Privacy Policy

1. Who is responsible for your data

The data controller is Axon AI Pte Ltd (Good Pig Studio), Singapore. Contact us about privacy at support@goodpig.xyz.

2. What we collect

• Account data — your email address (used for passwordless sign-in or Google sign-in), and the profile details you choose: username, display name, faction, and a preset avatar.
• Gameplay data — matches, decks, progression, stats, cosmetics you own, and your in-game currency balances. This is needed to run the game and save your progress.
• Usage & analytics — product analytics events (for example: sign-up, match start, purchase) collected via PostHog. These are keyed to an opaque account identifier — we do not attach your email or other personal identifiers to analytics profiles.
• Approximate location — we derive your country from your IP address (we do not store the full IP for this) to show region-appropriate pricing and to comply with regional rules. We do not track precise location.
• Device & technical data — basic information such as browser type and error diagnostics, used to keep the Service working and secure.
• Push notifications — only if you opt in, we store a browser push subscription token so we can send you game notifications. You can turn this off at any time.

3. Payment data — handled by Paddle, not us

We do not collect or store your card or payment details. All payments are processed by Paddle, our authorised reseller and Merchant of Record. Paddle handles your payment information under its own privacy policy. We receive only what we need to fulfil your order and keep records: confirmation of the purchase, the amount, and your billing country (for tax and compliance). We never see your full card number.

4. How we use your data

• to provide, run, and save your progress in the Service;
• to process and deliver your purchases (with Paddle);
• to keep the Service secure, prevent cheating and fraud, and enforce our Terms;
• to understand and improve the game through aggregate, pseudonymous analytics;
• to send you service messages, and — only if you opt in — push notifications;
• to comply with our legal and tax obligations.

5. Legal bases (EEA/UK users)

Where the GDPR applies, we rely on: performance of a contract (to run the game and your purchases), legitimate interests (security, anti-cheat, and improving the game in a privacy-light way), consent (push notifications and any optional analytics cookies, which you can withdraw), and legal obligation (tax and record-keeping).

6. Who we share data with (our processors)

We share data only with service providers that help us run the Service, under contracts that protect it:

• Supabase — authentication, database hosting, and sign-in / account emails (account and gameplay data).
• Vercel — application hosting and content delivery.
• Paddle — payments and Merchant of Record.
• PostHog — pseudonymous product analytics.
• Sentry — error monitoring (when enabled).
• Resend — transactional email delivery, where enabled.
• Google — only if you choose Google sign-in.

Some of these providers may process data outside your country. Where required, transfers are protected by appropriate safeguards (such as Standard Contractual Clauses). We do not sell your personal data.

7. How long we keep it

We keep account and gameplay data while your account is active. We keep transaction records for as long as required by law (typically for tax and accounting purposes). You can ask us to delete your account, after which we delete or anonymise your data except where we must retain it by law.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our use of your data, to data portability, and to withdraw consent. Under Singapore’s Personal Data Protection Act (PDPA) you may request access to and correction of your personal data and withdraw consent. To exercise any right, email support@goodpig.xyz. EEA/UK users may also complain to their local data-protection authority.

9. Cookies

We use cookies and similar storage that are necessary to run the Service — for example, to keep you signed in and to remember a referral that brought you to the game — and, where applicable, analytics storage. You can control cookies through your browser settings.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes

We may update this policy. If we make material changes, we will take reasonable steps to notify you, and we will update the date at the top of this page.

12. Contact

Axon AI Pte Ltd (Good Pig Studio)
Singapore
support@goodpig.xyz