Privacy Policy

Last updated: 23 July 2026

1. Controller

(registry code 17363244), Tuulemäe tn 5, Lasnamäe linnaosa, Tallinn 11411, Harju maakond, Estonia, is the data controller for CrystalAce. Contact: support@crystal-ace.app.

2. What we collect

Account data (email address, display name); game data (level, chip balance, gameplay progress and history); purchase records (package, amount, currency, status, and a payment reference - never your full card number, which only our payment provider handles); technical data needed to run the Service (device/browser information, approximate region, log data).

3. Why we process it

To run the game and keep your progress (performance of contract); to process purchases and keep required accounting records (contract and legal obligation); to prevent fraud and abuse (legitimate interest); to send you service notifications you opt in to (consent, withdrawable any time).

4. Who helps us process it

We use service providers for hosting, database and authentication, and payment processing. They process data only on our instructions. Payment card data is collected directly by the payment provider on their secure page and never touches our servers.

5. How long we keep it

Account and game data: while your account exists and for a short period after deletion. Purchase and accounting records: as long as Estonian accounting law requires (generally 7 years).

6. Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability, and can object to processing based on legitimate interest. Write to support@crystal-ace.app. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local supervisory authority.

7. Children

CrystalAce is for adults (18+). We do not knowingly process children’s data; if you believe a minor has an account, contact us and we will delete it.

8. Changes

We will post any changes to this policy here and, for material changes, notify you in the app.