PLAYER INFORMATION

Privacy Policy

Last updated: October 14, 2026

This policy explains how Digital Villainous at digitalvillainous.com handles information when you use accounts, solo and local play, online matches, social features, and rewards. Contact the site operator at markeschilders@gmail.com with privacy questions.

Information used by the game

• Accounts: an authentication identifier, username, selected avatar, profile appearance, title, role, account status, and account creation information. Our authentication provider, Clerk, processes sign-in details such as email addresses, credentials, connected accounts, and session information.
• Gameplay and rewards: room membership, moves and game state, match results, rankings, statistics, replay records, achievements, token balances, reward purchases, reversals, and event grants.
• Social and support features: friend or block relationships, invitations, community events, messages you send through the service, reports, report evidence, moderation actions, and information you send when contacting support.
• Technical information: hosting and authentication services may process IP addresses, browser and device information, request timestamps, errors, and security logs to deliver and protect the service.

Google sign-in

If you choose Google sign-in, Google supplies basic account information to Clerk, including your Google account identifier, email address and verification status, and basic profile information such as your name and profile picture. This information is used to authenticate you, create or connect your account, and support account security. The game associates your authenticated account identifier with your game profile and username.

Google sign-in does not give Digital Villainous your Google password. This integration requests basic identity, email, and profile access; it does not request access to Gmail messages, Google Drive files, or contacts. Google sign-in information is not used for advertising or sold. Its use and transfer are limited to providing authentication and related user-facing account features, security, and applicable legal obligations, consistent with the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Why information is processed

We use information to sign you in, restore your account, run and synchronize matches, save progress, show rankings and rewards, provide social features and replays, respond to support requests, investigate bugs and cheating, and enforce fair-play rules. We also process information when needed to meet applicable legal obligations. Depending on your location and the processing involved, the relevant legal basis may be providing the service you request, legitimate interests in operating and securing it, consent, or a legal obligation.

What other people can see

Your username, avatar, title, selected cosmetics, and gameplay or ranking information can be visible to other players through profiles, matches, and community features. Messages are visible to their recipients. Spectating and replay sharing can expose recorded gameplay, including card information contained in the recording. Anyone who receives a shared replay link may be able to view and reshare it. Avoid putting private information in your username, messages, or other shared content.

Optional room voice

Online players can choose to join room voice and allow microphone access. Audio is sent to other participating players and moderators or Devs who explicitly join as staff listeners while spectating, through browser connections with a relay when configured. Staff listeners are labeled in the voice roster and do not activate a microphone. The game does not record or transcribe voice. Connection setup exchanges network information with participating browsers and connection services. Short-lived room presence and connection messages are stored to establish calls; expired messages are removed during subsequent voice activity. You can mute your microphone, mute other players, or leave voice. Leaving the room or page stops the game’s microphone capture.

Service providers and disclosures

We use Clerk for authentication and OpenAI Sites and Cloudflare infrastructure for hosting, storage, and delivery, including online synchronization. These providers process information needed for their services. Google processes information when you choose Google sign-in; optional external connections such as Discord are governed by those providers' policies as well. Relevant information may also be disclosed when required by law or reasonably necessary to investigate abuse, protect people or the service, or handle a dispute.

Provider information: Clerk privacy policy, OpenAI privacy policy, Cloudflare privacy policy, and Google privacy policy. Providers may process information in countries other than your own.

Sol Credits payments

When you buy Sol Credits, PayPal handles payment and payment-method entry on its checkout page. The game stores your account-linked top-up amount, payment identifiers, payment status, refunds or disputes, and Sol usage charges and holds. Card numbers and card security codes are not stored by the game. Payment information is handled under PayPal’s privacy policy.

Cookies and device storage

Authentication uses cookies or similar browser storage to maintain sessions. The game also uses local browser storage for settings, device-based saves, and replay access information. Returning to the same browser can restore a valid sign-in session. Signing out ends your active sign-in; clearing site data may remove local saves and settings and require you to sign in again. Shared devices should be signed out after use.

Retention and security

Account and gameplay records are kept as needed to provide account history, progress, rewards, and multiplayer features. Security, moderation, and transaction records may be retained where needed to investigate abuse, resolve disputes, or meet legal obligations. Retention depends on the type of record and its purpose; removing an account does not necessarily remove another player's match history or copies of content they already received. Access controls and authenticated requests help protect data, but no online service can guarantee absolute security.

Your choices and requests

You can manage available account settings in the game and delete replays where a delete control is provided. You can revoke Google access through your Google account connections; revoking access does not itself delete game records.

To request access, correction, a copy, or deletion of your account and associated data, email markeschilders@gmail.com with your username and request. Do not send passwords or authentication codes. We may need to verify account ownership. Tell us if your request covers both the game profile and authentication account. Some information may need to be retained for the reasons above, and backup removal may take additional time. Depending on your location, you may also have rights to object, restrict processing, withdraw consent, or complain to your local data protection authority.

Children and parents

If you are a parent or guardian concerned that a child provided personal information through the service, contact us to request review and removal. Do not share a child's sensitive information in public game messages.

Changes and contact

Updates will be posted here with a revised date. Material changes to data use will be accompanied by an appropriate notice and, where required, a request for consent. For questions or requests, contact markeschilders@gmail.com.