Privacy policy
How Cartoria uses and protects the data needed to operate the game.
Last updated: August 9, 2026
Data we process
Cartoria processes the account data needed to run the game: email address, display name, preferences, progress, collection, decks, battle results, and notification settings.
A birthday may be provided voluntarily for an annual reward. Payment data is handled by Stripe; Cartoria does not store full payment card data.
Why we use it
This data lets us create and secure accounts, run battles, display rankings, grant rewards, process purchases, and send emails you have enabled.
Audience measurement may be used to understand public page usage and improve the game.
Service providers
Cartoria uses Vercel for hosting, Supabase for authentication and data, Cloudinary for images, Stripe for payments, Resend for email, and Google Tag Manager for audience measurement when enabled.
These providers access data only as needed to provide their service.
Your choices and rights
You can edit your profile and email preferences in account settings. Every non-essential email includes an unsubscribe link.
You can request access, correction, or deletion of your data through Cartoria's official contact channels. Some transaction data may be retained where legally required.