Privacy policy
Deckrypt Dungeon Cards · Effective 7 October 2026
The short version
- You can play without telling us your name or email. The game gives you an anonymous Player ID and keeps a cloud copy of your progress under it.
- Signing in with Google is optional. If you do, we get your Google email, name and profile photo link.
- Anonymous gameplay stats are on by default. You can turn them off in Settings.
- Ads come from Google AdMob and follow the consent choices Google shows you.
- You can delete your account and data from inside the game at any time.
Who we are
Deckrypt Dungeon Cards ("Deckrypt") is a mobile game for Android made by Brazza Studio, an independent studio. This policy covers the game and this website. "We" and "us" mean Brazza Studio. You can reach us at support@brazzastudio.com.
What we collect and why
Progress and settings on your phone
The game saves your progress on your device: levels and stars, Souls and Runes, boosters, heroes, relics, cosmetics, the season pass, daily rewards, missions, Daily Challenge and Endless records, and gift codes you have redeemed. It also saves your settings, such as language, volume, reduced motion and whether you share stats.
Player ID and cloud save
The first time you open the game, it signs you in anonymously through Firebase Authentication. That creates a random Player ID, which you can see in More → Account. A copy of your progress is stored under that ID in Cloud Firestore, so it isn't tied to one phone and can follow you to another device if you sign in with Google. A guest account has no name or email attached. Only your own signed-in game can read or change your cloud save.
Google sign-in (optional)
If you tap Sign in with Google, Firebase Authentication receives your Google account's email address, name and profile photo link. We use them only to identify your account and move your progress between devices. The game doesn't read anything else from your Google account and never posts on your behalf.
Purchases
Purchases go through Google Play Billing. Google handles the payment, and we never see your card number or other payment details. With your save we keep the product, the purchase token and its status, so each purchase is delivered once and permanent purchases can be restored.
Anonymous gameplay statistics
While Settings → Privacy → Share anonymous stats is on (it is on by default), the game sends events to Google Analytics for Firebase: levels started, won, lost or abandoned, rewards claimed, shop visits and purchases (product, price shown and currency), ads started and finished, and sign-in and sync results. Firebase adds device information such as an app instance ID, phone model, Android version, language and an approximate location derived from your IP address. We use this to balance levels and find bugs. These statistics aren't linked to your Player ID, name or email. Analytics in Deckrypt doesn't collect the advertising ID, and its ad personalization signals are turned off. Turn the switch off and the game stops sending these events.
Advertising
Deckrypt shows ads from Google AdMob: full-screen ads between levels and optional videos with rewards. To show and measure ads and to prevent fraud, AdMob may process your advertising ID, IP address, device information and how you interact with ads. Where the law requires consent (for example in the European Economic Area, the UK and some US states), Google's consent form appears first and your answer decides whether ads can be personalized. You can change it later in Settings → Ad privacy options.
App integrity
Firebase App Check uses Google Play Integrity to confirm that requests to our cloud services come from a genuine copy of the game on a genuine device. This protects the cloud saves and stops abuse. It doesn't identify you.
Deletion requests made through the web form
If you ask for deletion through our Google Form, the form records the email address of the Google account you used (verified by Google), the Player ID you enter and the date. An automated script checks the request, deletes the data, and writes the result next to it in a private Google Sheet. We keep that record for one year so we can answer questions about the request, then it is deleted automatically.
Support emails
When you email us, we receive your address, your message and anything you attach. We use them only to answer you.
This website
This site has no ads, no analytics and no cookies. Fonts and images are served from this site, not from third parties. Your browser remembers the language you picked (in local storage, on your device only). Our hosting provider keeps standard request logs, such as IP addresses and browser type, for security and to run the service.
What we don't do
Deckrypt doesn't send notifications. It doesn't ask for your location, contacts, camera, microphone or files. We don't sell your personal information.
Services we use
- Firebase Authentication for the Player ID and the optional Google sign-in.
- Cloud Firestore for the cloud save.
- Firebase Remote Config for season pass content, shop bundles and gift codes. It receives no personal information from us.
- Google Analytics for Firebase for the anonymous statistics.
- Firebase App Check with Google Play Integrity.
- Google AdMob and Google's User Messaging Platform for ads and consent.
- Google Play Billing for purchases, and Google Play for distribution and updates.
- Google Forms, Google Sheets, Apps Script and Gmail for deletion requests and the emails about them.
- A web hosting provider for this site.
These services process information under their own terms. Google explains its part in the Google Privacy Policy and in How Google uses information from sites or apps that use its services.
Your choices
- Statistics: turn off Settings → Privacy → Share anonymous stats.
- Ads: answer Google's consent form when it appears and change it any time in Settings → Ad privacy options. You can also reset or delete your advertising ID in your phone's settings. The Remove Ads purchase turns off the full-screen ads.
- Account: playing as a guest needs no personal information. Google sign-in is optional, and you can sign out in More → Account.
How long we keep data
Your cloud save and sign-in account stay until you delete them. Data on your phone stays until you delete it in the game, clear the app's storage or uninstall. Google Play keeps purchase records under Google's own policies. Anonymous statistics follow the retention setting of Google Analytics for Firebase. Deletion request records are kept for one year. Support emails are kept while we need them to help you. We may keep a small amount of information longer when the law, security or accounting requires it.
Deleting your account and data
In the game: open More → Account. Tap Delete account if you signed in with Google, or Erase my progress if you play as a guest, and confirm. This permanently deletes your cloud save, your sign-in account and the progress on that phone, and the game starts over as a new guest. It can't be undone.
Without the game: use the web form or email us. Both are explained on Delete your account and data.
What stays: permanent purchases (Remove Ads and the Necromancer) belong to your Google Play account and can be restored from the game's Shop. Runes and other consumables are deleted with your progress. Refunds go through Google Play. Anonymous statistics aren't linked to your account, so there is nothing of yours to find in them.
Your rights
Depending on where you live, for example under Brazil's LGPD or the GDPR in the EU and UK, you may have the right to access, correct, delete or get a copy of your personal data, to object to or limit some uses of it, and to withdraw consent. Write to support@brazzastudio.com and we will answer within the time the law sets. You can also complain to your data protection authority. In Brazil, that is the ANPD.
Children
Deckrypt is meant for players aged 13 and over and isn't directed at children under 13. We don't knowingly collect personal information from children. If you think a child has given us personal information, write to support@brazzastudio.com and we will delete it.
Security and where data is processed
Data travels encrypted (HTTPS). Access to each cloud save is limited to the account that owns it, and the keys our deletion script uses are stored apart from the code and can be revoked. No system is perfectly secure. Google and our hosting provider may process data in countries other than yours, under their own contractual and legal safeguards.
Changes to this policy
When the game changes in a way that affects your data, we update this page and the date at the top. Important changes may also be announced in the game.
Contact
Brazza Studio · support@brazzastudio.com