Privacy policy

1. Data we collect

• Account data: email address, name or nickname, password (stored encrypted by our authentication provider) and profile type (player or creator).
• Profile and game data: avatar, frame, decks, cards and inventory, games, history, replays and rewards.
• Creator content: TCGs, rules, cards, images, audio, tutorials, products and any other files you upload.
• Payment data: when you buy a plan, a Jev top-up, a product from a shop or make a donation, the payment is processed by Stripe. We never see or store your card number; we only receive the payment status, amount, currency and transaction identifiers.
• Technical data: IP address, approximate country, browser type, language, time zone and usage logs needed for security, abuse prevention and operation.
• Communications: messages you send us through the contact form, Discord or email, and your newsletter subscription if you opt in.

2. How we use your data

• To provide the service: create and maintain your account, save your games and content, and display published TCGs.
• To manage plans, limits, Jev token balance, charges, invoicing and refunds.
• Security: verify you are not a bot, prevent fraud, abuse and cheating, and apply suspensions when appropriate.
• To improve the platform and fix errors.
• To send you service communications and, only if you agree, news and newsletters (you can unsubscribe at any time).
• To comply with legal, accounting and tax obligations.

3. Jev advanced AI

When you play against Jev, we send a summary of the game state (cards, zones and available options) to an AI model provider so it can choose the move. We do not send your email, name or payment data. We record the tokens consumed to deduct them from the TCG balance.

4. Who we share your data with

We do not sell your personal data. We only share it with providers that help us run the service, under their own confidentiality and security obligations:

• InsForge: database, authentication and file storage.
• Vercel and Cloudflare: hosting, content delivery, real-time games and bot verification (Turnstile).
• Stripe: payment processing. For plans and top-ups, Stripe may act as merchant of record (Managed Payments) and process your data under its own privacy policy.
• Amazon Web Services (SES): email delivery.
• AI model provider (through Vercel AI Gateway): Jev decisions.
• TCG creators: if you play a TCG, its creator and team can see your player name, progress, purchases in their shop and email in order to manage their community.
• Authorities, when required by law.

5. International transfers

Our providers may process data outside your country, mainly in the United States and the European Union. We choose providers that apply appropriate safeguards.

6. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and remember your language, preferred currency and game settings. We do not use third-party advertising cookies.

7. How long we keep your data

We keep your data while your account is active. If you delete it, we will delete or anonymise your personal data within a reasonable period, except what we must keep for legal or tax obligations (for example, payment records) or to resolve disputes.

8. Your rights

You can request access, rectification, deletion, objection, restriction or portability of your data, and withdraw your consent to communications, by writing to maraheapps@gmail.com. We will reply within the time limits set by applicable law. You may also file a complaint with the data protection authority of your country.

9. Minors

Engine TCG is not directed at children under 13. If you are a minor under the laws of your country, you need permission from a parent or guardian to use the service and make purchases.

10. Security

We apply reasonable technical and organisational measures: encrypted connections, row-level access control in the database, bot verification and usage limits. No system is infallible; if we detect a breach that affects you, we will let you know.

11. Changes to this policy

We may update this policy. We will publish the current version on this page with its date and, if the change is significant, we will notify you by email or within the platform.

12. Contact

For any privacy question write to us at maraheapps@gmail.com.