Privacy policy

Who is responsible

The controller of personal data for Kerura (the app, the web game and this website) is Sissala Jesse Juhani, sole trader, Tampere, Finland, business ID 3534911-4 (VAT FI35349114).

Contact: privacy@kerura.com.

Your account

The first time the game goes online, for example to open a pack, it makes a guest account on our server. You can keep playing as a guest. A guest account can only be reached from the device that made it: if you delete the app, clear your browser's data or sign out, you can't get it back.

An account stores:

• a random account ID, a friend code and your display name. The game gives you a starting name such as “Reader 4821” until you change it;
• a country code, taken from your device's region. Other players see it only if you choose to show it. The server also uses it to apply country restrictions (see Collection, Quills and packs);
• your age group (under 13, 13 to 15, 16 to 17, or 18 and over), not your year of birth;
• the Curator portrait and frame you choose to show;
• when the account was made and last used, and for each device a session: a fingerprint of its sign-in key with the times it was made and last used.

You can add a sign-in method to your guest account. Your progress stays with the account.

• Email and password. We store your email address, a hash of your password (argon2id; we can't read the password) and whether you have confirmed the address. We email you a link to confirm the address, and a link to choose a new password if you ask for one. We use the address for these messages.
• Sign in with Google or Apple. We store only the stable user ID that Google or Apple gives us for you. We don't store the email address or name they may send.

Cloud save. When you create an account, cloud save turns on. It keeps a copy of your profile and of the progress saved on your device (such as level, streak, Daily Dig records, Curator Pass progress and the look you chose) on our server, so that you get them back when you sign in on another device. You can turn it off in the game.

Legal basis: contract (GDPR Art. 6(1)(b)) for running your account, and our legitimate interest in keeping the service secure and free of abuse (Art. 6(1)(f)).

What stays on your device

Runs in progress, settings, notification choices, your age group and a queue of actions waiting to be sent to our server are stored on your device (in the app) or in your browser's local storage (in the web game). If you turn on usage statistics, a random install ID is stored there too.

While you are online, your collection, dust and Quills are kept on our server. The device keeps a copy of the last state it received, so you can look at your collection offline. Offline you can play runs, but you can't open packs or buy anything.

Reset local progress (Settings, Your data) deletes the runs, streak and progress stored on your device. Deleting the app, or clearing this site's data in your browser, deletes everything stored on the device. What our server holds stays until you delete your account.

Collection, Quills and packs

Our server owns everything the game hands out and keeps it on your account:

• your collection in each card language: cards, copies, finishes, wishlist, dust, Pack Points, the pack timer, pity counters, completed sets and the set you pinned;
• your Quills balance, and a ledger of every grant and spend with the reason, amount and time. For packs the ledger keeps the card IDs and the random seed of the draw, so a pack can be checked;
• for runs that earn Pack Points: a fingerprint of the run, its depth, whether you won and the points it gave. The server replays the moves to check them and doesn't keep them;
• rewarded ads you watched: the transaction ID Google reports and the kind of reward;
• daily counters, commissions, the Curator Pass levels you took, the items you own (such as the starter bundle, Expeditions, style items and Curator Pass seasons) and your Plus subscription's end date;
• the first reply to each request that changed something, so that a repeated request isn't applied twice.

We use this to run the game (contract, Art. 6(1)(b)) and to keep it honest: checking runs, ads and purchases against cheating and fraud (legitimate interest, Art. 6(1)(f)).

Packs bought with Quills are available by country and age. They are off in Belgium, in China, when your country is unknown, for age groups under 16, and in Brazil unless you have chosen 18 and over. The server decides this from your country and age group.

Boards, friends, leagues and trading

These features are optional. Friends, gifts, Peek and trading are only for players aged 13 and over. There is no chat. Other players see only what is listed here.

• Daily Dig and Weekly Tournament boards. We store your score, how deep you got and the result grid you share. A board shows your display name and score, and your country if you show one, to everyone who opens it. Players you block are left out of your boards.
• Friends. We store the friends you add or who add you with a friend code or link, and the players you block. Your friends see your display name, portrait and frame.
• Peek. We keep the card IDs of the packs you opened for 3 days, so that a friend can look at one of your cards once a day.
• Gifts. We store the sender, the card, the gift code and, if you name one, the recipient. Whoever opens a gift link can take the gift.
• Leagues. If you join leagues, we store your league, your card language, the weekly group you are placed in, your place and score at the end of each week (calculated from your Daily Dig scores), the reward you earned and when you took it. Other players in your group see your display name, your country if you show one, your portrait and frame, your week's score and how many Daily Digs you played that week.
• Trading. If you turn trading on, we store the card IDs and rarities of your duplicates and of your wishlist in one card language, and whether you allow matches with players who aren't your friends. We use them to suggest trades. Other players never see your lists: a player you can trade with sees your display name, portrait and frame, and the two cards of the suggested trade. For every trade we store both players, the two cards, its status, every step with who did it and when, and what it changed in each collection, so we can resolve problems and prevent abuse.
• Name reports. If you report a name, we store your report with the name and who filed it. A name reported by 3 players is hidden until a moderator has looked at it.

We use this to run these features (contract, Art. 6(1)(b)) and to moderate names and prevent abuse (legitimate interest, Art. 6(1)(f)). Deleting your account removes your side of all of it. A trade you completed stays in the other player's history as “A deleted profile”. Trades involve no money, and cards can't be sold.

Notifications

Reminders, for example when free packs are ready or a new Daily Dig starts, are scheduled on your device. They are created there and nothing about them is sent to us.

If you allow push notifications, the game registers a push token for your device on our server, together with the platform (Android, iOS or web), your language and the kinds you keep on (trades, gifts, friends, rewards). We send pushes through Google Firebase Cloud Messaging, and on iOS Apple's push service passes them on. A push tells you that a trade was proposed to you or confirmed, that a gift or a friend request arrived, or that a weekly reward is ready. Legal basis: your consent (GDPR Art. 6(1)(a)), given with your device's permission. You can turn notifications off in the game or in your device settings.

Analytics

Usage statistics are optional. They stay off until you turn on “Share usage statistics” in the settings, and they exist only for players aged 16 and over. If your age group is not known yet, they stay off. When they are on, the app sends the following to PostHog, our analytics provider, using its EU hosting in Germany. How you play: the screens you open, the steps of the first start, packs opened (source, number of cards, rarities, new cards, dust gained), crafting and finishes, wishlist adds, runs (mode, Binding, Stake, depth, score, length, hands played, discards, whether you reached a boss), Daily, Weekly and League play, taps and buys in the shop, ads offered, watched or failed, shares, and the settings you change. Purchases: the product, the store and how it ended (started, bought, cancelled or failed). Accounts: that you made an account or signed in, the method (email, Google or Apple) and an error code if it failed. Your device: app version and build, platform (Android, iOS or web), operating system version, device maker and model, screen size group, app language, card language, country from your device settings, time zone offset, and whether you use a guest or a full account. How the app runs: start-up time, slow frames per screen, card download times and failures, server error counts per endpoint, and when you are offline. Your install: a random install ID, a random session ID for each start, the day you first opened the app and the number of days you have played.

We do not collect your name, email address, friend code, account ID, anything you type, payment details, advertising ID, location, contacts or clipboard. We do not record your screen or your taps. The country comes from your device settings, not from your IP address, and we tell PostHog not to store your IP address. The install ID is not linked to your account.

Events wait on your device and are sent in batches, at most 500 while you are offline. The install ID, the waiting events and the day counters are deleted from your device when you turn this off or reset your local progress, and turning it on again starts with a new install ID. Legal basis: your consent (GDPR Art. 6(1)(a)). You can turn it off in the settings. Events are deleted after 12 months.

Crash reports

When the app hits an unexpected error, it sends a short crash report to our game server: the error message and technical stack trace, the app version, the platform and your language. A report has no account, name, email address or device ID, and we don't store your IP address with it. If you are offline, reports wait on your device and are sent later (at most 10).

We use them to find and fix bugs (legitimate interest, GDPR Art. 6(1)(f)). Crash reports are deleted after 30 days.

Ads

The game offers optional rewarded ads. An ad plays only when you tap to watch one, for a reward such as an extra pack, a revive or doubled Pack Points. In the apps, ads come from Google AdMob. In the web game, they come from Google's H5 Games Ads, and the web game loads Google's ad code only when you tap to watch one.

Where the law requires it, Google's consent form asks for your consent before an ad is requested, and on iOS Apple's tracking prompt can follow. Without consent, only non-personalised ads are shown. Google receives your IP address, device and app or browser information and, if your consent and device settings allow it, your device's advertising ID, and it can use cookies or similar identifiers. You can change your choice in the game's settings (Ad privacy choices) or, in the web game, in Google's message.

In the apps, Google tells our server when you finish an ad, so that the reward is paid once. For this check, the game gives Google your account ID as the user ID of the ad. In the web game, your browser reports the finished ad to the game.

A rewarded ad needs an account. If your age group is under 13, no ad is shown.

Legal basis: your consent for personalised ads (GDPR Art. 6(1)(a)); our legitimate interest for showing and counting non-personalised ads and preventing fraud (Art. 6(1)(f)); contract for paying the reward (Art. 6(1)(b)). Google explains its use of this data at policies.google.com.

Purchases

Purchases and subscriptions (Quills, Plus, Expeditions, style items, bundles and Curator Pass seasons) are made through Google Play or the App Store, which handle the payment. We never see your card or payment details.

We use RevenueCat to confirm purchases. The game gives RevenueCat your account ID as the app user ID. RevenueCat receives that ID, the product, price, currency, store country, transaction IDs, and purchase, renewal and refund dates, and reports them to our server. For each purchase our server stores the store's transaction ID, the product, price, currency, store, what it gave (Quills or an item) and when it was refunded, and for Plus the date the subscription ends.

We use this to give you what you paid for and to take it back if the purchase is refunded (contract, GDPR Art. 6(1)(b)), and to prevent fraud (Art. 6(1)(f)). Apple, Google and RevenueCat keep their own records of your purchases under their own policies, including the records accounting law requires (Art. 6(1)(c)). We keep our purchase records until you delete your account.

Downloading cards

To get card packs, the app and the web game download card files and images from our servers. Like every web server, they receive your IP address, the time of the request and technical details your device sends, such as the app or browser version.

We use this only to deliver the files and to keep the service secure, not to identify or profile you. Legal basis: our legitimate interest in running a working and secure service (GDPR Art. 6(1)(f)).

The app doesn't contact Wikipedia directly. Card text and images are collected by our own servers and copied to our storage first.

This website

The pages of this website set no cookies and load nothing from other companies' servers: fonts, images and scripts all come from this domain. If you choose or dismiss the language suggestion, one setting is saved in your browser's local storage so we don't ask again. Our hosting provider processes your IP address to deliver the pages, as described in Downloading cards. The web game under /play/ stores its data in your browser's local storage and loads Google's ad code only as described in Ads.

Cards about real people

Every card is made from a Wikipedia article, and some articles are about real people. A card shows the article's title, its short description, a shortened excerpt of its first sentences, and numbers computed from public data: how often the article is read, its length, its number of references and language versions, and a date such as a year of birth. For a person, that is personal data.

Purpose and legal basis. We use this public information to make game cards that show, credit and link to encyclopedia articles. Our legal basis is legitimate interest (GDPR Art. 6(1)(f)): our interest in making the game, and the public's interest in freely licensed knowledge. We keep the impact on the people shown small:

• cards about living people never show a photo; they get drawn artwork instead;
• stats are computed the same way for every card and never describe a person's worth;
• we leave out people known mainly for crimes, victims of crimes, and people who died in the last 24 months;
• we never sort or filter cards by sensitive characteristics such as health, religion, ethnic origin or sexual orientation.

Sources. Wikipedia articles and Wikidata, both publicly accessible, and public Wikimedia statistics such as page views.

Recipients. Everyone who plays the game can see the cards. Card files are stored by our hosting providers (see Service providers).

How long. A card stays in the game while its article meets our rules. Card pools are rebuilt regularly from current Wikipedia data, so changes and deletions on Wikipedia reach the game with the next rebuild.

Your rights. If a card is about you, you can object to it (GDPR Art. 21) and ask for access, correction or erasure. The card removal page explains what to send. Because a card copies its article, factual errors are fixed fastest on Wikipedia itself.

We give this information here rather than to each person individually, because contacting everyone who has a Wikipedia article is impossible (GDPR Art. 14(5)(b)).

Service providers and transfers

We use these providers to run the game. Each one gets only what it needs for its task:

• Cloudflare, Inc.: hosting and delivery of this website, the web game, card files and images.
• Hetzner Online GmbH (Germany): hosting of the game server, its database and its backups, in the EU. They hold the data described in this policy.
• Brevo (France): sending the emails that confirm an address or reset a password.
• Google (Google Play, Sign in with Google, Firebase Cloud Messaging) and Apple (App Store, Sign in with Apple): app downloads and updates, payments, sign-in and push notifications, under their own privacy policies.
• RevenueCat, Inc.: confirming purchases and subscriptions.
• Google (AdMob, H5 Games Ads): rewarded ads, only when you choose to watch one.
• PostHog Inc.: analytics, only if you turn them on.

Some of these companies are based in the United States. Transfers there rely on the EU–US Data Privacy Framework where the company is certified, or on the European Commission's Standard Contractual Clauses.

Sharing

When you share a Daily Dig result, a challenge, a card, a friend code or a gift, the game creates text, an image or a link that you send with your own apps. A link holds only what it needs: a day number, a card's ID, a friend code or a gift code, or, for a challenge, the run, your score and a name if you add one.

We don't sell personal data, and we don't share it with anyone for their own marketing.

How long we keep data

• Game data on your device: until you delete it.
• Your account with its collection, Quills, ledger, purchase records, owned items, wishlist, cloud save, friends and blocks, email address and password hash, and portrait and frame: until you delete your account. An account that nobody used for 24 months is deleted, unless a Google or Apple sign-in is linked to it. An email address you never confirm is deleted after 30 days.
• Sign-in sessions: 12 months without use.
• Records of mailed links: 7 days after the link expires (confirm links last 24 hours, password links 1 hour).
• Push tokens: 90 days without a refresh (the app registers again whenever it starts). Records of reward pushes: 60 days.
• Daily Dig and Weekly Tournament scores, and name reports: 12 months.
• Finished league weeks, leagues you left, and closed trades: 12 months.
• Opened packs for Peek: 3 days. Records of submitted results, gift links, saved replies to requests, ad checks and handled purchase events: 30 days.
• Crash reports: 30 days.
• Analytics events: 12 months.
• Server and hosting logs: a short time, at most 30 days.
• Database backups: up to 5 weeks. Data you deleted can stay in a backup until the backup is replaced.
• Emails you send us: as long as needed to handle your request, and at most 2 years after the last message.

Children

The game is for players aged 13 and over. Kerura asks for your year of birth once, the first time you create an account, watch a rewarded ad or buy something. We keep only your age group (under 13, 13 to 15, 16 to 17, or 18 and over): on your device and, once you have an account, on your account. The year itself is not stored, and the game can't check it.

If your age group is under 13, accounts (email, Google and Apple), rewarded ads and purchases are not available, friends, gifts, trades and Peek are switched off, and analytics stay off. The game still makes a guest account for you when it goes online, with the data described in Your account and Collection, Quills and packs. If your age group is 13 to 15, Quills and packs bought with Quills are not available either. Quills and packs bought with Quills need an account and an age group of 16 or over.

If you think a child has sent us personal data, for example by email, contact us and we will delete it.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time without affecting what happened before.

In the game, Settings, Your data lets you:

• Export my data: download a JSON file with your account details (ID, display name, country, friend code, age group, portrait and frame, linked sign-in providers), scores, packs of the last 3 days, friends, blocks, reports you filed, gifts, leagues, trades, cloud save and sessions;
• Reset local progress: delete the runs, streak and progress stored on your device;
• Delete online profile: delete your account and everything stored with it on our server, as described in How long we keep data. This doesn't cancel a subscription: cancel it in Google Play or the App Store.

The export file doesn't contain your collection, Quills, purchase records or email address. Write to us and we send you those.

Write to privacy@kerura.com. We answer within one month. If you write from an address that isn't on your account, we may need some details from you to find it (GDPR Art. 11 and 12(6)).

You can also complain to a data protection authority, for example in the EU country where you live. In Finland, that is the Data Protection Ombudsman (tietosuoja.fi).

Changes to this policy

When this policy changes, we update the date at the top. If a change matters to you, such as a new kind of data or a new provider, we will also tell you in the game before it takes effect.

Contact

Questions about privacy: privacy@kerura.com.
Sissala Jesse Juhani, sole trader, Tampere, Finland.