This policy explains what personal data Quillsworn collects when you play, why, how long we keep it and what your rights are. We keep it short because we collect little: no ads, no analytics or tracking tools, and we never sell your data.
Who we are
Quillsworn is made by Cuky Lab s. r. o., a company registered in Slovakia (Poruba pod Vihorlatom 150, 072 32 Poruba pod Vihorlatom, Slovakia; IČO 54992541). We are the controller of the personal data described here. Contact us about anything in this policy through the game's Feedback form.
What we collect
Your account
If you sign in through Steam: your Steam ID and your Steam profile name. We never see your Steam password or payment details.
If you have a username and password: the username and a one-way hash of the password. We never store the password itself.
When the account was created and when you were last online.
What you do in the game
Your collection, decks, talent builds, class levels, gold and the history of gold you earned and spent, rewards and tutorial progress.
Your match results, ranked rating and division, and replays of your matches (we keep only your most recent ones).
Your friends list, friend requests and party invites.
What you send us
Feedback you write in the game's Feedback form.
Moderation
Warnings and bans on your account, their reasons, and a log of what our team changed on your account.
Technical data
Your IP address when you connect. We don't store it with your account: the server uses it briefly to limit how fast requests can be made and to block abuse, and it may appear in short-lived technical logs.
The version of the game you're running.
We don't collect your real name, email address, location, contacts or anything from your computer beyond the above. Quillsworn has no in-game chat.
Why we use it
To run the game for you (performing our agreement with you, Article 6(1)(b) GDPR): signing in, saving your progress, matchmaking, ranked play, friends and parties, replays.
To keep the game fair and safe (our legitimate interest, Article 6(1)(f) GDPR): stopping cheating, abuse and attacks on the servers, and enforcing the Terms of Service.
To improve the game (our legitimate interest): reading your feedback, and looking at match results to balance cards and classes.
Who else sees it
Other players see your name, your class levels and ranked division, what happens in matches you play together, and whether you're online if you're friends.
Hetzner Online GmbH (Germany) hosts our servers in the European Union and processes the data only on our behalf.
Valve Corporation runs Steam. When you sign in through Steam, Steam confirms who you are; Valve handles your Steam account under its own privacy policy.
Authorities, only when the law requires it.
Your data stays in the European Union. We don't sell it or share it for advertising.
How long we keep it
Your account and game data: for as long as your account exists. During the playtest, progress may be reset, which deletes game data.
Replays: only your most recent matches; older ones are deleted automatically.
Feedback: as long as it helps us improve the game, at most until your account is deleted.
Moderation records: as long as the account exists, so bans can't be dodged.
Backups of the database: deleted automatically after 14 days.
Server logs: rotated and overwritten automatically, usually within a few weeks.
When you ask us to delete your account, we delete it and its data within 30 days, and it disappears from backups when they expire.
Your rights
Under the GDPR you can ask us to:
give you a copy of your data, or send it to you in a machine-readable form;
correct it;
delete it, or your whole account;
restrict how we use it, or object to our use based on legitimate interests.
Send your request through the game's Feedback form while signed in to the account it's about, so we know it's yours. We answer within one month.
You can also complain to the Slovak data protection authority, the Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk), or to the authority where you live.
Children
Quillsworn is not meant for children under 13, and Steam doesn't allow accounts for them. If you think a child under 13 has an account, contact us and we'll delete it.
Security
Connections to our servers are encrypted, passwords are stored only as hashes, and access to the servers and the admin tools is limited to our team.
Changes
If we change this policy, we update the date at the top and show the new version in the game. Important changes are also announced in the game's notice.