Privacy Policy

1. Introduction

Casciscus ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application and services.

2. Information We Collect

When you use Casciscus, we may collect:

2.1 Account Information (via Google Sign-In)

• Name: Your display name from Google
• Email Address: To uniquely identify your account
• Profile Picture: Your avatar from Google

2.2 Usage Data

• Game progress and deck completion status
• Purchase history and transaction records

3. Payment Information Security

We do not collect, store, or have access to your payment details.

All payment transactions are processed by Midtrans, our third-party payment gateway. We only receive confirmation of transaction status (success/failure) and transaction IDs for record-keeping.

For details on how Midtrans handles your data, please review their privacy policy at midtrans.com/privacy-policy.

4. How We Use Your Information

We use your information solely for:

• Account authentication: To identify and verify your account
• Game progress syncing: To save and restore your progress across devices
• Transaction verification: To record purchases and grant access to premium content
• Customer support: To respond to your inquiries and resolve issues

5. We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal information with third parties for marketing purposes. Your data is used solely to provide the Casciscus service.

6. Third-Party Services

We use the following third-party services:

• Google OAuth: For secure account authentication
• Supabase: For database storage and user management. See their privacy policy at supabase.com/privacy
• Midtrans: For secure payment processing. See their privacy policy at midtrans.com/privacy-policy

7. Data Storage & Security

Your data is stored securely using Supabase's infrastructure. We implement industry-standard security measures including HTTPS and secure authentication. While we strive to protect your information, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained as required by Indonesian tax and financial regulations.

To request account deletion, contact us via Instagram DM at @respectthecraft.studio.

9. Children's Privacy

Casciscus is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent for data processing

To exercise these rights, contact us via Instagram DM at @respectthecraft.studio.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be reflected by updating the "Last updated" date at the top of this page.