Privacy policy

Skully Republic · Last updated: October 31, 2026

Skully Republic is a real-time card and battle game played in the browser and as an app. Here we explain plainly which data we process, why, where it is stored and how you can control it. You can play without creating an account: in that case almost everything stays on your device.

1. Who is responsible

The data controller is BSkully, the game's developer. Contact for any privacy matter: dalebrook00@gmail.com.

2. Which data we process

Data	When	Why
Google account: identifier, email, name and profile picture.	Only if you sign in.	To identify you and save your progress. Handled by Firebase Authentication (Google). The game does not show your name or email to other players.
Alias you choose.	Only if you sign in.	It is the only thing other players see in online matches. If you do not choose one, a neutral one is assigned (for example, "Player1234"). Do not use your real name if you do not want it shown.
Game progress: level, coins, cards, upgrades, decks, missions, trophies and match statistics.	While you have an account.	To keep your progress, validate matches and grant rewards from the server, and to let you play from several devices.
IP address and technical connection data (date, request type).	When using the website and the match server.	Security and abuse prevention (request limits). The IP is used in memory to limit abuse; the web server's access logs are kept for a few weeks.
Anonymous usage statistics (matches played, cards used, results). Firebase Analytics, by Google.	Only if you accept them. Nothing is sent until you answer.	To improve balance and the game. You can change your choice in Settings, Account tab.
App verification signals (App Check, Google reCAPTCHA Enterprise).	When calling the server functions.	To check that requests come from the game and not from programs trying to abuse it. Processed by Google.

We do not ask for your age, phone number, address or payment details, and we show no advertising.

3. Data stored on your device

The game stores in your browser (local storage and cache) your guest progress, your settings (sound, camera, quality), your choice about statistics and the files needed to work offline. You can delete them from your browser settings. Everything you play offline or as a guest is sent to the server to be verified and added to your account when you sign in.

4. Legal basis

Performance of the service (account, progress, online matches): without this data the online game does not work.
Consent (anonymous statistics): you give it or withdraw it at any time.
Legitimate interest (security and abuse prevention).

5. Where it is stored and who it is shared with

Google (Firebase): authentication, Firestore database (located in the United States, multi-region "nam5"), server functions (Belgium, "europe-west1"), web hosting and analytics. Google acts as a processor; transfers to the US rely on Google's safeguards (standard contractual clauses / EU-US Data Privacy Framework).
Match server: our own server located in Spain.

We do not sell your data or hand it to third parties for commercial purposes.

6. How long we keep it

Your account and progress data, for as long as you keep the account. If you delete it (from Settings or by email), we erase your profile and your user. Technical access logs, a few weeks. Anonymous statistics, according to the Firebase Analytics configuration.

7. Your rights

You can ask us for access, rectification, erasure, restriction of or objection to processing, and portability of your data. Write to dalebrook00@gmail.com from your account's email and we will reply within one month at most. To delete your account and data you can do it yourself from the game or ask at that email (how). If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

How to delete your account and data

You can do it yourself from the game (Settings, Account tab, "Delete my account and data") or ask by email. The steps and the detail of what is deleted and what is kept are on this page.

8. Minors

The game is not aimed at children under 14. If you are under that age, you need your parents' or guardians' authorization to create an account. We do not ask for age, so we trust this is complied with; if we find an account that should not exist, we will delete it.

9. Security

Communications are encrypted (HTTPS/WSS). Rewards and progress are written only by the server, which verifies every match, and requests are limited and protected against abuse. No system is infallible; if a breach affected you, we would tell you.

10. Changes to this policy

If we change anything important, we will update the date above and, where appropriate, notify you in the game.