Privacy Policy

1. Who controls your data

Duel! is operated by Oskar Minor, based in Poland (“Duel!”, “we”, “us” or “our”). Oskar Minor is the controller of personal data processed for the game.

Privacy contact: ronim1studio@gmail.com.

2. Scope

This Privacy Policy applies to the Duel! mobile application, its online multiplayer service and related support communications. The privacy practices of Apple, Google and other independent services you use to download or operate the app are governed by their own policies.

3. Information we collect

Camera and QR codes

If you choose to scan an invitation, Duel! asks for camera permission. Camera images are processed on your device to read the duel code and are not uploaded or stored by us. You may instead enter a room code manually and may revoke camera permission in your device settings.

Information we do not intentionally collect

Duel! does not request your precise location, contacts, photos, microphone data, health data or payment-card details. The app does not contain a third-party advertising SDK and we do not use your information for cross-app advertising tracking.

4. How we use information

We use information to:

• create and secure accounts, authenticate players and maintain sessions;
• provide matchmaking, private rooms, QR invitations, real-time gameplay, reconnection and rematches;
• save profiles, results, progression, cosmetics, weekly challenges and social connections;
• operate, protect, troubleshoot and prevent abuse of the game and its services;
• measure onboarding, reliability, retention and minigame completion so we can improve Duel!;
• reply to support messages and privacy requests; and
• comply with applicable law and enforce our legal rights.

We do not use personal data for third-party targeted advertising, and we do not make decisions that produce legal or similarly significant effects using automated processing.

5. Legal bases for users in the EEA, United Kingdom and Switzerland

Where data-protection law requires a legal basis, we rely on:

• Performance of a contract: to create your account and provide the gameplay, profile, progression and social features you request.
• Legitimate interests: to secure and maintain the service, prevent misuse, provide support, and understand aggregated product performance. We balance these interests against your rights.
• Consent: where we specifically ask for it, including operating-system permission for optional camera access. You may withdraw consent at any time.
• Legal obligations: where processing is necessary to comply with law or valid legal requests.

6. When information is shared

We disclose information only as described below:

• Other players: your username, selected profile appearance and relevant gameplay information are displayed to opponents and, where applicable, friends. We do not show them your email address.
• Supabase, Inc.: provides authentication, database and backend services used for accounts, profiles, progress, social data and product analytics. See the Supabase Privacy Policy.
• Infrastructure providers: hosting and network providers process connection and gameplay data as needed to operate the multiplayer server.
• Authorities or professional advisers: when reasonably necessary to comply with law, protect users, investigate fraud or security incidents, or establish and defend legal claims.
• Business transfers: if the game or its assets are reorganized, sold or transferred, subject to appropriate confidentiality and notice requirements.

We do not sell or rent personal information. We require service providers that process data on our behalf to protect it and use it only to provide their contracted services.

7. Data retention and deletion

We keep account, profile, social, progression and match-history data while your account remains active and for as long as reasonably necessary to provide the service. After an authenticated deletion request, we delete or anonymize account-linked data unless retention is required for security, fraud prevention, dispute resolution or a legal obligation. Limited data may remain temporarily in encrypted backups until those backups are overwritten under the service provider’s normal cycle.

Temporary rooms, active match state and reconnection sessions are kept only as needed to operate the multiplayer session and recover from short interruptions. Product analytics are retained only for as long as reasonably needed to measure and improve the game, after which they are deleted or aggregated so they no longer identify an installation or account. Support communications are retained while we resolve the request and as reasonably needed to document the response.

You can remove locally stored preferences and identifiers by deleting the app or clearing its app data. This does not by itself delete information stored with your account on our servers.

8. Your choices and privacy rights

You may edit supported profile details in the app, decline camera access, revoke camera permission in device settings, play eligible private-room flows as a guest, or permanently delete your account and associated account data from the profile screen. You may also contact us to:

• request access to or a copy of personal data we hold about you;
• correct inaccurate or incomplete information;
• request deletion of your account and personal data if you cannot use the in-app deletion option;
• request restriction of, or object to, certain processing;
• request data portability where applicable; or
• withdraw consent for processing based on consent.

Email ronim1studio@gmail.com from the address connected to your Duel! account and describe your request. We may need to verify your identity before acting. Applicable law may permit or require us to retain certain information or decline part of a request. We aim to respond within the period required by law.

If you are in the EEA, UK or Switzerland, you may also complain to your local data-protection authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO), available at uodo.gov.pl.

Depending on where you live, local law may provide additional rights. We will not discriminate against you for exercising an applicable privacy right.

9. Children’s privacy

Duel! is a general-audience game and is not directed to children under 13. We do not knowingly collect personal data from a child below the age at which they may independently consent to online data processing in their country. A parent or guardian who believes a child provided personal data without the required permission should contact us. After appropriate verification, we will delete the information as required by law.

10. Security and international transfers

We use reasonable technical and organizational safeguards designed to protect information, including encrypted network connections, access controls and database row-level security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Our providers may process information in countries other than your own. Where required, we use lawful transfer mechanisms and safeguards for international transfers. The location of backend data depends on the configured hosting region and the infrastructure used to provide the service.

11. Changes to this policy

We may update this Privacy Policy when the game, our providers or legal requirements change. We will publish the revised policy with a new “Last updated” date and provide additional notice in the app when a change materially affects your rights or how we use personal data.