Privacy Policy

1. Who we are

Jade Wake LLC ("Jade Wake," "we," "us," or "our") operates Minimum Viable Deck, including the game and website available at minimumviabledeck.app(the "Service"). For data protection purposes, Jade Wake LLC is the controller of personal data described in this policy.

Privacy questions and requests can be sent to minimumviabledeck@gmail.com.

2. Information we collect

Guest play and browser storage

When you play as a guest, the Service stores game progress, company and character names, settings, and related gameplay data in your browser's local storage. This information normally remains on that device and is not placed in your cloud account unless you choose to create or sign in to an account and transfer or save progress.

Account and sign-in information

If you create an account with email and password, we process your email address, an internal user identifier, authentication records, and essential session information. Passwords are handled by our authentication provider and are not available to Jade Wake in plain text.

If you choose Google sign-in, Google may provide your name, email address, profile picture, and a provider identifier. We request only the basic profile information needed to create and authenticate your account. Your use of Google is also governed by Google's own privacy terms.

Cloud saves and gameplay

Signed-in users may store game-save information such as their chosen character and company names, game state, progress, in-game decisions, account tier, save slot, and save timestamps. This information is associated with the user's account so the save can be retrieved later.

Purchases

If you purchase Full Access, our merchant-of-record payment provider, Paddle, collects and processes the billing and payment details needed to complete the transaction. Jade Wake receives transaction information such as your account identifier, purchase email, order and customer identifiers, payment status, product purchased, price, tax information, and refund status. We do not receive your complete payment-card number.

Service, security, and support information

Our hosting, authentication, and email providers may process limited technical information such as IP address, browser or device type, request timestamps, authentication events, and security or error logs. If you contact us, we receive the information in your message and any contact details you provide.

3. How and why we use information

• Provide the Service: create and authenticate accounts, load and store cloud saves, and provide requested support. For EEA and UK users, this processing is generally necessary to perform our contract with you or take steps at your request.
• Operate and secure the Service: maintain reliability, troubleshoot errors, prevent fraud or abuse, and protect users and the Service. We rely on our legitimate interests in providing a safe and functional game, balanced against your rights.
• Communicate about your account: send confirmation, password-recovery, security, and other transactional messages. We do not currently use account creation as a marketing opt-in.
• Complete purchases: open secure checkout, confirm payment, grant or restore Full Access, process refunds, prevent fraud, and keep legally required transaction records. This is generally necessary to perform our contract with you and meet our legal obligations.
• Meet legal obligations: comply with applicable law, enforce our terms, and establish, exercise, or defend legal claims.
• Use consent where required: if we later introduce optional analytics, marketing, or non-essential storage, we will request any consent required by law and provide a way to withdraw it.

4. When information is shared

We disclose information only as needed to run the Service, complete a transaction you request, protect legal rights, or comply with law. Current service providers include:

• Supabase for authentication, database services, and cloud saves.
• Vercel for website hosting and delivery.
• Resend for transactional account email.
• Google when you choose Google authentication.
• Paddle as merchant of record and payment processor for Full Access purchases.

These providers process information under their own terms and our applicable service agreements. We may also disclose information in a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

5. International data transfers

Jade Wake and its providers may process information in the United States and other countries that may have different data protection laws from your country. Where European data protection law requires a transfer mechanism, we rely on applicable adequacy decisions, contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism provided by law and our service providers.

6. Retention

• Guest-save data remains in your browser until the Service or you overwrite it, you clear site data, or your browser removes it.
• Account and cloud-save data is generally kept while the account is active and as reasonably needed to provide the Service.
• After a verified deletion request, we delete or de-identify data that is no longer needed, subject to reasonable backup cycles and limited retention required for security, fraud prevention, legal obligations, or legal claims.
• Support communications and security logs are retained only as long as reasonably necessary for support, security, compliance, and dispute-resolution purposes.
• Purchase and tax records may be retained for the period required by accounting, tax, fraud-prevention, chargeback, and consumer-protection laws, even after an account is deleted.

7. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to receive certain information in a portable format. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

EEA and UK users may also lodge a complaint with the data protection authority where they live, work, or believe an infringement occurred. You may exercise a right by emailing minimumviabledeck@gmail.com. We may ask for information necessary to verify your identity and protect your account. We aim to respond within the time required by applicable law, including within one month where the GDPR applies.

8. Browser storage and cookies

Minimum Viable Deck uses browser local storage for guest saves, settings, and essential authentication state. The current build does not use advertising cookies or behavioral analytics. Google and other sign-in providers may use cookies or similar technologies on their own services when you choose their sign-in option.

9. Security

We use reasonable administrative and technical safeguards designed to protect information, including access controls and encrypted network connections. No online service can guarantee absolute security, so please use a unique password and protect access to your email account and devices.

10. Children

The Service is not directed to children under 16, and children under 16 may not create an account. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it. A parent or guardian may contact us at the email above.

11. Automated decisions

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. In-game outcomes are gameplay mechanics and do not determine real-world eligibility, employment, credit, insurance, or other legal rights.

12. Changes to this policy

We may update this policy as the Service evolves. We will post the revised version at this URL, change the effective date, and provide additional notice when required by law. Material new uses of personal information will not be applied retroactively where prohibited.

13. Contact

Jade Wake LLC
Email: minimumviabledeck@gmail.com

Please see our Terms of Service for the rules governing use of Minimum Viable Deck.