Privacy Policy

Information we collect

• Account and identity: an anonymous Card Flick identifier, generated or chosen leaderboard name and, if connected, Google Play Games player identifier, public name and available profile image.
• Game activity: progress, scores, levels, XP, coins, lightning, challenges, inventory, abilities, rewards, economy activity, playtime and notification status.
• App and device: app version, platform, random installation identifier, push token, advertising identifier where available, language, approximate region and diagnostics.
• Service and purchases: server requests, anti-cheat signals, errors, product, purchase token and status needed to verify a Google Play purchase. We do not receive full payment-card details.

Some progress and preferences are stored locally so Card Flick can operate offline and restore a session.

How information is used

Information is used for gameplay, offline recovery, leaderboards, rewards, Google Play Games connection, notifications, purchases, service performance, game balance, support, anti-cheat, fraud prevention and legal or platform obligations.

Advertising and notifications

Card Flick uses Google AdMob for rewarded and interstitial ads. AdMob may process device and advertising identifiers, IP-derived approximate location, ad interactions and diagnostics. Card Flick requests non-personalised ads, which may still use limited information for delivery, frequency control, security and reporting. Where required, Google's User Messaging Platform presents privacy choices.

If notifications are allowed, Firebase Cloud Messaging uses a push token for alerts, rewards and game updates. You can disable notifications in Android settings.

Providers and sharing

We do not sell personal information. Google provides Play, Play Games, Firebase, AdMob and billing services; Supabase provides authentication and data storage; and Railway provides server hosting. Information may also be disclosed when required by law or to investigate abuse or security incidents.

Public information and retention

Your leaderboard name and eligible progress or results may be visible to other players. Profile and progress information is retained while needed to provide Card Flick, recover progress, maintain leaderboards, resolve disputes and meet legal obligations. Security and diagnostic records are retained for a limited period appropriate to their purpose.

Security and international processing

We use access controls, encrypted connections, restricted server credentials and database security policies. No service can guarantee absolute security. The primary database is intended to be hosted in Australia, while providers may process information in other countries under their safeguards.

Your choices and deletion

Depending on your location, you may request access, correction, deletion or restriction. Email rltcreativestudios@gmail.com with your display name and available player reference. We may verify ownership. Eligible server data will be deleted or de-identified unless retention is required for security, fraud prevention, financial records or law.

Uninstalling removes local data from that installation but does not automatically delete server data. Deleting Card Flick data does not delete a Google account or Play Games profile.

Players aged 13 and over

Card Flick is not directed to children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and remove it where required. We may update this policy as Card Flick changes.