Privacy

What the game keeps

Without asking you anything, the game creates a guest account tied to your browser. It then keeps:

• your account: an identifier, your username, your avatar (a species or your initial) and your friend code;
• what you do in the game: your cards, opened boosters, decks and battles, friends, trades, market listings and bids, your okapis and your Galets, and your day streak (the last day you claimed your reward);
• if you save your account: your email address, or the identity Google or Discord gives you (email address and account name);
• if you buy Galets: the offer, the amount paid, the currency, the billing country and the payment references at Stripe. Wikapi never sees your card;
• technical server logs, which may contain your IP address, to run the game and catch abuse.

The game never asks for your age, address or phone number.

Why

To run the game (keep your collection, find you on another device, run the market and trades), to take and refund payments, to prevent cheating and fraud, and to answer your questions. Nothing is sold, and nothing is used for advertising.

Cookies and browser storage

• your account session (Supabase), without which the game doesn’t know you;
• your language (wk-lang), if you chose it in the menu;
• your settings (sound, vibration) and your last booster, kept in your browser only.

Audience measurement uses Umami, installed on our own servers: it counts page visits without cookies and without following anyone from site to site. There are no advertising cookies.

Who holds it

The game and its database run on Mystt Labs servers in Quebec. A few providers receive part of the information, each for its own role, and some keep it outside Quebec:

• Supabase: accounts and sign-in (email address, Google or Discord identities);
• Google and Discord: only if you sign in with them, under their own policies;
• Stripe: payments, under its own privacy rules;
• Proton: sending sign-in emails;
• Discord: internal team alerts (new saved account, purchase, refund), with your username and country, never your email address.

How long

As long as your account exists. A guest account that was never saved may be deleted after a long absence. Purchase records are kept as long as the law requires for accounting.

Your rights

You can ask to see what the game keeps about you, to correct it, to receive a copy, or to have your account deleted. Write to us from the address linked to your account, or give your friend code. We answer within 30 days. If you’re not satisfied with the answer, you can contact Quebec’s Commission d’accès à l’information.

If you’re under 14, ask a parent before saving your account or buying Galets.

Who is responsible

The person in charge of the protection of personal information at Mystt Labs answers any question about this page, at the address below. If an incident affects your information, we will let you know.