Privacy Policy

Great Guy Games, LLC ("we," "us," or "our") operates Payback Arcade, a competitive card game available as an iOS app and on the web. This Privacy Policy explains what information we collect when you use the app, how we use it, and what choices you have.

By using the app, you agree to the practices described here. If you do not agree, please stop using the app.

What the App Does

• Solo and online multiplayer card games
• Optional account so your username and stats can follow you
• A Shop link that opens the official Payback store in your device's browser (Safari), not inside the game

What We Collect

If you play without signing in

The app creates a local session id and a random display name so you can join online games. That name can appear to opponents and on match records.

If you create or sign in to an account

• Username — the public display name other players see
• Email address — for sign-up, sign-in, and password reset
• Password — stored by our auth provider as a hash (we cannot read your password)
• Sign in with Apple — if you choose that option (Apple may share a name or email based on your choices in Apple's sheet)
• Gameplay stats — such as wins, losses, points, and rank progress

Account deletion is available from your profile. Deleting an account removes the auth user and profile we store for that account.

Stored on your device

The app keeps settings on the device (for example music and sound-effect volume, help-text toggles, and similar preferences). These stay on the device unless you clear app data.

What we do NOT collect

• We do not use Apple In-App Purchase or StoreKit. Physical Payback cards and merch are sold on our website through Shopify, in the system browser.
• We do not include third-party analytics, advertising, or crash-reporting SDKs.
• We do not ask for your contacts, photos, microphone, camera, or precise location.

If that changes, this policy will be updated.

How We Use It

We use the information above to:

• Run games and show your name to opponents
• Keep your account, stats, and username
• Let you reset a password or delete your account
• Operate the game servers
• Respond to support requests you send us
• Comply with applicable law

Online Multiplayer

Online games use a game server (Colyseus) to match players and sync the table. The server sees your session, display name, and the cards/actions needed to run the match. Match results and usernames may be saved so we can show stats and leaderboards.

Shop & Website

The in-app Shop button opens paybackcardgame.com (pre-order / store) in Safari or another system browser. Checkout, shipping, and payment on that site are handled by the website and Shopify — not by Apple In-App Purchase, and not inside the game window. Shopify and the website have their own privacy terms for orders.

How We Store It

Your account and game data is stored securely using Supabase, a cloud database provider with encryption at rest and in transit (TLS). You can review their privacy practices at supabase.com/privacy.

We use industry-standard hosting and encrypted connections (HTTPS / WSS) for accounts and online play. No method of transmission is 100% secure.

Account and stats data stay until you delete your account, or until we close the service. Local settings stay on your device until you remove the app or clear its data. Live game sessions last for the match.

Sharing Your Data

We share information only as needed to operate the app:

• Supabase — accounts, profiles, and saved stats
• Colyseus — live multiplayer sessions
• Apple — if you use Sign in with Apple
• Shopify / our website — only if you choose to open the shop and place an order there
• Legal requirements — if required by law, court order, or to protect the rights and safety of users or the public
• Business transfer — if Great Guy Games, LLC is acquired or merges with another company, your data may transfer as a business asset. We will notify you before that happens.

Children's Privacy

Payback Arcade is not directed at children under 13. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information, contact us at karel@paybackcardgame.com and we will delete it promptly.

Your Rights

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate data.
• Deletion — request that we delete your account and personal data.
• Portability — request your data in a portable format.
• Opt-out — we do not sell data, so there is nothing to opt out of in that regard.

California Residents (CCPA / CPRA)

You have the right to know what personal information we collect and how we use it, request deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us below.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, your legal basis for processing is our legitimate interest in providing the game service and, where applicable, your consent. You have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email us at karel@paybackcardgame.com. We will respond within 30 days.

Your Choices

• Change your username in your profile (after the first change, a waiting period may apply)
• Sign out
• Delete your account from your profile
• Play without creating an account
• Open or ignore the shop link

Changes to This Policy

We may update this Privacy Policy when the app's behavior changes. When we do, we will update the Last updated date at the top of this page.

For significant changes, we will notify you via an in-app notice or email when practical. Your continued use of the app after a change is posted means you accept the updated policy.

Contact Us

Questions, requests, or concerns about this Privacy Policy? Reach out: