Version 2026-10b · Last updated: 29 October 2026
Run the Deck is made by Lorenzo Fuller, trading as 628 Studios ("we", "us"), a sole trader based in the UK, at 42a Broadway, London W13 0SU, United Kingdom. We decide how your data is used, so we're the "controller" under UK data protection law (UK GDPR and the Data Protection Act 2018). We're registered with the Information Commissioner's Office (ICO), and you can find us on the ICO's public register.
Contact for anything in this policy: renzoskitchen@gmail.com.
| Who | What happens to your data |
|---|---|
| Under 16 (or you haven't told us your age yet) | No account, and no personal data stored on our servers. Your birthday answer, nickname, settings and stats stay on your phone. If you play a mate in a casual room, your nickname and moves pass through our hosting provider's live connection to reach the other players. They aren't stored. No chat, messages, friends, profile, purchases or analytics. You'll only see our own adverts for other games in the app. |
| 16+ guest (no account yet) | To join online rooms or invites, the app may make an anonymous guest ID. It holds no name, email or birthday. You can delete it, and everything linked to it, with "Delete my data" at the bottom of the home screen. |
| 16 and over with an account | The data in section 3 is stored so your account, mates, messages and online games work. |
| Playing in a web browser from a challenge link | No account needed. The game runs in your browser. We count anonymous steps (for example "game started" or "game finished") against the link, with no user ID, device ID, browser ID or IP address. Nothing is recorded from a device that said it's under 16. |
We ask your date of birth so we can give you the right version of the app. If you're under 16 we don't keep the date: the phone only remembers "under 16".
Delete my data on this device: under-16s and guests can wipe everything the app keeps on the phone (nickname, settings, stats and any guest ID) with "Delete my data" at the bottom of the home screen. A guest ID is deleted from our servers too.
| What | Why | Legal basis | How long |
|---|---|---|---|
| Email address | Sign-in codes and account messages | Contract | While your account exists |
| Sign in with Apple: an Apple user ID and the email Apple gives us (this can be a private relay address). We never ask Apple for your name. We keep an Apple sign-in token, encrypted, only so we can revoke it when you unlink Apple or delete your account | Signing you in | Contract | While your account exists, or until you unlink Apple. The token is revoked and deleted on deletion |
| Date of birth | Checking you're 16+ and applying the right protections | Legal obligation; legitimate interests | While your account exists |
| @handle, display name, private real name (only you see it), profile photo, profile song and look | Your profile | Contract | Until you change or delete them |
| University or college, and a uni email or student ID photo if you choose to verify | The "verified" badge and uni lobbies | Contract; legitimate interests | Badge while your account exists. ID photos are deleted once checked (within 30 days) |
| Mates, crews, invites, nudges, feed posts and replies | The social features you use | Contract | Until you delete them or your account |
| Direct messages (1:1 with mates or crew-mates only) and their reactions | Messaging your mates | Contract | 12 months, then deleted. Sooner if you delete your account |
| Table chat in games | Banter at the table | Contract | 30 days |
| Games, scores, stats, replays and highlights | Online play, leaderboards and your history | Contract | Results while your account exists. Full game replays: 30 days (90 days for bounty games) |
| Your Week: your weekly recap (games, wins, streaks, who you played most), worked out from your own games | Showing you your week | Legitimate interests | 8 weeks |
| Challenge links and share cards: the challenge code, the game, the result you shared, and which button you used to share (for example WhatsApp or Copy link) | Making the link work, and counting how many challenges are opened and played | Legitimate interests | Raw events 13 months, then only totals |
| Referral rewards ("Bring a mate"): who invited whom, and whether the new player has played 5 games. To stop cheating we keep scrambled ("hashed") network and install codes and hashed email keys, never the addresses themselves | Giving both of you the cosmetic reward, and stopping fake sign-ups | Legitimate interests | The referral while your account exists. Fraud checks: network/install hashes 90 days, email hashes 400 days |
| Reports, blocks and moderation decisions | Keeping people safe, and our duties under the Online Safety Act | Legal obligation; legitimate interests | Usually 2 years, longer if the law requires it or a case is open |
| App events (for example "game finished", "advert shown", "result shared"). First-party only, no ad trackers or analytics companies | Fixing problems, limiting how often adverts appear, and counting usage | Legitimate interests | 13 months, then only totals |
| Purchases (Ad-Free) | Giving you what you bought. Apple handles the payment and we never see your card | Contract; legal obligation (tax records) | 6 years |
| Push notification token | Notifications you've switched on (for example "your go" or your weekly recap) | Consent: switch it off any time | Until you switch it off |
| Security logs (for example a hashed network address) and rate-limit counters | Stopping abuse and keeping accounts safe | Legitimate interests | 30 to 90 days |
We don't collect: your location, contacts, advertising ID, or health or financial details. We don't sell data, and we don't track you across other companies' apps or websites.
Your right to object to usage counting: you can object to the app events and challenge counting at any time by emailing us, and we'll stop recording them for your account.
A short advert appears after every 5 games you finish. In this version of the app, every advert is our own (for other games in Run the Deck, the guide, inviting mates or Ad-Free). They're built into the app. They're not personalised, and no data goes to an ad company. We count when an advert is shown, skipped or reported so we can limit how often you see them. Under-16s only see adverts for our own games, and nothing is recorded about them. If we ever add adverts from an ad network, we'll update this policy and ask first where the law requires it.
Purchases are made through Apple's App Store. Apple processes the payment under its own privacy policy. We receive a record of what was bought (not your card details) so we can unlock it. Refunds are handled by Apple.
| Who | What for | Where |
|---|---|---|
| Supabase (our hosting and database provider) | Storing account data and running online games | London, UK data centre. Their support staff may access data from outside the UK, covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| Resend (our email provider) | Sending sign-in codes and account emails | EU and US. US transfers are covered by the UK–US "data bridge" or the UK International Data Transfer Addendum |
| Cloudflare | Hosting our website and challenge pages, and the robot check on web forms | Global network. Covered by the UK International Data Transfer Addendum |
| Apple | Sign in with Apple, purchases, push notifications and (if you pick one) Apple Music profile-song previews | Apple's own terms. Apple is responsible for its own sign-in |
| Police, the National Crime Agency or Ofcom | Only where the law requires it | UK |
We don't use an outside company to check photos or messages at launch; our filters and moderators do it. If that changes, we'll update this table first. Every provider above is bound to protect your data at least as well as this policy does.
We follow the ICO's Age Appropriate Design Code ("Children's Code"). In practice:
You can ask to see, download, correct or delete your data, or object to how we use it.
Complaints: if you're unhappy with how we've used your data, tell us first by email or through the form at /report. We'll reply to your complaint within 48 hours. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Data is encrypted in transit and at rest. Database rules mean each person can only see what they're allowed to. Staff access is limited and logged. If a breach puts your rights at risk, we'll tell the ICO within 72 hours, and tell you where required.
When this policy changes, we'll update the date at the top. If the change is important, we'll tell you in the app first.