Epoc Privacy Policy

This policy explains what personal data XAGU STUDIOS, S.L. («Xagu», «we») processes when you play Epoc, the card game in which you place events on a timeline, in any of its versions: Android (Google Play), iOS (App Store), Windows (Steam and Microsoft Store) and web (browser). The Spanish version is the original; if the two differ, the Spanish one prevails, without prejudice to any mandatory rights you have in your country.

1. Data controller

• Controller: XAGU STUDIOS, S.L.
• Tax ID (NIF): B75134445
• Registered office: Parque Empresarial Zuatzu – Zubiberri 29, 1-3 (Edificio Ondarreta), 20018 Donostia-San Sebastián (Gipuzkoa), Spain.
• Phone: +34 943 215 270
• Email: info@xagustudios.net

For any question about your data or this policy, write to that address.

2. What data we process

2.1. If you play as a guest

The first time you open Epoc you can choose between signing in or playing as a guest. As a guest you play against the computer and no account is created. Offline games run entirely on your device and are not sent anywhere. If you are connected, some games against the computer are run by our server without scoring; in that case the server only processes the technical connection data (section 2.7) while the game lasts.

2.2. Your account

To play online, have friends and appear on the leaderboards, you create an account by signing in with Google (Android, Windows and web) or Apple (iOS). When you sign in, Google or Apple give the app a signed credential (a «token») that may contain your name and email address. Our server checks that the credential is genuine and only stores:

• your account identifier at that provider (the sub field, a code that does not reveal who you are) and which provider it is;
• an internal identifier for your Epoc account, the platform you play on and the dates you signed up and last played;
• the nickname you choose (3 to 16 characters, unique in the game). Please do not use your real full name;
• the country, region and city you pick from a list in your profile. The country is suggested from your device's region setting; we never use GPS or network location. You can pick a less detailed place or change it at any time;
• your skill rating (ELO), used only to match you with opponents of a similar level.

We do not store your email address or your real name. If Apple offers to share your name, it is only used, at that moment, to suggest a nickname you can change.

2.3. Games, scores and leaderboards

For the games you play with your account on our server (online, in private rooms and against the computer while connected) we store: the date, mode, variant («Turn-based» or «All at once»), deck, turn time, participants, the cards you got and whether you placed them correctly, your points and the result. From this we calculate your points and accuracy by deck type, by family and overall.

Leaderboards are public: any player can see your nickname, country and city (and, on regional leaderboards, your region), your rank, points, accuracy and number of games, worldwide and in your country, region and city. When each month closes, the top three in each place are shown too. Your public profile shows your nickname, your place and your game statistics. Offline games are neither sent nor scored.

2.4. Friends, invitations and rooms

• Friends: you can send friend requests to another player by typing their nickname, accept or decline them and remove friends. We store your friends list and pending requests. Your friends can see whether you are online.
• Private rooms: creating a room generates a 5-letter code. Anyone with the code or link can join. You can invite an online friend, who receives a notice with your nickname. Rooms are temporary and disappear when they end.
• There is no chat and no messaging between players. All other players see of you is your nickname, your place, your results and your moves during a game.

2.5. Session

When you sign in, the server creates a random session code that is kept on your device so you do not have to sign in every time. Our database only stores a fingerprint (SHA-256 hash) of that code, never the code itself. The session expires after 90 days without use and is deleted when you sign out.

2.6. Epoc Pro purchases (Android and iOS)

Epoc Pro is a one-time purchase made on Google Play or the App Store. The store handles the payment: we never receive your payment details. To check that the purchase is valid and to remove Pro if it is refunded, the app sends our server the purchase credential (on Android, the purchase token; on iOS, the transaction signed by Apple), and Google and Apple notify the server when a purchase is refunded, voided or revoked. We store the platform, product, credential, order or transaction number, state (active, pending or revoked) and the dates of purchase and last check. If you are signed in, this record is linked to your account.

The PC version is bought on Steam or the Microsoft Store, which handle the payment under their own policies; we receive no data about that purchase.

2.7. Technical data and security

Every time the app or browser connects to our server, it receives your IP address and technical request data (date and time, requested address, app version and type of device or browser). We use it to run the service, to limit the number of requests per IP and per account (which protects us against abuse and attacks) and to investigate errors and security incidents. Request counters only live in memory for a few minutes. Server technical logs are kept for at most 30 days.

2.8. Advertising, analytics and consent

In the free versions, Google processes data to show ads (section 5) and, on Android and iOS, for usage analytics (section 6). Your consent choices are stored on your device.

2.9. Data that stays on your device

Your language, game settings, session code, whether you have Pro and your privacy choices are stored on your device (on the web, in the browser's local storage). We do not receive them except as explained above.

2.10. What we do not do

Epoc does not ask for your phone number or email, does not access your precise location, contacts, photos, camera or microphone, has no chat, includes no crash-reporting tools and does not sell personal data.

3. Purposes and legal bases

We make no decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. ELO matchmaking and the automatic word filter for nicknames are automated, but they only decide who you play with or whether a nickname can be used; if you think the filter got it wrong, write to us and a person will review it.

4. Consent and how to withdraw it

• Ads and analytics (Android and iOS): if you are in the European Economic Area, the United Kingdom or Switzerland, before any ad is requested the app shows Google's consent form (User Messaging Platform, UMP). You can change your choice at any time in Settings → Ad privacy. If you decline, you play exactly the same: ads will not be personalised and analytics will run without identifiers.
• Tracking on iOS (ATT): on iPhone and iPad, Apple's advertising identifier (IDFA) is only used if you accept the «Allow app to track your activity» prompt. You can change this at any time in iPhone Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in your device's Google settings.
• Web: in the EEA, the UK and Switzerland, Google's consent message is shown before advertising cookies are used, and you can change your choice with the privacy settings link shown on the page.
• Account: you can sign out at any time (Settings → Account) or delete your account (section 13). You can also remove Epoc's access in your Google account (myaccount.google.com/permissions) or Apple account (iPhone Settings → your name → Sign in with Apple).

Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

5. Advertising

The free versions of Epoc are funded by ads. Ads are never shown during a game. On Android and iOS, Google AdMob shows full-screen ads when you return to the menu after some games and, only if you choose to watch one, rewarded videos (the «second chance»). On the web, Google AdSense (ads for HTML5 games) shows ads at similar moments. With Epoc Pro there are no ads between games. The PC version has no ads.

To show and measure ads, Google processes the device's advertising ID (on iOS, only with your ATT permission), your IP address (from which it may infer an approximate location), technical device data and your interaction with ads, and on the web cookies or similar technologies. Google acts as an independent controller of that data under its own policy. More information at policies.google.com/technologies/partner-sites.

6. Usage analytics (Google Analytics for Firebase)

Android and iOS only. The PC and web versions contain no analytics.

• What it collects: only the events Firebase records automatically (first open, sessions, time in use, app updates, in-app purchases with their product, price and currency); device model, operating system, app version and language; approximate country and region, which Google infers from the IP address without storing it; a randomly generated installation identifier; and, only if you consent, the advertising identifier (on iOS, also only with ATT permission). We send Analytics no events of our own, and never your nickname, place or account identifier.
• Purpose: to know how much and how Epoc is used and what it earns, to improve the game.
• Consent: Analytics starts with consent denied (Google consent mode v2) and only uses identifiers when your choice in the privacy form allows it. Until then it runs in a restricted mode, without identifiers, and Google only uses that data in aggregate.
• Processor: Google Ireland Limited processes this data on behalf of Xagu. More information at firebase.google.com/support/privacy.

7. Web version: storage and cookies

Epoc in the browser keeps your language, settings and session code in the browser's local storage, because they are necessary for the service you request (no consent required). Google sign-in is provided by Google Identity Services, which may use its own cookies when you press the button. Google AdSense ads may use cookies and similar identifiers which, in the EEA, the UK and Switzerland, are only used to personalise ads with your consent (section 4). You can clear cookies and storage in your browser settings.

8. How long we keep your data

• Account, nickname, place, ELO, games, scores and friends: while you have the account. They are deleted when you delete it.
• Sessions: expire after 90 days without use and are deleted when you sign out.
• Pending friend requests: until accepted, declined or the account is deleted.
• Rooms and invitations: only while the room lasts.
• Pro purchase record: while the account it is linked to exists. If you bought without an account, for as long as needed to handle store refunds and revocations, at most 3 years after the last check. Deleting the account does not cancel your purchase: Pro belongs to your Google Play or Apple account and you can restore it.
• Server technical logs: at most 30 days; request counters, a few minutes in memory.
• Backups: deleted data disappears from backups as they rotate, within at most 30 days.
• Analytics: data linked to an identifier is kept for at most 14 months.
• Messages you send us: as long as needed to deal with them, at most 12 months.
• Data processed by Google, Apple, Valve and Microsoft as controllers (stores, ads, sign-in): under their own policies.

Where the law requires it, we keep the necessary data blocked for the limitation period of any liabilities arising from the processing, and then delete it.

9. Who we share your data with

We do not disclose your data to third parties unless required by law. These providers take part in running Epoc:

In addition, as explained in section 2.3, your nickname, place and results are visible to other players on the leaderboards and on your profile. We may disclose data to authorities and courts where the law requires it.

10. International transfers

Our server and database are in the European Union. Google, Apple, Valve and Microsoft may process data outside the European Economic Area, for example in the United States. Those transfers rely on the EU-US Data Privacy Framework, under which these companies are certified, and on the standard contractual clauses approved by the European Commission.

11. Children

Epoc is intended for people aged 13 and over. We do not knowingly collect data from children under 13. To create an account, if the age of consent for data processing in your country is higher (in Spain, 14; in other EU countries, up to 16), you need permission from your parent or guardian. If you are a parent or guardian and believe a child has given us data without that permission, write to info@xagustudios.net and we will delete the account.

12. Your rights

You can exercise at any time your rights of:

• Access: to know what data of yours we process and get a copy.
• Rectification: to correct inaccurate data. You can change your nickname and place yourself in Settings → Account.
• Erasure: to delete your data (section 13).
• Objection to processing based on legitimate interest, and restriction of processing in the cases provided by law.
• Portability: to receive the data you gave us in a structured, machine-readable format.
• Withdrawing your consent at any time (section 4).

Write to info@xagustudios.net or to the postal address in section 1. As we do not store your email, to check that the account is yours we will ask for your nickname and some other account detail (for example, your place or roughly when you signed up). To change your nickname or place, or to delete the account, the quickest way is to do it yourself in the app. We will answer within one month. If you are not satisfied, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country.

13. Deleting your account

You can delete your Epoc account and all data linked to it in three ways:

1. In the app: Settings → Account → Delete account. On iOS, if you signed in with Apple, we also revoke the Sign in with Apple authorisation with Apple.
2. On the web: at /delete-account, by signing in with your Google account, even if you no longer have the game installed. If your account is an Apple one, delete it from the app or write to us.
3. By email: writing to info@xagustudios.net with your nickname. We will delete it within 30 days after checking that it is yours.

Deleting it immediately removes your account, nickname and place, sessions, games and scores (you disappear from the leaderboards), friends and requests, and the linked Pro purchase record. In games you played against other people, they keep their own results, but your nickname no longer appears. Signing out does not delete the account. Deleting the account does not delete your Pro purchase at the store (you can restore it), nor the data that Google, Apple, Valve or Microsoft process as controllers, nor Analytics data, which expires on its own (section 8).

14. Security

We apply technical and organisational measures appropriate to the risk: all communications are encrypted (HTTPS/TLS), sign-in credentials are verified with Google's and Apple's public keys, session codes are stored only as fingerprints, database access is restricted and server secrets are kept out of the code. No system is infallible; if a breach affecting your data occurred, we would notify it as the law requires.

15. Changes to this policy

If we change this policy, we will update this page and its date before the change reaches the game. If the change is significant, we will also tell you in the app.