Privacy Notice

Last updated: 18 October 2026

Natalia Isaeva is the data controller for personal data processed through Колода (koloda.net). Contact: nat.isaeva@gmail.com.

Data we collect and why

• Account data (name, email from Google sign-in) — to create your account and provide the service (contract).
• Subscription status (plan, dates) — to provide Premium (contract).
• Usage data (which games you start, mode, number of players, time) — to run statistics, improve the service and prevent abuse (legitimate interests).
• Technical data (IP address, device and browser data) — for security and operation (legitimate interests).
• Support messages — to answer you (legitimate interests).

Game progress, player names and imported decks are stored locally in your browser.

Sharing

• Service providers for hosting, database and authentication.
• Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

International transfers

Some providers may process data outside the UK/EEA. Where this happens we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.

Retention

We keep account data while your account is active and delete or anonymise it when no longer needed, or on request. Records required by law are kept for the legal period.

Your rights

You have the right to access, rectify, erase, restrict or object to processing, to data portability and to withdraw consent. You may complain to your data protection supervisory authority. We respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls.

Cookies and storage

We use only essential browser storage to keep you signed in and save your games. We do not use advertising cookies.