CardForgeCollect Privacy Policy

Updated October 1, 2026

CardForgeCollect is operated by Terran Pitts. This policy describes the information used to run the game, save your collection, connect players, and handle purchases. For privacy questions, contact cardforgecollectmail@gmail.com.

Account and game information

When you create an account, we store your email address, player name, account identifier, a protected password hash, and account settings. We store your cards, currencies, cosmetics, equipped avatar, progress, rewards, game results, and battle information to operate the game and synchronize your signed-in progress across devices. Your password is not shown to the game owner or other players.

Your device also stores preferences and game state locally. A session cookie keeps you signed in. Sign-in protection uses a hashed combination of email and connection IP address to limit repeated attempts. Hosting services process connection information and technical logs to deliver and secure the service.

Profiles, friends, messages, and trading

Your player name, avatar, selected cosmetics, and collection or battle statistics can appear in profiles, rankings, and other game screens. Friends can see activity information. Your account email is not displayed to other players.

We store friend requests, friendships, blocks, and messages to provide social features. Messages are available to the people in that conversation. We store trade offers, participating account identifiers, exchanged items, auction listings, bids, and deliveries to complete transactions, resolve disputes, and protect the game economy. Relevant player names, cards, and listing details are visible to the other participants or players browsing the Auction House.

Purchases

Apple processes purchases made through the iPhone app. Where website checkout is available, Stripe processes those payments. CardForgeCollect receives purchase and entitlement information, such as product identifiers, transaction identifiers, purchase dates, subscription status, and refund or revocation information. We connect those records to your game account to deliver items, restore eligible purchases, manage memberships, and prevent duplicate delivery or fraud. We do not receive your full payment card number from these purchase flows.

Apple and Stripe handle information under their own privacy policies. Cards and in-game currencies have no cash value. Deleting a CardForgeCollect account does not cancel an Apple subscription; manage subscriptions in your Apple account settings.

Support, administration, and email

The game owner can access account emails in private administration tools for account support. Moderators and other players cannot access that email list. Support requests include the information you choose to send, such as your player name, issue details, screenshots, or a receipt. Do not send your password or full payment card details.

Password-reset emails are delivered through Resend. Reset links expire after 30 minutes and can be used once. The optional game-update email setting starts off; enabling it adds your address to the owner's update contact list. You can turn it off in Settings to remove your address from that list.

Service providers

We use hosting and database infrastructure, including Cloudflare through the Sites hosting service, to operate the game; Resend to deliver account email; and Apple or Stripe for the applicable purchase flow. These services receive information needed for their role. Information may be processed in locations other than where you live.

Your choices and deletion

You can change your player name, avatar, and preferences in the game, turn optional update emails off, and block other players. You can initiate account deletion in Settings after confirming your password. Active auctions and outstanding auction deliveries must be resolved first. If account deletion fails or you need help accessing or correcting your information, contact support.

Account and saved-progress records are kept while your account remains active. Account deletion removes your account, sessions, saved collection, and account-linked social records. Purchase, transaction, and economy audit records can remain after account deletion to handle refunds, disputes, fraud prevention, and recordkeeping. Support correspondence and records held by payment or hosting providers may also remain under their applicable retention practices. Ask support about any remaining information associated with your account.

Local device data is separate from server records and can be removed by clearing the app or browser's stored data. Clearing local data alone does not delete a server account.

Policy updates and contact

We update this page when our data practices change. The date above identifies the latest update. For privacy requests or concerns, email cardforgecollectmail@gmail.com.