Privacy Policy
Updated October 22, 2026
- We never sell your data
- Play without an account
- Delete your account anytime
What we collect
Without an account. Your decks, settings, tutorial and Adventure progress, and the name you play PvP under are saved in your browser. They stay on your device unless you sign in. When you play online or finish a match, our server gives your browser a random guest id. It holds your seat in a room, and the matches you finish are saved under it (opponent, Leaders, result, turns and moves), so they are in your match history if you make an account with a new email.
Play stats. If they are on, we record events: which pages and modes you open, the cards and decks played, how matches go, error reports, your browser, device type and screen size, and the site that sent you. A random id in your browser links your visits, and our providers see your IP address when your browser connects. When you sign in, play stats from that browser are linked to your account’s random id, so your visits on different devices count as one player. Your email and username are never sent with them. With play stats on, we may also record how pages look and respond as you use them (clicks, scrolling and what is on screen) to find bugs; anything you type in a form is hidden from these recordings.
With an account. Your email, username, saved decks, match history (opponent, Leaders, result, turns), replay videos you request, your beta access (waitlist or tester), and the items you have been given.
Emails. We email you only about your account: sign-in codes, and a message when you are let into the beta.
Bot checks. When you sign in or start a guest session, Cloudflare Turnstile may check that you are a person, using details about your browser and device.
Online play. Opponents see your username, Leader, deck as it is played, and moves. Anyone can watch a public match; choose Private before the match to prevent that.
Feedback. What you write, contact details only if you add them, and a scrambled form of your IP address to stop spam.
Server logs. Our host records IP addresses and browser details for security and to keep the Service running.
How we use it
To run the game and your account, sync decks, match players and show spectators, check usernames for abuse, fix bugs, improve the game, and keep the Service secure. If you are in the EU, UK or a similar region, our legal bases are: performing our agreement with you (accounts and play), our legitimate interests (security, moderation and improving the game), your consent (play stats in the EU), and legal obligations.
Cookies and storage
We do not use cookies. We use your browser’s storage for:
| What | Why | Needed |
|---|---|---|
| Sign-in | Keeps you signed in | Yes |
| Decks, settings, progress | Saves what you build and choose | Yes |
| Beta access | Opens the game without waiting for a check | Yes |
| Your play stats choice | Remembers your answer and whether your country needs one | Yes |
| Play stats id | Links your visits for play stats | No |
In the EU and EEA play stats start only after you say yes. Elsewhere they are on unless you turn them off here. Browsers that send Do Not Track or Global Privacy Control are never counted.
How long we keep it
Account data stays until you delete your account, which removes your account, decks, username, beta access and items. A guest id and its matches are deleted after 90 days without play. Matches you played stay in your opponent’s history under the name you had then. Play stats are kept only as long as they help improve the game. Feedback is kept until it is handled.
Your choices and rights
You can delete your account on the Account page, and clear browser data at any time. You may also ask to see, correct, export or delete your data, or object to how we use it, by emailing admin@creatorhideout.com. If you are in the EU or UK you can complain to your data protection authority.
Children
The Service is not directed to children under 13, and they may not create accounts. If we learn a child under 13 has an account, we delete it. Parents can reach us at admin@creatorhideout.com.
Where data goes
We and our providers are mainly in the United States, so your data may be processed there. Our providers use recognized safeguards, such as standard contractual clauses, for transfers from the EU and UK.
Security
We use reasonable safeguards, including encryption in transit and access limited to your own account. No system is perfectly secure.
Changes and contact
We will post any changes here with a new date, including before we add ads or new providers. IkuzoClash is run by Creator Hideout LLC. Questions or requests: admin@creatorhideout.com.