🔒 Privacy Policy

1. What we collect

When you use Axie Duel, we receive and store the following:

• Authentication data: email address and Google account ID (if you sign in with Google), Ronin wallet address and Waypoint user ID (if you sign in with Ronin Waypoint).
• Account & progression: your decks, owned cards, dust balance, match history, ladder rating, and similar gameplay state needed to run the game.
• Public Axie data: if you link a Ronin wallet, we fetch the publicly-available Axie NFTs associated with that address from Sky Mavis' public GraphQL API to render them as cards. We do not request transaction signing or private keys.
• Technical logs: IP address, browser type, request timing, and error traces — kept for short periods to debug issues and protect against abuse.

We do not collect or store passwords, payment card numbers, real-name identity, or precise location.

2. How we use your data

• Authenticate you and maintain your session.
• Run the game — matchmaking, real-time battles via our game server, persist deck and progression.
• Operate the service — debug crashes, monitor performance, prevent cheating and abuse.
• Communicate beta updates or important account notices via the email associated with your account.

We do not use your data for advertising, sell it to third parties, or share it for purposes outside running this game.

3. Third-party services

We use the following third parties to operate Axie Duel:

• Google Identity — for "Sign in with Google". Google Privacy Policy.
• Sky Mavis (Ronin Waypoint, Web3 API) — for "Sign in with Ronin" and reading public Axie NFT data. Sky Mavis Privacy Policy.
• Vercel — hosts the web client and serves static assets. Vercel Privacy Policy.
• Railway + Supabase — host the API, game server, and Postgres database storing your gameplay state. Railway Privacy · Supabase Privacy.

4. Data retention

Account and gameplay data is retained while your account is active. If you delete your account, we remove your personal data within 30 days, with the exception of:

• Anonymized aggregate stats (e.g., total matches played per card) — retained for game balance analysis with all personal identifiers removed.
• Records we are required to keep by law (none expected during beta).

During beta, we may reset all gameplay progression between testing phases — we will give reasonable notice when this happens. Authentication identifiers (so you can re-login) will not be wiped except on explicit account deletion.

5. Your rights

You can, at any time, request that we:

• Provide a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Stop sending you non-essential emails.

Send requests to anuarissa117@gmail.com from the email address associated with your account. We aim to respond within 7 days during beta.

6. Security

We use industry-standard transport encryption (HTTPS/TLS), short-lived authentication tokens (signed JWTs with appropriate expiration), and managed cloud infrastructure with access controls. Despite these measures, no system is 100% secure; if a breach occurs, we will notify affected users without undue delay.

7. Children

Axie Duel is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this Privacy Policy as the product evolves. Material changes will be communicated via the Service or via the email associated with your account.

9. Contact

Privacy questions or requests: anuarissa117@gmail.com · Open source at github.com/anuarissa/axie-duel.