This page explains how CardyCraft collects, uses, and protects personal data and cookies
on our website and services. By using the site, you agree to this policy.
Data we collect
Account data: email, username, password hash, and profile details you choose to provide.
Subscription and purchase data: tier, status, order IDs, prices, and checkout metadata.
Linked accounts: Discord/Patreon IDs and link status (when you connect them).
Commissions and contact forms: details you submit for quotes or support.
Reviews: messages and images shared in our Discord reviews channel.
Technical and analytics data: IP hash, user agent, pages visited, clicks, time on page,
and country derived from GeoIP.
How we use data
Provide access to maps, subscriptions, and user libraries.
Process purchases, manage orders, and handle refunds or disputes.
Sync tiers and permissions across connected services like Discord.
Respond to commission requests and support messages.
Improve performance, security, and content quality with analytics.
Sharing and processors
We do not sell your data. We share limited data only with service providers needed to run the site:
Payments: Stripe handles card and wallet payments.
Security: Google reCAPTCHA helps block abuse.
Social login and linking: Discord, Google, and Patreon for OAuth.
Email: SMTP provider for account and purchase notifications.
File delivery: external download hosting (for large map files).
Infrastructure: hosting, CDN, and security services.
Payments
CardyCraft does not store full card details. Payment data is processed by Stripe.
Cookies and local storage
Essential: session cookies, CSRF tokens, and security features.
Preferences: theme and cookie consent settings.
Analytics (optional): anonymous usage metrics to improve the site.
Third-party: reCAPTCHA, payment checkout, and OAuth providers may set their own cookies.
Your choices and rights
Accept or reject optional cookies with the banner or the button below.
Clear cookies and local storage in your browser at any time.
Request access, correction, or deletion of your data by contacting us.
Disconnect linked accounts inside your Account settings.
Data retention
We keep data only as long as needed for the purposes above or as required by law.
Security
We use encryption in transit, access controls, and monitoring to protect your information,
but no system is 100% secure.