Last updated: May 19, 2025
Playgroup.gg is operated by Arcane Digital B.V., registered in the Netherlands. This policy explains what personal data we collect, why we collect it, and how you can control it.
1. Data controller
Arcane Digital B.V. is the data controller for playgroup.gg, the Playgroup mobile app, and Playgroup Live. For questions about your data, contact us at privacy@playgroup.gg.
2. What personal data we collect
Account information
When you create an account we collect:
- Email address (used as your login identifier)
- Username (displayed publicly in games and leaderboards)
- Password (stored as a one-way hash, never in plain text)
- Timezone (for scheduling and display purposes)
Single sign-on (OAuth)
If you sign in with Google, Facebook, or Discord, we receive your name, email address, and a provider-specific user ID. We do not receive or store your password from these services.
Sign-in and security data
- IP address at sign-in (current and previous)
- Sign-in timestamps and sign-in count
Device and game data
When you synchronize games from the mobile app we store:
- Operating system
- Device model name
This helps us prioritize development across platforms.
Gameplay data
We store game results, deck lists, commander choices, game events (life changes, eliminations, turns), and statistics derived from this data (ELO ratings, win rates, Playscore). This data powers leaderboards, statistics pages, and your personal game history.
Voice chat
Playgroup Live includes optional voice chat powered by LiveKit, which we host on our own servers. Voice audio is transmitted in real time between players and is never recorded or stored. No audio data leaves our infrastructure. We store your voice preference per game session (talk, listen, or off) and any user mutes you set.
Payment data
Supporter subscriptions are processed by Stripe. We store a Stripe customer ID and subscription ID on our servers. We do not store credit card numbers, bank account details, or other payment credentials. Stripe handles all payment processing as an independent data controller under their own privacy policy.
3. How we use your data
- To operate your account, authenticate sign-ins, and deliver the service
- To track game statistics, leaderboards, and league standings
- To process supporter subscriptions and deliver associated features
- To send service-related emails (you can opt out of non-essential emails in your account settings)
- To improve the platform based on aggregated, anonymized usage patterns
4. Cookies and tracking technologies
We use the following cookies and tracking technologies:
| Technology | Purpose | Type |
|---|---|---|
| Session cookie | Keeps you signed in | Essential |
| UTM/attribution cookies | Tracks how you found us (encrypted, 30-day expiry) | Functional |
| Matomo (self-hosted) | Page view analytics on our own servers | Analytics |
| Google Analytics (GA4) | Aggregated usage analytics | Analytics |
| Meta Pixel | Advertising measurement | Marketing |
5. Third-party services
We share data with or use the following third-party services:
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, payment details (handled by Stripe directly) |
| LiveKit (self-hosted) | Voice chat relay | Real-time audio stream on our servers (not recorded, no third-party access) |
| Scryfall | Card data and images | No user data sent; card data retrieved from their public API |
| Google, Facebook, Discord | Single sign-on (optional) | OAuth token exchange only when you choose to sign in via these providers |
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties.
6. Data retention
| Data | Retention |
|---|---|
| Email and username | Until account deletion |
| Sign-in IP addresses | Until account deletion |
| Operating system and device model | Until the associated game is deleted |
| Gameplay data and statistics | Indefinitely (anonymized on account deletion) |
| Internal analytics events | 12 to 24 months (automatically pruned) |
| Voice audio | Not stored |
| Payment records (Stripe IDs) | As required by Dutch tax law (7 years) |
7. Account deletion
You can delete your account at any time from your account settings. When you delete your account:
- Your email is replaced with a placeholder and your username is set to "Deleted User"
- Your password is randomized and your profile is made private
- Your decks are archived and hidden
- Your API keys are revoked
- Your playgroup memberships are removed
- Historical game records are retained in anonymized form for statistical integrity
8. Your rights under GDPR
If you are in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your personal data
- Data portability
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, email privacy@playgroup.gg.
9. Children
Playgroup.gg is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Advertising
Playgroup.gg does not currently display third-party advertising.
11. Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the website. The "last updated" date at the top of this page indicates when the policy was most recently revised.
12. Contact
If you have questions about this privacy policy or your personal data:
- Email: privacy@playgroup.gg
- Entity: Arcane Digital B.V., the Netherlands