Last updated: October 12, 2026. We collect only what the game needs to work, we never sell any data, and Mondodeck shows no advertising.
Data controller
MONDODECK, a French simplified joint-stock company (SAS), 60 rue François Ier, 75008 Paris, France. For any question about your data: [email protected].
The data we process
- Your account: your email address and the date you confirmed you are 15 or older. If you sign in with Google, Apple or Discord, your account identifier with that service and your email address. We do not keep your name or picture.
- Your game: your username, avatar, showcase, profile settings, collection, pack history, day streak, missions and leaderboard rank.
- Moderation: reports you send or that concern you, and the decisions taken.
- Technical data: your IP address, your device and browser type, and connection and error logs.
We never ask for a password or your date of birth.
Why we use it
- To run the game: your account, packs, collection, profile and the leaderboard. Legal basis: performance of the terms of use.
- To send you your sign-in links by email. Legal basis: performance of the terms of use. We do not send you advertising.
- To protect the game: security, fighting cheating and moderation. Legal basis: our legitimate interest, and our legal obligations when an authority requests it.
We do no advertising, no commercial profiling and no data resale.
Younger players
The game is open from age 15, the age at which French law allows you to consent to the processing of your data on your own. To protect younger players, your profile is private by default, and nothing is made public without your choice, except your username and avatar on the leaderboard.
Who can see your data
- The MONDODECK team, only for what they need.
- Our service providers, who act on our instructions: Scaleway, which hosts the server and database in France; Cloudflare, which delivers the pages and images and protects the network; Brevo, which sends sign-in emails from France; Sentry, which reports technical errors in the game, with data hosted in the European Union.
- Google, Apple or Discord, only if you choose to sign in with them, under their own privacy policy.
- Other players: your username and avatar on the leaderboard, and your profile if you make it public.
- Authorities, when the law requires it.
Transfers outside the European Union
Cloudflare is a US company: some technical data may pass through its servers outside the European Union. This transfer is covered by the EU-US Data Privacy Framework and by the European Commission’s standard contractual clauses. Sentry is also a US company: its data is hosted in the European Union, and any access from the United States is covered in the same way. The same applies to Google, Apple and Discord if you sign in with them.
How long we keep it
- Your account and game data: as long as your account exists. If you delete it, everything is erased immediately, and backup copies disappear within 30 days.
- An account inactive for 3 years is deleted, after a warning email sent one month before.
- Technical data and logs: 12 months at most.
- A username removed by moderation stays reserved so it cannot be reused, with no link to your account.
Cookies and local storage
We use two cookies, both essential: the first keeps you signed in, the second only indicates that you are signed in, to take you straight to the game, and contains no other data. Your browser’s storage also keeps your preferences, such as muted sound or a collapsed sidebar. Cloudflare may set technical cookies needed for the site’s security.
We use no advertising or audience measurement cookies, so no consent is needed. If this changes, we will ask you first.
Your rights
You can access your data, correct it, erase it, get a copy of it, object to its processing or restrict it. You can also give instructions on what happens to your data after your death.
To delete your account, use the button in the settings. For anything else, write to [email protected]: we reply within one month.
If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority, at www.cnil.fr.
Security
All connections use HTTPS, access to data is limited to the people who need it, and backups are encrypted. Since we use no passwords, no password can be stolen from us.
Changes
If this policy changes significantly, we will notify you in the game before the change applies.