Privacy policy
This privacy policy explains what personal data Magus Play ("we", "us") collects when you use our games, such as Peskac: Hearts & Sevens, and this website, why we use it, and the choices and rights you have.
Who we are
Magus Play publishes the games listed on this website and is the controller of your personal data. You can contact us at any time at support@magusplay.com.
What data we collect
Playing as a guest. You can play without an account. Your name, avatar, settings and offline games stay on your device. If you play online as a guest, our servers keep a temporary guest profile (the name and avatar you chose) and a session token; guest profiles are deleted automatically after 7 days.
Account. If you create an account, we store your email address, your password in a securely hashed form (never the password itself), your display name and your avatar. If you sign in with Google or Apple, we receive an identifier of your Google or Apple account and, if you allow it, your email address and name. With Apple's "Hide My Email" we only receive a relay address.
Gameplay. For accounts we store your games, scores, results and history, your coins, the items you own and use, and the statistics the app shows you. Other players at your table see your display name and avatar.
Purchases and subscriptions. Purchases are made through the Apple App Store or Google Play, which handle the payment. We use RevenueCat to confirm purchases and the status of your subscription. We receive the product, transaction identifiers, dates and subscription status — never your card or bank details.
Advertising. The free version shows ads served by Google AdMob. AdMob may use your device's advertising identifier (IDFA on iOS, Advertising ID on Android), your IP address and information about your device and how you use the app to show, limit and measure ads and to prevent fraud. In the EU/EEA, the UK and Switzerland we ask for your consent with Google's consent form before personalised ads are shown; you can change your choice at any time in the app's settings. On iOS we ask your permission before using the advertising identifier. If you say no, you still see ads, but they are not personalised.
Our own ads ("house ads"). We sometimes show ads for our own games and offers. To count views and clicks we use a random installation identifier created by the app. It is not linked to your account, your name or your email address.
Push notifications. If you allow notifications, we store a push token for your device so we can tell you, for example, about invites from friends or that it is your turn. You can turn notifications off at any time in your device settings.
Crash reports. We use Sentry to receive reports when the app crashes or runs into an error. A report contains technical information such as the device model, operating system, app version and what the app was doing, and may include your player identifier. We do not use crash reports for advertising.
App analytics. If you allow it in the consent form (and where no consent is required by law), we use Google Analytics for Firebase to understand how the apps are used: which screens and game modes are opened, how long sessions last, whether players come back, and in-game events such as games played, coins earned and spent, and purchases. It uses an app instance identifier and, for accounts, your random player identifier, plus device information (model, operating system, country). It never receives your name, email address or messages. If you say no, analytics is switched off and nothing is sent. We also use it to try changes (for example a different first screen) with a share of players.
Server logs. Our servers record technical data such as IP addresses, dates and times and the requests made, to run and protect the service.
Checks and moderation. Authorised staff can see a player's account details (name, email address, sign-in method, coins and games) and the last IP address they connected from, with the network name and country we derive from it (using an offline database, nothing is sent to third parties). Staff may also watch games in progress and see players' cards, to check fair play, test the game and investigate abuse. Players are not notified when a game is watched.
Website and messages. If you use the account deletion form or write to us, we keep your email address and your message.
Why we use your data (legal bases)
For users in the EU/EEA and the UK we rely on these legal bases of the GDPR:
- To provide the games and your account — sign-in, online play, saving your progress, coins and items, purchases and subscriptions: performance of our contract with you.
- Personalised ads and access to the advertising identifier where the law requires it: your consent, which you can withdraw at any time.
- App analytics and experiments (Google Analytics for Firebase): your consent, which you can withdraw at any time in the app's privacy settings.
- Non-personalised ads, house ad statistics, crash reports, server logs, security, fraud prevention and improving the games: our legitimate interest in running, financing and improving a free service. You can object to it.
- Push notifications: your consent (the permission on your device).
- Accounting, tax and other legal duties, such as keeping records of purchases: legal obligation.
Who processes your data
We share data only with service providers that help us run the games, under contracts that protect your data:
- Google — AdMob advertising, Google Sign-In, Google Play purchases and notifications on Android
- Google Analytics for Firebase — app analytics and experiments
- Apple — Sign in with Apple, App Store purchases and notifications on iOS
- RevenueCat — management of purchases and subscriptions
- Sentry — crash and error reports
- Our hosting provider — the servers and databases that run the games
For purchases and sign-ins made with them, Google and Apple are also independent controllers and their own privacy policies apply. We do not sell your personal data.
International transfers
Some providers are located outside the European Economic Area, for example in the United States. When data is transferred there, it is protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or by the Commission's Standard Contractual Clauses.
How long we keep your data
- Account, gameplay data and history: as long as your account exists.
- Guest profiles: 7 days.
- Purchase records: as long as accounting and tax laws require (usually up to 10 years); after an account is deleted they are kept in anonymised form.
- Crash reports: up to 90 days.
- App analytics: up to 14 months, then deleted by Google.
- Server logs: up to 30 days, unless we need them to investigate abuse.
- Deletion requests and messages: up to 12 months after we have handled them.
Your rights
You can ask us for access to your data, to correct or delete it, to restrict its use, or for a copy in a portable format, and you can object to uses based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time. Write to support@magusplay.com; we answer within one month. You also have the right to lodge a complaint with your local data protection authority.
Deleting your account
You can delete your account at any time in the app: Profile → Delete account. You can also use our account deletion page. Your account and personal data are deleted within 30 days. Records of purchases are kept without any link to you, where the law requires us to keep them for accounting. Uninstalling the app does not delete your account. Subscriptions are managed by Apple or Google: cancel them in the store, because deleting your account does not stop them.
Children
Our games are not directed to children under 13, or under 16 in the European Union. We do not knowingly collect personal data from children below these ages. If you think a child has given us personal data, contact us and we will delete it.
Security
We protect your data with technical and organisational measures, such as encrypted connections and hashed passwords. No system is completely secure, but we work hard to protect your information.
Changes to this policy
We may update this policy. We will publish the new version on this page with a new "last updated" date and, for important changes, tell you in the app.
Contact
Magus Play — support@magusplay.com