Privacy Policy

Last updated: April 14, 2026

1. Introduction

Codimon ("we," "us," or "our") operates the Codimon collectible card game application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

Account Information: When you create an account, we collect your email address, username, and password. Passwords are hashed and stored securely by our authentication provider (Supabase).

Game Data: We store your in-game activity, including your card collection, grades, marketplace listings, trade history, achievements, cosmetic preferences, and virtual currency balances (coins and gems).

Payment Information: When you purchase gems, your payment is processed by Stripe. We do not store your credit card number, CVV, or full billing details. We receive only a confirmation of the transaction and the associated gem package.

Local Storage: We store a copy of your game state in your browser's local storage to improve load times and enable offline access. This data stays on your device.

3. Information We Do Not Collect

We do not use cookies for tracking or advertising.
We do not use analytics services (no Google Analytics, no tracking pixels).
We do not collect your IP address, device fingerprint, or location data.
We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. How We Use Your Information

To create and maintain your account.
To provide, operate, and improve the Service.
To process purchases and deliver virtual currency.
To enable social features such as trading, leaderboards, and public profiles.
To enforce our Terms of Service and prevent abuse.

5. Third-Party Services

We use the following third-party services:

Supabase — Authentication, database, and server functions. Supabase Privacy Policy
Stripe — Payment processing. Stripe Privacy Policy
Google Fonts — Font delivery. Google Privacy Policy

6. Data Retention

We retain your account and game data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it.

7. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security policies on our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict certain processing of your data.
Request a portable copy of your data.

To exercise any of these rights, please contact us at the email below.

10. International Users

Your data may be processed and stored in countries other than your own. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: contact@codimastudios.com