the "effective date" at the top of this Privacy Policy.

11. CONTACT US
If you have any questions about this Privacy Policy, please contact us using the in-app support feature in our Services, which is the preferred method to be able to quickly respond your requests or contact our data protection officer at the address provided below:
TopDeck LTD
Limassol, Cyprus
team@topdeck.studio