Privacy Policy
This policy explains what data Overbid collects, why, and what your rights are. Data controller: HUSE FLOW LLC (brand Rettuz), 30 N Gould St # 37944, Sheridan, WY 82801, United States — support@rettuz.com.
1. Data we collect
- Account: e-mail address, username, display name, password hash, optional avatar, chosen language and time zone. With social login we receive your name, e-mail and provider ID from Google or Apple.
- Gameplay: decks and cards you create (including uploaded images), matches, bids, results, rankings, favourites and in-game reactions.
- Purchases: if you subscribe to Premium, our payment provider Paddle processes your payment details. We do not see or store card numbers. We store the subscription status, plan, period dates and Paddle identifiers needed to provide Premium.
- Device and technical: IP address, browser or app version, push notification token (if you allow notifications), timestamps and error logs.
- Support: messages you send us through the feedback form or e-mail.
2. Why we use it
- To run the game: accounts, matchmaking, real-time matches, rankings and notifications.
- To provide and manage Premium subscriptions and to comply with tax and accounting rules (via Paddle).
- To keep the service safe: automated screening of uploaded images, fraud and abuse prevention, moderation.
- To improve the service using aggregated usage statistics.
- To answer your requests.
Legal bases (where GDPR applies): performance of our contract with you, our legitimate interest in a safe and working service, your consent for optional features such as push notifications, and legal obligations.
3. Sharing
We share data only with processors that help us run the service, under contracts that limit their use of it:
- Paddle.com — Merchant of Record for Premium purchases (payment, invoicing, tax). Paddle's privacy policy: https://www.paddle.com/legal/privacy
- Google Cloud Vision — automated screening of uploaded images for unsafe content.
- Firebase Cloud Messaging (Google) / Apple Push Notification service — delivering push notifications.
- Google / Apple — social login, if you use it.
- Hosting and e-mail delivery providers.
We may show ads from third-party ad networks to free users; those networks may set cookies or use device identifiers according to their own policies. We do not sell your personal data.
4. Retention
Account data is kept while your account exists. Match history and rankings are kept while the account exists. Moderation records are kept up to 90 days. Purchase records are kept as long as required by tax law (typically up to 10 years). When you delete your account, personal data is removed immediately except where we must keep it by law.
5. Your rights
You can access and change your data in the app settings, export a copy on request, and delete your account at any time in the app or at overbid.rettuz.com/account/delete. Depending on where you live you may also have the right to object, to restrict processing, and to complain to a data protection authority. Contact support@rettuz.com for any request.
6. Children
Overbid is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
7. Cookies and local storage
The website uses strictly necessary cookies (session, security token) and local storage for preferences such as theme. No tracking cookies are set by us.
8. International transfers
Our servers are in the European Union. Processors listed above may process data in other countries under appropriate safeguards (such as standard contractual clauses).
9. Changes
We will notify you of material changes in the app or by e-mail and ask for your acceptance where required.
10. Contact
support@rettuz.com