Privacy Policy

Your account

• As a guest. The first time you open the game, it creates a guest account for you with Firebase Authentication. A guest account has a random account ID and no name or email address. If you delete the game or lose your phone before you link a sign-in, you can't get back into a guest account.
• When you link Sign in with Apple or Google (Settings → Account), we keep the identifier, email address and name that Apple or Google provides, so you can sign in to the same account on another phone. If you use Apple's “Hide My Email”, we only see the relay address. We never see your Apple or Google password.

Your game

Your game lives on our servers (Google Firebase), linked to your account ID, so our server can decide every pack fairly and your collection can follow you to a new phone:

• Your collection: the cards you own, how many of each, their shine stars, and the characters you have.
• Your pulls: a record of every pack you open: its set, the five cards, how you paid (free, coins, Moon Pass or video), which odds it used and when. Settings → Pull history shows your last 100.
• Your balances: a ledger of every coin and stardust you gain or spend, and your level.
• Daily things: your missions, your free, Moon Pass and video packs, and whether you have an active Moon Pass (when it ends, which store it came from and whether it renews).
• Settings: sound, music and haptics, and the character in your lobby.
• Time zone and language setting: read from your phone once, when you first play. The time zone sets when your day starts (4:00 local), for daily missions and packs.

Analytics

We use Google Firebase Analytics to understand how the game is played and to make it better. It records gameplay events such as:

• the steps of the first-run tutorial;
• packs viewed and opened (the set, how you paid, the best grade in the pack, and how many packs since your last Legendary);
• cards revealed (their grade), shine added, characters bought, sets completed;
• missions claimed, and opening the drop rates;
• store purchases started, completed or failed (which product, and why one failed), and reward videos started and watched to the end.

Firebase Analytics also records some things on its own: first launch, sessions and screens viewed, your device model, operating system and app version, and your approximate region, worked out from your IP address. These events are linked to an ID Firebase gives this install of the game. We don't send Analytics your account ID, name or email address. Firebase privacy

Ads

Miuu Card Club has one kind of ad: a rewarded video you choose to watch for an extra pack. Nothing plays unless you tap it. The videos come from Google AdMob.

• Your choice comes first. Nothing about ads is asked at launch. When you tap your first video, players in regions that require it (such as the European Economic Area and the United Kingdom) see Google's consent form. On iPhone, the game then asks Apple's App Tracking Transparency question (only if the consent form allows it). No ad is requested before that.
• Saying no changes nothing else. The videos still play and still give the pack; the ads just aren't personalised.
• What AdMob may collect: your phone's advertising ID (on iPhone, only if you allow tracking), your IP address and the approximate location it reveals, device details, and how you interact with the ad. Google uses this to show, measure and, where you allow it, personalise ads. How Google uses information from apps that use its services
• Checking you watched. Each video carries your account ID, so that Google can tell our server directly that you watched to the end. We keep a record of each video (your account ID, the day and Google's reference for it) so the reward is given once.

You can change your tracking choice at any time in iPhone Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID in your phone's settings.

Purchases

Coin packs and the Moon Pass subscription are bought through the App Store or Google Play, which take the payment under their own terms. We never see your card or payment details.

Your account has a random purchase ID, which the game sends to Apple or Google with each purchase, so that the store's messages about it name your account and nothing else about you. After you buy, our own server (on Google Cloud) checks the purchase with Apple or Google before it adds your coins or turns on your Moon Pass. Apple and Google also tell our server directly about renewals, cancellations and refunds.

For each purchase, our server keeps a record of: the product, the store's transaction or order ID, the purchase token, the price and currency, the country, the dates (bought, renewed, expires, refunded), and your purchase ID. We use it to give you what you bought exactly once, to handle renewals and refunds, and to keep our accounts.

Notifications

After your first pack, the game asks whether it may remind you when your free pack is ready. The reminder is a notification scheduled on your phone itself: no push token is collected, and nothing about it is sent to us. You can turn it off in your phone's settings.

What we don't collect

• no crash reports;
• no precise location;
• no contacts, photos or files;
• no microphone or camera: the game plays music and sounds, but never records;
• no motion data: tilting a card uses your phone's motion sensor on the phone only, and nothing is recorded or sent.

How we use your information

• to run the game: open your packs, keep your collection and balances, and sync them;
• to give you the coins and Moon Pass you buy, and the packs you earn;
• to show the reward videos you choose to watch;
• to understand how the game is played and improve it;
• to keep the game fair and secure, prevent cheating and fix problems;
• to answer you when you contact us.

Who helps us run Miuu Card Club

These services process information for us, only to run the features above:

• Google Firebase and Google Cloud: sign-in (Firebase Authentication), the game's database (Firestore) and server (Cloud Functions), which also checks and records your purchases, Remote Config (which lets us pause pack opening if something goes wrong), Analytics, and the storage that serves card pictures to your phone. Firebase privacy
• Google AdMob: the optional reward videos. Google Privacy Policy
• Apple and Google: Sign in with Apple and Sign in with Google, and payments in the App Store and Google Play. They also confirm each purchase to our server. Apple Privacy Policy

Your account, your game and our purchase records are stored in the United States, in Google Cloud's us-central1 region (Iowa). Analytics, AdMob, Apple and Google may also process information in the United States and other countries. Because of this, your information is stored and processed outside your country, including outside Canada, and may be accessible to courts and authorities there under the local law. We may also disclose information when the law requires it, or to protect someone's safety.

Deleting your account

Settings → Delete account permanently deletes your account: your cards, coins, stardust, characters, pull history, missions and settings, the records of your reward videos, and your sign-in. If you signed in with Apple, the game also revokes its access to your Apple ID. It can't be undone, and coins you bought aren't refunded.

Some information is not deleted with your account:

• our records of your purchases (described under Purchases), kept only where we need them to handle refunds and for accounting, and the purchase records Apple and Google keep under their own terms;
• Analytics and AdMob data, which isn't linked to your account ID and is kept by Google for a limited period under its own retention rules.

Deleting the game doesn't delete your account, and deleting your account doesn't cancel a Moon Pass: cancel it in your App Store or Google Play subscriptions.

How long we keep it

We keep your game for as long as your account exists, and delete it when you delete your account, as described above.

Security

Your information travels encrypted (HTTPS/TLS) and is stored encrypted by Google Cloud. Access rules on our servers let only you read your game, and only our server can change your cards, coins or packs. No system is perfectly secure, so please keep your phone and your sign-in safe.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your information, and to object to or restrict how it is used. You can delete your account in the app. For anything else, write to us at support@miuustudio.com and we'll answer within 30 days. You can also complain to your local privacy regulator: in Canada, the Office of the Privacy Commissioner; in Australia, the Office of the Australian Information Commissioner; in New Zealand, the Office of the Privacy Commissioner.

Age

Miuu Card Club is meant for players aged 13 and over. We don't knowingly collect information from children under 13. If you believe a child under 13 is playing, contact us and we'll delete their account.

Changes to this policy

If we change this policy, we'll post the new version here with a new effective date. If a change matters, for example new information we collect or a new service that receives it, we'll also tell you in the game before it applies.

Contact

Questions, requests or concerns about your privacy: support@miuustudio.com. See also our Terms of Service.