Privacy Policy

Effective October 25, 2026

Padasta is a card game made by Bad Labs LLC ("we", "us"). This policy explains what the game collects, why, who handles it for us, and how you can have it deleted. If anything here is unclear, write to support@padasta.com.

What we collect, and why

Your game account

The first time you open Padasta, our game service (Microsoft PlayFab) creates an account for you, tied to an identifier your phone gives to apps from the same developer (on iPhone, the "identifier for vendor"). It is how the game keeps your progress. It is not your name, phone number or Apple ID.

Game Center and Sign in with Apple

So your progress can follow you to a new iPhone: if you are signed in to Game Center on your iPhone, the game links your account to your Game Center player identifier, without asking you for anything. If you choose Sign in with Apple, Apple gives us an identifier for you that is unique to our apps; we don't ask Apple for your name or your email address. Apple verifies both, and we use them only to recognise your account.

Your profile and progress

The display name you choose, how your character looks, your level, experience points and unlocks, your game statistics (such as games played, games won and scores) and any game you have in progress, so you can pick it up again.

Friends and invites

If you use them: your friends list, the friend requests and game invites you send and receive, and the game codes you share.

Online matches

When you play someone online, the game connects through Photon, a multiplayer service run by Exit Games. Photon receives your IP address and the moves of the match while it is being played, in order to run it.

Technical information

Like most online services, PlayFab and Photon record your IP address, your device type and its system version when you connect, and PlayFab may estimate your country or city from your IP address. We use this to run the game, keep it working and protect it from abuse.

The game downloads extra clothes for your character from padasta.com while you play. Those downloads are served by Cloudflare, which receives your IP address and basic device information with each request, as any website does. Nothing about you is sent with them.

Messages you send us

If you email us, we receive your email address and what you write, and use them only to answer you.

What we don't do

• We don't show ads, and we don't sell, rent or trade personal data.
• We don't track you across other companies' apps or websites, and the game has no third-party analytics or advertising tools in it.
• We don't collect your real name, contacts, photos, precise location or payment details.

What other players can see

Your display name, your level, your character and your scores on the leaderboards. Players you invite, or who add you as a friend, see your name in their friends list. Please choose a display name that doesn't give away personal information.

Who handles your data for us

• Microsoft (PlayFab) stores game accounts, progress, friends, invites and leaderboards.
• Exit Games (Photon) runs online matches.
• Cloudflare runs this website, serves the clothes the game downloads, and forwards email sent to our support address.
• Apple distributes the game through the App Store, and runs Game Center and Sign in with Apple.

They handle data on our behalf and under their own privacy terms. Data may be stored and processed in the United States and other countries where they operate.

How long we keep it

As long as your account exists. When you ask us to delete your account, we delete it and the data tied to it, as described below.

Deleting your account and data

In Padasta, open Settings, tap Manage next to Your account, then Delete my account. The account is deleted at once, with your progress, your statistics, your friends and your invites, and if you used Sign in with Apple we tell Apple to end it for Padasta. You can also email support@padasta.com and ask us to delete it; include your Player ID (Settings, Copy next to Player ID) or the display name you play under, and we will delete it within 30 days and tell you when it is done.

Your rights

Depending on where you live (for example in the European Union, the United Kingdom or California), you may have the right to see the personal data we hold about you, to correct it, to have it deleted, to receive a copy of it, and to object to how we use it. We don't sell personal data or share it for targeted advertising. To use any of these rights, email us; we answer within 30 days. If you are in the EU or UK, you may also complain to your data protection authority.

Children

Padasta is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we will delete it.

Security

The game talks to its services over encrypted connections, and your data is kept with the providers above. No system is perfectly secure, but we take reasonable care to protect what we hold.

Changes to this policy

When the game changes what it collects, we will update this page and the date at the top. If a change is significant, we will also tell you in the game.