PRIVACY POLICY

• Account data — email, display name, hashed password, account role, credit balance, activity history, date of birth, IP address, device fingerprint, browser and hardware characteristics captured at each Terms acceptance.
• Content you submit — cards, prompts, uploads, trade offers, chat messages, Community Prediction Pool commitments, and any files you attach (including 3D print files).
• Payment metadata — the amount, timestamp, and processor reference of every top-up. We do not store full card numbers; cryptocurrency addresses and transaction hashes are stored for auditability. Manual Venmo top-ups store the note text and admin verification record.
• Cookies & local storage — session tokens, gate-acceptance flags, and UI preferences (chat opacity, theme). We do not use third-party advertising trackers.
• Server logs — request path, status, latency, and error traces, retained for operational and fraud-prevention purposes.

• Operate the Service — deliver the features you request, mint your cards, resolve matches, process top-ups.
• Verify eligibility — enforce the 21+ requirement, prevent duplicate accounts, and record consent to the Terms.
• Prevent fraud, abuse, cheating, chargeback fraud, and platform manipulation.
• Improve the Service — analyze feature usage in aggregate; investigate bugs.
• Meet legal obligations, respond to lawful requests, and enforce our Terms.

We share the minimum necessary personal data with the following categories of providers. The current exact list is:

Typical categories include: cloud hosting, database and file-storage vendors, cryptocurrency payment processors, email delivery, transactional SMS (if enabled), analytics (aggregate, no cross-site tracking), and LLM / image-generation APIs used to power features you invoke. Each provider is bound by contractual data-protection terms.

Retention windows differ by data category. Current windows:

• Account data: {{RETENTION_ACCOUNT}} after account closure.
• Terms-acceptance forensic records (IP, fingerprint, timestamp): {{RETENTION_TOS}}.
• Payment metadata: {{RETENTION_PAYMENTS}} for tax and audit compliance.
• Chat, trade, and match history: {{RETENTION_ACTIVITY}}.
• Server logs: {{RETENTION_LOGS}}.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data (subject to legal retention obligations).
• Object to or restrict certain processing.
• Port your data to another service where technically feasible.
• Opt out of any sale or sharing of personal information — see Section 8 below.
• Lodge a complaint with your local data-protection authority.

Requests can be submitted through the contact addresses in Section 10.

We hash passwords with bcrypt, store login PINs as separately-hashed values, transport all traffic over TLS, restrict administrative access, and enforce rate limits + IP-ban logic on authentication endpoints. No system is perfect; we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

Playden is exclusively for individuals aged 21 or older. We do not knowingly collect personal information from anyone under 21. Registration requires a date of birth and the server rejects any registration where age < 21. If we learn that we have received personal information from someone under 21, we will delete the account and the associated personal data.

Playden does not sell personal information for monetary consideration. Playden does not share personal information for cross-context behavioral advertising. Where an applicable state law (e.g., CCPA/CPRA, VA CDPA, CO CPA) defines "sharing" more broadly, our disclosures to service providers listed in Section 3 for the purposes listed in Section 2 are the only such transfers, and each is bound by contract to use the data only for the disclosed purpose.

The Service is operated from {{GOVERNING_LAW_STATE}}. If you access the Service from outside that jurisdiction, you consent to the transfer of your personal data to it. Where cross-border transfers require additional safeguards (e.g., GDPR standard contractual clauses), those safeguards are in place with the providers listed in Section 3. Playden does not currently offer the Service in {{BLOCKED_JURISDICTIONS}}.

Questions or requests concerning this Privacy Policy may be sent through the Service's in-app support channel or to the addresses in the Company & Contact block below.

We may update this Policy from time to time. When we do, we will post the updated document with a new effective date. Material changes will be surfaced in-Service.