PRIVACY POLICY

1. Introduction

Welcome to Aetherborne ("we," "us," or "our"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aetherborne.gg and use our browser-based game (collectively, the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, and authentication credentials when you create an account via Supabase authentication (Google, Discord, or email/password).
• Payment Information: When purchasing Quantum Credits ($QC), payment is processed by third-party providers (Paystack, PayPal). We do not store your credit card or bank details.
• Wallet Information: If you choose to link a blockchain wallet for NFT exports, we store your public wallet address only.
• Communications: Information you provide when contacting us for support or feedback.

2.2 Information Collected Automatically

• Usage Data: Game statistics (matches played, wins, losses, deck compositions), progression data, and in-game actions.
• Device Information: Browser type, operating system, screen resolution, and device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Cookies: We use essential cookies for authentication and session management. See Section 7 for details.

3. How We Use Your Information

We use collected information for the following purposes:

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To process in-game transactions and purchases
• To facilitate matchmaking, leaderboards, and competitive features
• To send you service-related notifications (e.g., account verification, security alerts)
• To detect, investigate, and prevent fraud, cheating, or unauthorized access
• To comply with legal obligations
• To analyze usage patterns and improve the game experience

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Service Providers: Third-party services that help us operate the Service, including Supabase (authentication/database), Azure (hosting), Paystack and PayPal (payment processing), and Pinata (IPFS storage).
• Blockchain Networks: If you export cards as NFTs, transaction data (public wallet address, token IDs) is recorded on the Polygon blockchain and is publicly visible.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request account deletion at any time by contacting us. Upon deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Blockchain data (NFT transactions) cannot be deleted once recorded on-chain, as this is inherent to the technology.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure authentication via Supabase with Row Level Security (RLS), and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
• Analytics Cookies: Help us understand how you interact with the Service. These can be disabled in your browser settings.

We do not use advertising or tracking cookies. We do not serve third-party advertisements.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at privacy@aetherborne.gg.

9. Children's Privacy

Our Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your data may be processed in countries other than your own (including the European Union, United States, and South Africa). We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: