Privacy policy

Information we collect

We store your email address, player handle, account identifiers and sign-in records. If you use a password, we store a password hash, not the readable password. Sign-in sessions can include your IP address, browser information and activity timestamps.

We also store the decks you import, collection information, notes, game settings, deck snapshots and game history you create. Service logs can contain request details, IP addresses and diagnostic information used to operate and protect the app.

Google sign-in

Google sign-in requests only basic identity, email and profile permissions. Google provides an account identifier, verified email address and basic profile information such as your name and profile picture. We use this information to authenticate you and connect your Google account to Rule Zero.

Your chosen handle is your player identity. Your Google name and photo are not used as your public player profile; the commander of your selected deck supplies your in-game portrait. Authentication tokens are stored encrypted and can contain Google profile information.

We do not request access to Gmail, Drive, Calendar or contacts. Google account data is not used for advertising, sold, or used to train AI models. You can remove Rule Zero’s Google access in your Google Account connections. Removing access does not delete your Rule Zero account or saved decks.

How information is used and shared

We use information to sign you in, save your decks and progress, run games, respond to support requests and prevent abuse. Your imported decks, collection, notes and game history are restricted to your account in the current app.

Railway provides application hosting, database storage and backups. Cloudflare provides traffic filtering, DDoS protection and Turnstile security checks, processing request details such as IP addresses and browser signals to prevent automated abuse. Google processes Google sign-in. Card lookups can send card names to Scryfall to retrieve public card information and artwork. These providers process information needed to deliver their services. Authorized operators may access account information when needed for support, maintenance or security; information may also be disclosed when legally required.

Cookies and browser storage

Essential cookies keep you signed in and secure the sign-in flow. Browser storage remembers app preferences. Rule Zero does not currently include advertising or third-party analytics trackers. Blocking essential cookies prevents account sign-in from working.

Retention and your choices

Account information and saved content are retained to provide your account and its features. Removing an item from the interface may hide it without immediately erasing the stored record. Backups and operational records can remain after a deletion request until they expire.

To request access, correction or deletion of your account information, email [email protected] from the address associated with your account. We may need to verify account ownership before acting on a request. You can change your handle and sign out from your account screen.

Contact and updates

For privacy questions, contact [email protected]. We will update this page when these practices change and show the revised date above.