Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how Loot Deck ("we", "us", or "our"), an application created by an independent developer, handles information when you install and use the Loot Deck mobile application (the "App") and visit our website.

We are committed to protecting your privacy. We operate with strict data minimization principles: currently, the App is completely free, does not feature advertisements, does not require user registration or accounts, and only processes the minimal technical data necessary to deliver free game notifications and maintain app stability.

1. Information We Do NOT Collect

To protect your privacy, Loot Deck is built to work without collecting personal identity information. Specifically:

• No User Accounts: We do not require you to register, log in, or provide your name, email address, password, or profile information.
• No Financial or Payment Data: At present, the App is 100% free to use. We do not offer in-app purchases, subscriptions, or collect payment details.
• No Precise Location: We do not request or track your GPS coordinates or precise physical location.
• No Sensitive Permissions: We do not access your contacts, microphone, camera, photo gallery, or device files.

2. Information We Collect and How We Collect It

We only process pseudonymous technical data through trusted third-party developer services provided by Google Firebase:

• Push Notification Tokens: If you choose to enable push notifications, Firebase Cloud Messaging (FCM) generates a random, pseudonymous push registration token for your device. This token allows our backend to broadcast notifications for game giveaways, Humble Bundles, and free-to-play drops to relevant notification topics (e.g., giveaways, bundles, free_games). This token does not identify you personally.
• Anonymous Usage Analytics: We use Google Analytics for Firebase to collect aggregated and anonymous usage statistics (such as screen visits, session duration, and feature engagement). This helps us understand which features are most useful and improve the user experience.
• Crash Reporting and Diagnostics: We use Firebase Crashlytics to monitor application reliability. When a crash occurs, technical diagnostic data is recorded (such as operating system version, device model, timestamp, and stack traces). This information is used strictly to diagnose and resolve software bugs.
• Local Preferences: App settings and your saved/favorite items are stored locally on your device using local device storage and are never uploaded to our servers.

3. Purpose and Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your information under the following legal bases pursuant to the General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a) GDPR): For sending push notifications to your device. You grant consent by enabling notifications and can withdraw consent at any time via your device settings.
• Legitimate Interests (Art. 6(1)(f) GDPR): For processing anonymous analytics and crash diagnostics to maintain app functionality, diagnose crashes, ensure network security, and improve performance.

4. Third-Party Services and Data Processors

We rely on the following service providers to support app operations:

• Google Firebase (Google LLC)
  Includes Firebase Cloud Messaging (FCM), Google Analytics for Firebase, and Firebase Crashlytics.
  Privacy Policy: https://policies.google.com/privacy
  How Google uses information: https://policies.google.com/technologies/partner-sites

5. External Links to Third-Party Platforms

Loot Deck aggregates game deals and giveaways from various third-party storefronts and platforms, including Epic Games Store, Steam, GOG.com, Humble Bundle, and others.

When you tap an external deal link, you leave Loot Deck and navigate to the external platform's website or app. We do not control, track, or assume responsibility for the privacy practices, content, or policies of third-party platforms. We encourage you to review the privacy policy of any external website or service you visit.

6. Data Retention and Security

We retain technical data only for as long as necessary:

• Push Tokens: Retained by FCM only as long as the token remains active and registered. Tokens are automatically invalidated when you uninstall the App.
• Analytics and Crash Logs: Retained by Google Firebase according to their standard retention schedules (typically up to 14 months for analytics and 90 days for crash logs) and automatically deleted thereafter.

We utilize Google Firebase's secure cloud infrastructure and industry-standard security protocols to protect data against unauthorized access, loss, or misuse.

7. Your Privacy Rights (GDPR, CCPA/CPRA, and International)

Depending on your location, you may have specific rights regarding your data:

• Right to Access / Portability: You have the right to request confirmation of whether your data is processed.
• Right to Erasure: You can delete all local data by clearing the app data or uninstalling the App. You may also contact us to request the deletion of any associated data.
• Right to Withdraw Consent: You can opt out of push notifications at any time through your operating system settings.
• Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
• Right to Lodge a Complaint: If you are in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority.

8. California Privacy Statement (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• We do not sell your personal information.
• We do not share your personal information for cross-context behavioral advertising.
• We have not sold or shared any personal information in the preceding 12 months.

9. How to Control Your Data & Opt-Out

• Push Notifications: You can disable notifications at any time in your device settings under Settings > Apps > Loot Deck > Notifications (Android) or Settings > Notifications > Loot Deck (iOS).
• Advertising / Analytics Tracking: You can limit ad tracking or reset your device advertising ID in your device settings (e.g., Google > Ads > Delete advertising ID on Android, or Privacy & Security > Tracking on iOS).
• Complete Data Removal: Uninstalling the App immediately removes all locally cached data and unregisters your device from push notifications.

10. Children's Privacy (COPPA Compliance)

Loot Deck is intended for a general audience (ages 13 and older). We do not knowingly collect or solicit personal information from children under the age of 13. If you are a parent or guardian and believe that a child has provided us with personal information, please contact us at contactus@lootdeck.app, and we will promptly delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable legal requirements. When we make updates, we will revise the "Last updated" date at the top of this page. Your continued use of the App following the posting of an updated policy signifies your acceptance of the changes.

12. Contact Us

If you have questions, feedback, or privacy-related requests regarding this Privacy Policy, please contact us at:

Email: contactus@lootdeck.app
Website: https://lootdeck.app