Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains how Spellsteel ("we", "us", "our"), operated by a sole proprietor based in Türkiye, collects and uses your personal data when you use the game and website at spellsteel.com.

1. Information we collect

Account data: email address, username, and a securely hashed password.
Gameplay data: your decks, cards, match results, in-game currency balance, and similar progress information.
Purchase data: when you buy Gold, our payment provider Paddle processes your payment. We receive confirmation of the transaction (such as order ID and the item purchased) but we do not collect or store your full card number or payment credentials.
Technical data: basic technical information such as IP address and browser type, used for security and to operate the Service.

2. How we use your data

To create and operate your account and provide the game.
To process purchases of Gold and deliver it to your account.
To provide customer support and respond to your requests.
To maintain security, prevent fraud and abuse, and comply with legal obligations.

3. Sharing with third parties

We share data only with service providers who help us operate the Service:

Paddle — payment processing and Merchant of Record (privacy policy).
Amazon Web Services (AWS) — hosting and data storage.
Cloudflare — DNS and email routing.

We do not sell your personal data.

4. International transfers

Our infrastructure is hosted with AWS, which may process and store data on servers located in the United States and other regions. Where required, appropriate safeguards are applied to such transfers.

5. Cookies & local storage

We use browser local storage to keep you signed in and to remember basic settings. Payment pages provided by Paddle may use their own cookies as described in Paddle's privacy policy.

6. Data retention

We keep your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us. Some records (such as transaction records) may be retained where required for legal, tax, or fraud-prevention purposes.

7. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights, contact info@spellsteel.com.

8. Children

The Service is not directed to children under the age required by your local law for online services without parental consent. If you believe a child has provided us personal data without consent, contact us and we will delete it.

9. Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date.

10. Contact

Privacy questions or requests: info@spellsteel.com