Privacy policy

Account: email address, username, password (stored hashed, never in plain text) or your Google identifier if you sign in with Google, and your statement that you are 16 or older.

Game: your collection, your Volts and their history, the packs you opened, your games and scores, your favourite cards, your avatar.

Security: a non-reversible fingerprint of your IP address (hashed, never stored in plain text), kept for 30 days, to limit fake accounts and cheating.

We do not collect your precise location, your contacts or any health data. There is no advertising and no tracking.

To run your account and the game (performance of the service you asked for).

To protect the game against cheating and abuse (legitimate interest).

To send you the essential emails: address confirmation and password reset. No marketing emails.

Only necessary cookies: your sign-in session and your language. No advertising or analytics cookies, so no consent banner.

The Cloudflare Turnstile anti-bot check, used at sign-up and sign-in, is a privacy-focused third-party service.

The bVolt team, and our technical providers, only to run the service: Vercel (hosting), Supabase (database), Cloudflare (anti-bot), Resend (emails), Google (if you choose Google sign-in). Some are based in the USA; transfers rely on the European Commission's standard contractual clauses. [TO CHECK for each provider.]

Your public profile (username, avatar, card counts, favourites) is visible to everyone.

As long as your account exists. Security logs are erased after 30 days. Database backups are kept for at most 4 weeks.

Access and portability: download all your data from Settings → My data.

Rectification: change your username and language in Settings.

Erasure: delete your account in Settings. Your personal data is erased immediately (and disappears from backups within 4 weeks).

For any other request: [TO COMPLETE: contact email]. You can also contact your data protection authority.

bVolt is for people aged 16 or older.