Privacy policy
This page describes what Kartičky stores about you, why, who else gets to it, how long it is kept and how you get it back or get rid of it. You can play without an account and without any personal data at all.
Controller and contact
The controller of your personal data is David Konečný, a sole trader with his seat at Palackého třída 80/7, 612 00 Brno, Czech Republic, ID No. (IČO) 17212316, who runs Kartičky. For anything on this page, write to info@hrajkarticky.cz. Kartičky has no data protection officer; at this size it does not need one.
What we store
Account: your email address, your name if we have one (from your Google account, when you sign in with it), the language we email you in, and when the account was created. When you sign in with Google we also store your Google account's identifier, to recognise you next time. There is no password.
Sign-in: your signed-in devices (only a hash of the random key in the cookie, when it expires and when it was last used) and the sign-in links and codes we email (only their hash, with the address they went to and the number of tries at the code).
Orders: what you bought and for how much, the language, the payment status, Comgate's reference for the payment and the country you connect from when you send the order. Cloudflare tells us the country from your connection; we do not store your IP address. The country goes on the invoice and is how sales to other EU countries are counted for VAT. With the order we also store a record of your consent: the exact text you ticked, the language, the version of the terms and the time.
Invoices: for each paid order an invoice is issued by the operator's own invoicing system, which also runs at Cloudflare. It receives your name (if we have one), email, country, the items and the amount. We store the invoice PDF so that you can download it from the Account page.
Decks: which decks are yours, how (bought or given by us) and since when. When we give you a deck by hand, we add a short note with no personal data.
Messages: the emails you send us and our replies, for as long as they are needed (for example for a complaint).
Who processes it for us
- Cloudflare (Cloudflare, Inc.): hosting, the database and file storage, the country of a connection, and keeping robots off the sign-in form (Turnstile).
- Resend (Resend, Inc.): sending emails (sign-in, order confirmations, invoices).
- Comgate a.s., Gočárova třída 1754/48b, Hradec Králové, Czech Republic, ID No. 27924505: the payment gateway. It receives your email, your name (if we have one), the amount and what it is for; you enter card details directly with Comgate and we never see them. For payments Comgate is also a controller in its own right, under its own policy. Paying inside the app (when it is switched on) loads Comgate's, Google Pay's and Apple Pay's scripts, so your browser also connects to their servers.
- Google (Google Ireland Limited): only when you sign in with Google. Google learns that you are signing in to Kartičky, and gives us your email, name and account identifier.
Legal bases and transfers outside the EU
The account, orders, delivering decks and the emails about them are processed to perform the contract. Orders and invoices are kept because accounting and tax law requires it (a legal obligation). The consent record, sign-in records and robot protection rest on our legitimate interest: being able to show what you agreed to, and keeping the service secure.
Cloudflare, Resend and Google may process data outside the European Union as well, mainly in the United States. This is covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses in their data processing terms. Comgate is a Czech company.
How long we keep it
The account and everything in it, for as long as the account exists. When you delete it, the email, name, sign-ins and the link to Google are deleted. Orders, consent records and invoices stay, because the law requires it, for up to 10 years (accounting and tax law), also after the account is deleted: without the email and name wherever possible (anonymised). The invoice itself keeps what it was issued with.
Sign-in links and codes are valid for 15 minutes, a signed-in device for 30 days from its last use. Emails with us are kept while we need them to settle the matter and to defend claims.
The database is backed up every night to private storage at Cloudflare. Daily backups are kept for 90 days and the first backup of each month for 12 months, then deleted. So deleted data is gone from the backups within 12 months at the latest; until then a backup is used only to restore the database after a failure.
Cookies
Kartičky uses only necessary cookies, so it does not ask about them:
kart_session: keeps you signed in, for 30 days from its last use.PARAGLIDE_LOCALE: remembers the language you chose.kart_oidc: for a few minutes while you sign in with Google, so that the sign-in cannot be forged. Then it is deleted.
Cloudflare's robot protection (Turnstile) on the sign-in form may store its own technical data.
Kartičky uses no analytics, no advertising and no tracking cookies. The fonts are served by us, not by Google.
What is stored on your phone
So that the game works without a connection, your browser keeps on your device: the game setup with the players'
names (karticky.setup), the server's last answer about which decks you may play
(karticky.me.*), downloaded card decks and the game's pages for offline use. None of it is sent anywhere other than described
above. You remove it by clearing this site's data in your browser.
Your rights
You have the right to access your data and get a copy, to rectification, erasure, restriction of processing and portability, and the right to object to processing based on legitimate interest. You delete your account yourself on the Account page; for anything else write to info@hrajkarticky.cz. You can lodge a complaint with the Czech Office for Personal Data Protection, https://uoou.gov.cz.
We need your email for you to have an account and buy; without it you cannot buy. Everything else is voluntary. No decisions about anyone are made automatically, and no one is profiled.