Privacy Policy

Who we are

Card Crush is made by Dev10 Studios, based in London, United Kingdom. This policy explains what the Card Crush app ("the game") collects, why, and what you can do about it. Questions go to contact@deandev10.info.

The short version

• No accounts, emails, passwords, names, phone numbers or contacts are ever asked for.
• No advertising, analytics or tracking SDKs are in the game.
• The game knows you by your public Solana wallet address, and only after you choose to sign in.
• Leaderboards are public: they show your .skr name or shortened wallet address next to your scores.

What we store and why

When you sign in with your Seeker wallet, our game server stores the following against your public wallet address:

• Game balances: your coins, Smash and Shuffle boosters, and daily reward streak, so they can't be lost or tampered with.
• Level results: each level attempt (a random starting seed, the boosters used and the final score) and your best score and stars per level. We use these to check scores are genuine, rank the leaderboards, and restore your progress on a new phone.
• Purchases: the Solana transaction ID, coin pack and USDC amount of each purchase, so it is credited exactly once.
• Coin spends and gifts: what you spent coins on, and which Seeker Genesis Token claimed the one-time gift.
• Your .skr name: if your wallet has a Seeker domain name, we look it up from the public Solana blockchain about once a day to show it on the leaderboard.

Without signing in you can still play; your progress then stays only on your phone.

Signing in and payments

Sign-in uses Sign In With Solana: your wallet signs a one-time message to prove you own the address. We never see or store your private keys or seed phrase. Purchases are USDC transfers you approve in your own wallet; they are recorded on the public Solana blockchain, which we read to confirm the payment. We never handle card or bank details.

Stored on your phone

The game saves your settings, level progress, lives and a sign-in session on your device so it works offline. Uninstalling the game removes them, unless your phone's own backup restores them.

Service providers

Our game server and database run on Cloudflare, and this website on Vercel. Like any web service, they process your IP address briefly to deliver requests; we do not store it. We read public blockchain data through a Solana RPC provider (Helius).

Legal basis

Under UK and EU data protection law, we process this data because it is necessary to provide the game you asked to play (contract), and for our legitimate interest in keeping the leaderboards fair and preventing fraud.

How long we keep it

Unfinished level attempts expire after 24 hours and are then cleared out. Everything else is kept while you play, and deleted on request. Purchase records may be kept as long as the law requires for accounting.

Your rights

You can ask for a copy of your data, its correction, or its deletion (which removes you from the leaderboards and resets your balances) by emailing contact@deandev10.info from any address with your wallet address. You can also complain to the UK Information Commissioner's Office (ico.org.uk). Transactions already on the Solana blockchain are public and can't be removed by anyone.

Children

Card Crush is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, we'll update the date above and post the new version on this page.