Privacy Policy

Last updated: September 8, 2026 · Hrvatska verzija

Cardarena ("we", "our", "the app") is a multiplayer party card game developed by INTELEKTUALCICI, Croatia, and distributed on Google Play (Android) and the App Store (iPhone and iPad). This Privacy Policy explains what information the app collects, why, who can see it, how long we keep it, and the choices you have. It applies to both versions of the app; where they differ, the difference is stated.

In short: you sign in silently through Google Play Games or Game Center (we never see your e-mail), you pick a display name and enter your age, and everything else we store is what you do in the game - matches, votes, cards, skins, coins and purchases. Videos you record stay on your phone and never reach us. You can delete your account, and everything tied to it, from the Settings screen.

1. Information We Collect

a) Information you provide

Display name - chosen when your profile is created (up to 12 characters) and visible to every other player you play with, in your profile card, and - if you win a game for the first time - on the public Wall of Fame. Names pass a server-side word filter before they are stored. You can change your name later inside the app for in-game coins.
Age - entered when your profile is created. You must be 16 or older to use the app. We store the age you entered, an approximate birth year derived from it, and the date from which you count as an adult for content purposes. If any player in a game is under 18, all dirty, flirty and alcohol-related cards are excluded for the whole table; only that yes/no result is copied into the game, never your age.
Game preferences - the location, who is playing, the difficulty, the number of rounds and the excluded topics you choose in a lobby. They are used to build that game's deck and are stored with the game.

b) Information collected automatically

Account identifier - on Android the app signs you in through Google Play Games Services, on iPhone and iPad through Game Center. Sign-in is silent; there is no password. We receive a platform player ID and Firebase Authentication issues the app its own user ID (UID) for your account. On iOS, your Game Center nickname is used only as a suggestion for your display name. We do not receive your Google or Apple e-mail address, contacts, photos or profile picture. Android and iOS accounts are separate and are not linked.
Game activity - games you create or join (a per-account log of game codes and times, also used for the daily game limit), rounds and roles, the cards you were dealt and picked, votes you cast, duel and redemption results, eliminations, kick votes and departures, songs you queue on the jukebox, achievements, statistics (games played and won, rounds survived, redemptions, eliminations caused and suffered), coin, diamond, aura and level balances, chests, skins, marketplace listings and trades, daily-reward streak, and in-app notifications.
Fair-play timing - for each duel and redemption the server records when it started and ended. At the end of a game these timings are used to detect a table that tapped through its cards instead of playing them, in which case that game's rewards are reduced or withheld. The audit record kept for this contains timing numbers for the game only and is deleted after 30 days.
Connection status - whether your device is currently connected to a game and since when. It is used to keep games from freezing (kick-vote quorum, cleanup of abandoned games) and never removes you from a game by itself.
Purchase data - when you buy coins or diamonds we receive a purchase token (Google Play) or a signed transaction (App Store) with the product, an order or transaction ID and the time, so the purchase can be verified on our server before anything is granted. On iOS an account token derived from your UID is attached to the transaction so it can be matched to your account. Google and Apple also notify us of refunds and revocations so that the granted items can be reversed. Payments are processed entirely by Google Play or Apple; we never receive your card or billing details.
Diagnostics (Android only) - the Android app includes Firebase Crashlytics, which sends crash reports (stack trace, device model, operating-system version, app version, free memory and storage at the time of the crash, and a Crashlytics installation ID). Crash reports are used only to find and fix bugs, never for advertising. The app contains no analytics SDK on either platform, and the iOS app contains no crash-reporting SDK either.
Data kept only on your device - settings (language, volume), Wall of Fame entries you chose to hide, "how to play" reminders, and a local cache of game data so the app can resume quickly. This never leaves your device.

c) User-generated content

Cards - challenge cards you write and submit: the text, type, difficulty, tags and language, linked to your account. Once approved, a card becomes shared game content and stays attached to your account ID as its author so that other players can block it. Cards that were rejected, reported or expired without ratings, and the original text you submitted before automatic translation, stay in our manual-review queue for as long as your account exists and are deleted together with it.
Custom skins - the description you type in the AI Lab, the generated image, and the name and one-liner you give the skin. Custom skins can be shown to other players and listed on the in-game marketplace.
Ratings, reports and blocks - your ratings and reports of other players' cards, your reports of Wall of Fame names, and the list of card creators you have blocked (stored on your own profile).
Display name - see 1a; it is the one piece of content every other player sees.

2. How We Use Your Information

To create and maintain your player account and sign you in.
To run multiplayer games: dealing cards, pairing players, counting votes, keeping every phone in sync.
To show your name, skin and progress to the other players at your table.
To apply content filters (age, excluded topics, blocked creators) when a deck is built.
To manage the in-game economy (coins, diamonds, aura, chests, skins, jukebox, marketplace) and to grant, verify and if necessary reverse purchases.
To detect and discourage non-play and cheating (see 1b, "Fair-play timing").
To moderate user-generated content: automated review of submitted cards, community ratings and reports, name reports, and manual review by us.
To keep the Wall of Fame - a permanent, numbered public list of first-time winners.
To find and fix crashes and bugs (Android diagnostics, see 1b).
To respond to your support requests.

Legal bases (GDPR). We process your data to perform our contract with you (providing the game), for our legitimate interests (fair play, fraud and abuse prevention, security, stability), with your consent (camera, microphone and photo-library permissions, which you may withdraw at any time), and to comply with legal obligations (keeping purchase records).

3. Data Storage and Security

Your data is stored on Google Firebase (Realtime Database and Cloud Storage in the europe-west1 region, Cloud Functions in the same region). Data is transmitted over TLS. Every change to balances, purchases, rewards and game state is made by our server code, not by the app on your phone, and database security rules limit each account to its own data and to the games it is part of. Access to raw data is limited to the developer.

Game data is also cached locally on your device so the app can resume an interrupted game.

4. Who Can See Your Data

Other players - the players at your table see your display name, skin, level, achievements, connection status and everything you do in the game (cards, votes, results). Anyone with a game code can join that lobby.
Wall of Fame - your first win adds your display name and a permanent number to the in-app Wall of Fame, visible to all signed-in players. Numbers are never recycled. Any player can hide an entry from their own view (this stays on their device) or report a name to us; we review reports by hand and may remove a name. You can also ask us at any time to remove your own name from the Wall (e-mail, section 11). If you delete your account, or your name is removed, the entry becomes an anonymous numbered placeholder with no name and no account ID.
Google - Firebase (authentication, database, storage, cloud functions; on Android also Crashlytics), Google Play Games Services (sign-in on Android) and Google Play Billing (purchases on Android).
Apple - Game Center (sign-in on iOS) and the App Store / StoreKit (purchases on iOS).
OpenAI - the text of a card you submit is sent to OpenAI for automated moderation and translation. The description you type when creating a custom skin is sent to OpenAI to generate the image, together with your account ID so that OpenAI can monitor for abuse. We do not send your display name, age, profile or any photo to OpenAI.
Legal requirements - if required by law, or to protect the rights and safety of our players.

We do not sell personal data and we do not share it with advertisers or data brokers. The providers above may process data outside the European Economic Area; each of them offers the EU-approved transfer safeguards described in its own terms. We may use anonymised or aggregated data (for example, how long games last) to improve the app.

5. Camera, Microphone, Photos and Recorded Videos

Cardarena can record a video of you performing a card, with the card drawn into the picture. This is the only feature that uses your camera or microphone. It starts only when you tap the camera button, it runs only while the app is on screen, and a timer inside a red outline is visible for the whole take.

Permissions. The camera is required. The microphone is optional - if you decline it, the video is silent. On iPhone and iPad the app also needs add-only access to your Photos library so it can save the finished video; without it the recorder does not open. The app never reads, browses or lists your photos. On Android no storage permission is needed. All permissions are requested by your operating system the first time you use the feature and can be withdrawn at any time in your device settings.
We never receive the video. Recording, compositing and saving happen entirely on your device. No video, audio, frame or anything derived from them is uploaded to our servers, sent to any third party, or used for analytics, advertising, training or any other purpose. The feature sends no analytics events at all.
Where the video goes. When a take ends, the app saves it straight to your Photos or Gallery in a single attempt. If that save fails, the take is deleted; there is no copy inside the app and no in-app viewer. After a successful save you may share the video through your system's share sheet, with a suggested caption; it then goes to whichever app you choose, under that app's privacy policy.
What is in the video. Whatever your camera and microphone captured, plus a picture of the card being performed. That card may include the names of players in your game and may have been written by another player. The app's own music is paused while you record and is not part of the video, although the microphone may pick up sound in the room.
Other people in the recording. If anyone besides you can be seen or heard, you are responsible for their agreement to being recorded - including a parent's or guardian's agreement for any minor. We have no way to verify this and do not attempt to.
Temporary files. While a take is being made, working files are kept in private app storage that other apps cannot read and that is excluded from device backups. They are deleted as soon as the save finishes or fails, and anything left behind (for example after a crash) is deleted within 24 hours. Until the video is finished, the recovery record may contain the text of the card you were performing; it never contains your account, game or card identifiers.
Your gallery is yours. Once saved, the video is outside the app. Deleting your account or uninstalling the app does not delete it. If your phone syncs your gallery to iCloud, Google Photos or another service, that service copies it under its own settings, not ours.

6. Children's Privacy

Cardarena is not intended for anyone under 16. It is intended for players aged 16 and over. We do not knowingly collect personal information from children under 16. If you are under 16, do not use the app. If we learn that we hold data of a child under 16, we will delete it promptly - write to the address in section 11.

7. Your Rights and Controls

See your data - your profile, balances, statistics, skins, cards and purchase history are all visible inside the app.
Correct your data - you can change your display name and your equipped skin in the app at any time.
Delete your account - Settings → Delete Account, on both Android and iOS, permanently deletes your profile and the data tied to it (details in section 8 and on the Delete Account page). If you cannot open the app, e-mail us and we will delete it for you.
Control content - block any card creator, report cards and Wall of Fame names, and hide Wall of Fame entries from your own view.
Withdraw permissions - camera, microphone and Photos access can be revoked in your device settings at any time.
GDPR rights - you may also ask us for a copy of your data, to receive the data you gave us in a machine-readable format, for its correction, erasure or restriction, object to processing based on our legitimate interests, and lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr) or the supervisory authority where you live. To exercise these rights, e-mail us (section 11); we may ask you to prove that the account is yours.

8. Data Retention

Your account - kept for as long as your account exists.
Games - a game's data is deleted 24 hours after the game ends; a lobby that never starts is deleted after 30 minutes.
Fair-play audit records - 30 days after the game.
Crash reports (Android only) - kept by Google for 90 days.
Name reports - until we have reviewed them, and removed when the reported or the reporting account is deleted.
Backups - database copies for recovery from failure or data loss are kept separately from the live database, are used only for recovery and are deleted or overwritten once they are no longer needed for that purpose; they are used for nothing else.

When you delete your account, your profile, balances, statistics, game log, skins you own or created (including their images), pending card submissions, rejected cards and original card texts, marketplace listings, ratings, reports, blocks, notifications and your Firebase Authentication account are removed immediately. Your data stays in backup copies only until those copies are deleted or overwritten (see above) and is not used in the meantime; if we ever had to restore a backup, we would repeat the deletion. The following stays behind, by design:

Approved cards you wrote remain in the shared deck as community content; only your account ID stays attached as author, not your name.
Your Wall of Fame number remains as an anonymous placeholder so the numbering stays unbroken; your name and account ID are removed from it.
Purchase records (product, transaction ID, time, account ID) are kept for as long as accounting and tax law require and to handle refunds of already-deleted accounts.
Games still within their 24-hour window may keep a snapshot of your name and actions until they expire, and other players' block lists may keep your account ID (shown to them as a deleted creator).

9. Third-Party Services

The app uses the following services, each with its own privacy policy:

Google Play Games Services - sign-in (Android)
Apple Game Center - sign-in (iOS)
Google Firebase - authentication, database, storage, cloud functions; Crashlytics on Android only
Google Play Billing - in-app purchases (Android)
Apple App Store / StoreKit - in-app purchases (iOS)
OpenAI - automated card moderation and translation, AI skin image generation

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are posted on this page with a new "Last updated" date; for significant changes we will also tell you in the app. Continued use of the app after a change means you accept the updated policy.

11. Contact Us

Data controller: INTELEKTUALCICI, obrt za računalno programiranje i usluge, vl. Petar Barać
Čitluk 112, Čitluk, Croatia
Obrtni registar, MBO 99147513, OIB 23519516726. For anything about this policy or your data, write to:

Email: support@intelektualcici.com