Last updated: September 24, 2026

Playgroup.gg is operated by Arcane Digital B.V., registered in the Netherlands. This policy explains what personal data we collect, why we collect it, and how you can control it.

1. Data controller

Arcane Digital B.V. is the data controller for playgroup.gg, the Playgroup mobile app, and Playgroup Live. For questions about your data, contact us at privacy@playgroup.gg.

2. What personal data we collect

Account information

When you create an account we collect:

• Email address (used as your login identifier)
• Username (displayed publicly in games and leaderboards)
• Password (stored as a one-way hash, never in plain text)
• Timezone (for scheduling and display purposes)

Single sign-on (OAuth)

If you sign in with Google, Facebook, or Discord, we receive your name, email address, and a provider-specific user ID. We do not receive or store your password from these services.

Sign-in and security data

• IP address at sign-in (current and previous)
• Sign-in timestamps and sign-in count

Device and game data

When you synchronize games from the mobile app we store:

• Operating system
• Device model name

This helps us prioritize development across platforms.

Gameplay data

We store game results, deck lists, commander choices, game events (life changes, eliminations, turns), and statistics derived from this data (ELO ratings, win rates, Playscore). This data powers leaderboards, statistics pages, and your personal game history.

Voice chat and cameras

Playgroup Live includes optional voice chat and, in beta, optional cameras: a player can point a webcam at their playmat to play their physical cards at the table. Both run on LiveKit, which we host on our own servers. Voice audio and camera video are transmitted in real time and are never recorded or stored. They reach the people in that game: the players, and anyone watching who has joined the table's voice, which in a public game can be someone without an account. No audio or video goes to a third party, and a replay shows the moves the table made, never the video. We store your voice preference per game session (talk, listen, or off), any user mutes you set, and whether you played a game on camera. Which camera you use and which way it is turned is saved in your browser only.

When someone at the table clicks a card on a camera, an image cut around that card is sent to our own card recognition service to name it. It is used to answer that one request and is not stored. If you pair a phone as your camera, you scan a code from your screen and the phone needs no login: we set a cookie on it so only that phone can reconnect to that one game for 12 hours, and we note what kind of device it is (for example "iPhone") so your seat can name it.

Text chat

Playgroup Live includes optional text chat between the players in a game. Chat messages are ephemeral: they are held only in temporary server memory (Redis) while the game is in progress and for 24 hours after the game ends, so a player can still raise a problem with another player right after a game, and are then deleted automatically. If a game is never finished they are removed after 48 hours. We do not retain chat messages long-term, include them in your game history, or use them for statistics or any other purpose, except when a player reports another player (see below). Spectators cannot see or send chat. We do not actively monitor chat; you can mute another player to hide their messages.

Player reports and restrictions

In a public game you can report another player. The report stores who reported whom, in which game, the reason and any details you write. If that game had text chat, a copy of the chat as it was at that moment is attached to the report, including other players' messages, so we can see what happened. The chat copy is deleted after 90 days; the rest of the report is kept so we can recognise repeated problems. Reports are read only by our team and never shown to the reported player, who is not told who reported them. If we restrict an account from public games, we keep a record of the restriction, its reason and how long it lasts, and email the account holder about it.

Card scanning photos

The deck editor can use your camera to read physical cards and add them to a deck. The photo is taken and processed on your own device; what leaves your browser is a set of small cropped images, one per detected card, sent to our card recognition service so it can identify them. Those crops are used to answer that one request and are not stored.

You can separately choose to help us improve recognition. This is off unless you turn it on, and nothing is kept while it is off. If you do turn it on, we keep the recognition scores for that scan and a 256×256 greyscale copy of each card crop we sent for recognition, together with whether the card we guessed was right and, if you corrected it, what the card actually was. That correction is the part that makes recognition better, which is the only reason we ask.

Two things worth being plain about. A crop is cut around one detected card, so it can carry a sliver of whatever the card was lying on; the rest of your table is not in it. Location and camera metadata cannot survive the conversion and are never stored. These images are kept for 14 days, and the scores and right-or-wrong record for 30 days, tagged with a random id for that scanning session so we can tell which crops were taken together. Both are then deleted automatically, are never published, and are never used for anything except improving card recognition. You can turn the setting off at any time, and deleting your account removes anything still inside that window.

The scanner also has a feedback button. If you attach the photo of your scan to a piece of feedback, that is a separate, deliberate choice each time: we keep that photo with your feedback, at reduced size, to reproduce the problem and to test the scanner against it. It is the whole photo, so please only attach one you are happy for us to see.

Payment data

Supporter subscriptions are processed by Stripe. We store a Stripe customer ID and subscription ID on our servers. We do not store credit card numbers, bank account details, or other payment credentials. Stripe handles all payment processing as an independent data controller under their own privacy policy.

3. How we use your data

• To operate your account, authenticate sign-ins, and deliver the service
• To track game statistics, leaderboards, and league standings
• To process supporter subscriptions and deliver associated features
• To send service-related emails (you can opt out of non-essential emails in your account settings)
• To improve the platform based on aggregated, anonymized usage patterns

4. Cookies and tracking technologies

We use the following cookies and tracking technologies:

5. Third-party services

We share data with or use the following third-party services:

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties.

6. Data retention

7. Account deletion

You can delete your account at any time from your account settings. When you delete your account:

• Your email is replaced with a placeholder and your username is set to "Deleted User"
• Your password is randomized and your profile is made private
• Your decks are archived and hidden
• Your API keys are revoked
• Your playgroup memberships are removed
• Historical game records are retained in anonymized form for statistical integrity

8. Your rights under GDPR

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Data portability
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, email privacy@playgroup.gg.

9. Children

Playgroup.gg is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Advertising

Playgroup.gg does not currently display third-party advertising.

11. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the website. The "last updated" date at the top of this page indicates when the policy was most recently revised.

12. Contact

If you have questions about this privacy policy or your personal data:

• Email: privacy@playgroup.gg
• Entity: Arcane Digital B.V., the Netherlands