Privacy Policy
Understand the data used by Deckforge and how to contact us about it.
Version of October 9, 2026
Controller and Contact
This draft version describes how the service is used. The identity and full contact details of the data controller remain to be completed in the legal notices. For any request concerning your data, contact platform@deckforge.io or choose the “Personal data” reason in the Contact form.
Account and Security
We use your name, email address, login details, and the accepted Terms of Service version to manage your account and provide the requested service. The email password is stored as a hash, never in plain text. Google sign-in transmits the information needed to identify the account. Abuse prevention and rate limiting serve our legitimate interest in securing the service.
Creations and AI Assistance
Your requests, conversations, rules, imported images, and generated content are processed to deliver the features you use. Elements required for a generation may be sent to the relevant AI provider. Avoid including sensitive data or personal information about third parties unless you need it to create your game.
Payments and Orders
For a purchase, billing details, shipping details, payment references, and print files are used to fulfill the order and meet applicable accounting obligations. Bank card data is processed by Stripe. The information needed for production and delivery is shared with printing and shipping partners.
Contact Form
Your name, email address, reason, and message content are sent to the Deckforge team via Resend so we can respond to your request. The legal basis is the performance of a contract or pre-contractual steps when the request concerns the service, and our legitimate interest in responding to other inquiries. Requests to exercise rights are handled under our legal obligations. The form does not subscribe you to any marketing list.
Recipients and Transfers
Depending on the features used, providers include Railway for application hosting, Amazon Web Services for media and processing, OpenAI for AI assistance, Google for sign-in, Resend for email, Stripe for payments, and QPMN for printing. Processing takes place outside the European Economic Area, including in the United States. The details of the entities, countries, and contractual safeguards applicable to transfers remain to be completed in this draft version.
Retention
Account data and creations are retained to provide the service while the account is active. Support exchanges are kept for as long as needed to process the request and provide follow-up. Some data must then be kept separately for accounting obligations or to handle a dispute. Exact periods, backup deletion delays, and purge procedures remain to be specified; this page does not promise immediate automatic deletion.
Your rights
You may request access to, correction of, or deletion of your data and, where legally applicable, portability, restriction of processing, or objection to processing. Contact us and specify your request and the account email address concerned; additional proof may be requested if your identity is uncertain. You may also lodge a complaint with the CNIL at cnil.fr. Data required to comply with a legal obligation may be retained despite a deletion request.
Your rights and personal data — CNIL
Questions? Contact us