Privacy policy

Last updated: 30 September 2026.

Data controller

OGROUP SRL, a Belgian private limited company.

What we collect and why

  • Google sign-in: Google account ID, e-mail address, name and profile picture, to create and identify your account (performance of the contract).
  • Game data: handle, cards, MemeCoins, auctions, trades, friends, favourites, showcase, achievements, game rounds, to run the game. Your handle, showcase and cards are visible to other players; your e-mail never is.
  • Free pack: an irreversible fingerprint of your IP address (never the address itself), to allow one free pack per connection (legitimate interest: preventing abuse).
  • Audience measurement and site journey: a random browser identifier (mmc_vid cookie), your IP address, the country and city derived from the connection, the device and browser type, the pages visited, the buttons and links clicked, the name of forms sent (never what you type in them), the actions taken in the game and their outcome, scroll depth and time spent on each page, the errors met, with their time, and the site you came from; linked to your account when you are signed in. No third-party tracker: this data stays with us and is only used to understand and improve the site (legitimate interest: running the game).
  • EXPERT subscription: the Stripe customer and subscription IDs and the end of the paid period. Payment is processed by Stripe; we never see or store your card details.
  • Cookies: a strictly necessary session cookie keeps you signed in for up to 30 days; an audience-measurement cookie (mmc_vid, 12 months) links together the pages of one visit. No advertising cookies.
  • Browser local storage: your theme, language and pending free pack, kept on your device.
  • Former waitlist: if you signed up, your e-mail and the page language.

Processors

Cloudflare (hosting and database), Google (sign-in), Stripe (payment). Some processing may take place outside the European Union, covered by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Retention

For as long as your account exists. Free-pack IP fingerprints and expired sessions are deleted regularly; the site journey (IP address included) is deleted after 13 months. Billing data is kept by Stripe under its legal obligations.

Your rights

You can access, correct or delete your data, object to processing or ask for portability by contacting us. You can also revoke MyMemeCards’ access from your Google account. You can lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or your local authority.

What we don’t do

We don’t sell your data or share it with advertisers.