Data controller
The data controller is DITICOM, EURL, whose registered office is located at 23 Route du Tonkin, 38200 Jardin, France. Personal data requests may be sent to [email protected].
Data processed
Depending on the features used, the service may process:
- account identifiers, including email address, display name and profile picture
- identifiers and profile information provided by Google or Discord during authentication
- game data, including collection, decks, progression, results, tutorial, championship and match history
- account settings and information required for the associated Discord role
- technical data strictly required for security, diagnostics and service operation, such as error logs and connection information
Purposes and legal bases
Account and game data is processed to create and administer accounts, authenticate players, save progression, provide requested features, prevent abuse and secure the service. Processing is mainly based on performance of the Terms accepted by the player and on the publisher's legitimate interest in securing and improving the service. Processing requiring separate consent will only be enabled after that consent has been obtained.
Recipients and service providers
Data is accessible to the publisher where necessary to operate the game. It may also be processed by Railway for hosting, Cloudflare for network services and static asset storage, and Google or Discord when the player chooses their authentication service. These providers apply their own terms and privacy policies. Personal data is not sold.
International transfers
Some providers are established or operate infrastructure outside the European Economic Area. Any transfers are governed by the mechanisms provided under applicable data protection law and by the contractual commitments of the relevant providers.
Retention
Account and progression data is retained while the account is in use. When deletion is requested, data is deleted or anonymized within a reasonable period, except where temporary retention is necessary to comply with a legal obligation, secure the service, or establish, exercise or defend legal claims. Technical data is retained only for the period necessary for diagnostics, security and service operation, in accordance with the retention periods applied by the relevant providers.
Cookies and local storage
Runes of Wyrd uses session cookies and local storage mechanisms required for authentication, security, language selection, audio preferences and game operation. No advertising trackers are used. If audience measurement tools or other optional trackers are added later, this policy and the consent mechanism will be updated before they are enabled.
Your rights
Subject to applicable law, individuals may request access to, rectification or erasure of their data, restriction of processing, data portability, or object to certain processing. Requests may be sent to [email protected]. Individuals may also lodge a complaint with the French data protection authority through cnil.fr.
Updates
Last updated: September 12, 2026.