Castle Cards

Privacy Policy

Effective date: September 14, 2026

Castle Cards ("the App", "we", "us") is a single-player castle-siege card game published by Pixy Digital. This policy explains what information is collected when you use the App, how it is used, and the choices you have. By using the App you agree to this policy.

1. Information we collect

• Game progress. Your campaign progress, card levels, castle upgrades, decks, gold and settings are saved in a file on your device. We do not upload it. It may be included in your device's own backups (iCloud or Google backup) according to your device settings.
• Advertising data. The App shows interstitial advertisements served by Google AdMob after some matches. AdMob may collect your device's advertising identifier, IP address, approximate location derived from it, device model and operating system version, and ad interaction data in order to serve, measure and, where you consent, personalize ads. On iOS the App asks for permission through App Tracking Transparency before any tracking; in the European Economic Area, the United Kingdom and Switzerland a consent form is shown before any ad loads. If you decline, ads are still shown but are not personalized.
• Purchase data. The "Remove Ads" purchase is processed by Apple's App Store or Google Play and validated through RevenueCat. We receive an anonymous app user identifier generated on your device, the purchase receipt and the entitlement status. We never see or store your payment card details or your store account name.
• Usage statistics. The App sends anonymous gameplay events to Google Analytics for Firebase: session start, which chapter was played, the cards in your deck and their levels, match result and duration, rewards, and castle upgrades, together with app version, device model, operating system, language, country (derived from IP address) and a random installation identifier that is not linked to your identity. We use this to balance the game and see where players get stuck. No names, e-mail addresses or precise locations are collected, and we never join this data with advertising identifiers.
• Crash reports. If the App crashes or hits an error, Firebase Crashlytics sends a report containing the stack trace, device model, operating system version, free memory and storage, app version and a random installation identifier, so that we can fix the bug.

We do not ask for your name, e-mail address, contacts, photos, camera, microphone or precise location. There is no chat and no user-generated content.

2. How information is used

• To save and restore your game progress on your device.
• To show advertisements and measure them (AdMob), and to hide them permanently once you buy "Remove Ads".
• To process, verify and restore your purchase across devices (Apple, Google, RevenueCat).
• To understand how the game is played, balance chapters and cards, and find and fix crashes (Firebase).
• To comply with legal obligations.

3. Legal bases (EEA / UK)

• Consent: personalized advertising and, on iOS, tracking.
• Performance of a contract: delivering the "Remove Ads" purchase.
• Legitimate interests: showing non-personalized ads to fund a free game, measuring anonymous gameplay to balance it, fixing crashes, preventing fraud, and keeping the App secure. Where you are asked for consent and decline, analytics runs without persistent identifiers.

4. Third parties

These partners process data under their own privacy policies:

• 1 · Google AdMob (advertising) receives advertising identifier, IP address, device data and ad interactions · policies.google.com/privacy · how Google uses data in ads
• 2 · Apple App Store, Google Play and RevenueCat (purchases) receive the purchase receipt and an anonymous app user identifier · apple.com/legal/privacy · policies.google.com/privacy · revenuecat.com/privacy
• 3 · Google Analytics for Firebase (usage statistics) receives anonymous gameplay events, device data and a random installation identifier · firebase.google.com/support/privacy
• 4 · Firebase Crashlytics (crash reports) receives stack traces, device state and a random installation identifier · firebase.google.com/support/privacy

We do not sell your personal information and we do not share it with anyone else.

5. Your choices

• Personalized ads: change your choice at any time in your device settings (iOS: Settings ▸ Privacy & Security ▸ Tracking, and Settings ▸ Castle Cards; Android: Settings ▸ Google ▸ Ads ▸ "Delete advertising ID" or "Opt out of Ads Personalization"). If you were shown a consent form, you can withdraw consent the same way; ads then stop being personalized.
• No ads at all: buy "Remove Ads" once in Settings. Use "Restore purchases" on a new device.
• Delete your data: uninstalling the App deletes your saved game and stops all collection. Analytics and crash data are stored under a random installation identifier; if you e-mail us that identifier is not recoverable by us, but you can ask and we will delete what can be attributed to your request. Advertising and purchase partners can be contacted through the links above.

6. Data retention

Your saved game stays on your device until you delete it. Analytics events are retained by Google Analytics for Firebase for up to 14 months and crash reports by Crashlytics for 90 days. Purchase records are kept by Apple, Google and RevenueCat for as long as required to honour your purchase and by law.

7. Children

The App is not directed at children under 13 (or the age required by your country), and we do not knowingly collect personal information from them. If you believe a child has provided personal information through an advertising partner, contact us and we will help you have it removed.

8. Security

Saved games are stored in the App's private storage on your device. Purchase validation uses encrypted connections (HTTPS). No system is perfectly secure, and we cannot guarantee absolute security of data handled by third parties.

9. International transfers

Our advertising and purchase partners may process data in the United States and other countries. They rely on standard contractual clauses or equivalent safeguards where required.

10. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, the CCPA or the Turkish KVKK) you may have rights to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to lodge a complaint with a supervisory authority. The only data we hold ourselves is anonymous analytics and crash data in Firebase; requests about advertising or purchases are best directed to the partner listed in section 4. We will assist you either way if you contact us.

11. Changes

We may update this policy from time to time. The effective date at the top shows the latest version; significant changes will also be announced in the App.

12. Contact

Pixy Digital · ozan.zengin@pixydigital.com