Version 2026-11-03
Controller
The controller of your data is the owner of Online Pack Battle, an individual based in Spain. You can get in touch using the details at the end of this policy.
Data we keep
Account: email address (to sign you in), username, display name, optional profile photo, optional country and region, and optional social handles. Game: openings, small photos of recognised cards, scores, duels, appeals, moderation, reports and statistics. Preferences: language, theme and your consents (feed and sharing) with the date you gave them. Purchases: what you buy, when, the amount and your balance; payment details are handled by the payment provider, not by us. Technical: access and security logs, such as your IP address. Messages you send us through the Inbox (the text, the app page you wrote from, your device and language). We confirm you are at least 16 but never store your date of birth. Camera video never leaves your device: cards are recognised on it and we only receive the card photos and the score.
Why and on what basis
Running your account, the game, duels, rankings and your profile (performance of the contract). Selling and delivering purchases and meeting tax obligations (contract and legal obligation). Verifying openings, preventing cheating, moderating and protecting the service (legitimate interest in a fair and safe game). Showing your openings in the feed and posting them on our channels (your consent, which you can withdraw at any time). Sending service emails, such as your sign-in link (contract). Answering the messages you send us through the Inbox (contract and legitimate interest). We do not sell your data or use it for personalised advertising.
What is public
Your username, display name, profile photo, level, league, ranking and optional social handles are visible to other players and on your public profile. Your openings only appear in the feed and on our channels if you have turned that on.
Providers
We use providers that process data on our behalf: Supabase (database, sign-in and storage), Cloudflare (hosting and network), Resend (email delivery) and a payment provider for purchases. Some may process data outside the European Economic Area, for example in the United States; when they do, it is under GDPR safeguards (EU-US Data Privacy Framework or standard contractual clauses). YouTube and TikTok only receive data if you play an embedded video, and they act as independent controllers.
Public feed
Only if you turn on “Show my openings in the public feed” in Settings (off by default), the link to your verified YouTube or TikTok openings is shown inside the app to other signed-in players, together with your username, the set, the points and the number of cards. You can turn it off at any time, or hide a single opening, and it stops appearing in the feed. Videos are embedded from YouTube or TikTok and played by them under their own terms and privacy policies; nothing is loaded from them until a viewer taps a video.
How long
We keep your data while you have an account. If you delete it in Settings, we erase your profile, your photos and your card photos. Some data is kept longer only where the law requires it or to defend against claims: purchase records for up to 6 years for tax and commercial obligations, and security and moderation logs for as short a time as possible. Anonymous results with nothing that identifies you may remain in statistics. If you wrote to us through the Partnerships channel, we keep that conversation and your username as a business contact even after you delete your account; you can ask us to erase it.
Your rights
You can access, correct or erase your data, object to its processing, ask us to restrict it or give it to you in a portable format, and withdraw your consents at any time. You can edit your profile and delete your account in Settings; for anything else, write to us and we will reply within one month. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
Age
Online Pack Battle is for people aged 16 or older. If we learn that an account belongs to someone younger, we will delete it.
Cookies
We only use cookies and local storage that the service needs to work: keeping you signed in, remembering your language, theme and the last game you picked, and protecting the service. We do not use analytics or advertising cookies, so we do not ask for consent for them. If we ever add them, we will ask you first.
Changes
If we change this policy materially, we will let you know in the app. The date of the current version is shown above.
Contact
Controller: owner of Online Pack Battle, Spain. To exercise your rights or ask a question, write to info@packbattle.site or use the Support channel in your Inbox.