v0.3
Effective date: 2026-11-06
Sun Yibo, operating as the WanXiangTCG Operations Team (“we” or “us”), is responsible for personal information processing in the WanXiangTCG client, accounts, online matches, replays and feedback services. Contact: support@wxtcg.com.
In brief: We process information needed to provide the game, synchronize accounts and handle feedback. We do not sell personal information or build advertising profiles. Opponents can see public profiles and match appearances; feedback recordings may include both players’ hands. Contact the address above to access, correct or request deletion of your information.
Necessary account authentication and match information are required for the corresponding online features; optional public-profile fields may be left blank. We currently use no advertising or third-party analytics services, collect no microphone, camera, address-book or precise-location data, and send no player information to music-generation services.
Steam and your chosen email services may process information outside your country or region; we cannot guarantee every route stays within China. Processing is limited to the relevant features’ needs and follows applicable law and providers’ data protection terms. Switching email services does not automatically delete historical copies held by previous services; you may request handling as described below.
| Information | Period and starting point |
|---|---|
| Account profiles, decks, achievements, entitlements, preferences and reward receipts | Normally until account deletion or service termination. Match snapshots, mail history and backups follow the rules below. |
| Registration verification and rate-limit states | Normally expire within 10 minutes to 1 hour. Providers retain verification emails under their own policies. |
| Matches and replays | 180 days after the match ends. Highlights, notes or administrator associations do not extend this period. |
| BUG reports and independent recordings | 180 days after actual closure. Automatic acknowledgements or successful sending do not mean closure. Open or reopened reports, or those without closure records, require manual verification; external email copies must be located and cleaned up separately. |
| Security and related network logs | Six calendar months from the last event; daily archives run from the end of that day. Necessary integrity records remain after cleanup. |
| Server and off-device backups containing player data | A rolling 30 days from successful completion. The only recoverable copy must remain until a replacement backup is verified. |
| Statistics and deduplication records | Aggregates unlinked to specific accounts are retained long term. Temporary deck/hand information is cleared when the match ends or is removed, leaving minimum deduplication records without original account or match identifiers. |
| Deletion markers preventing restoration of old data | Pseudonymized verification values for old internal identifiers, deletion times and integrity information may be retained long term, with necessity reviewed. They contain no email address, SteamID, nickname, password, or game/feedback content. |
Hiding an item in a list does not delete backend data. Hiding mail does not revoke claimed content or erase receipts preventing duplicate claims. Account deletion clears operator-mail history within the scope below, regardless of the number displayed in the inbox.
Expired data requires manual review and timely cleanup; the absence of a storage warning does not justify indefinite retention. Exceptions for legal preservation or related information awaiting verification require recorded reasons and review. Where deletion is required but temporarily prevented by statutory periods or technical reasons, processing is limited to storage and necessary security protection.
You may edit public profiles and view supported match/feedback records in the game, or contact support@wxtcg.com to request access, copies, correction, supplementation, deletion, restriction of processing, eligible data portability, withdrawal of consent-based authorization, an explanation of processing rules, or to complain. We verify account ownership and handle requests promptly under applicable law, explaining any refusal. You may also complain to the relevant authority. We do not ask for passwords or verification codes by email. Player self-service data export is not currently available. Withdrawing consent does not affect earlier lawful processing, but features relying on that information may become unavailable.
Deletion entry point: Ordinary accounts with a verified email address may request deletion using a verification code in the account menu; administrator accounts are excluded. Steam accounts without a linked email may first link one or contact the address above for verification and handling.
Deletion scope: We remove the active account, entitlements and preferences, reward receipts, decks, private match associations, related feedback, and the account’s recipient associations and targeted operator mail, including attachments and pending mail. Shared matches lose that account’s identifiers and credentials, but may retain snapshots of nicknames, titles, self-introductions and match appearances already public at match start. Public notices and other accounts’ receipts are not deleted.
Separate histories of retired merged accounts, personal information in public message bodies and external email copies require separate review; you may provide a feedback identifier to request a search. Backups follow the periods above. The latest verified deletion markers are applied before restoration to prevent deleted data from reappearing as online accounts. Recovery depends on the latest successfully verified backup and available deletion records; subsequent changes are not guaranteed to be recoverable.
The device stores login preferences, graphics settings, resource versions/caches, session and reconnection state. We use no advertising cookies. Local/Cloud desktop editions save encrypted credentials only when “Remember password” is selected. Settings, signing out or clearing application/browser data can remove local information; this does not delete the server account.
We use access controls, encryption or pseudonymization, sensitive-log protection and backup verification, but cannot guarantee absolute security. If personal information is or may be leaked, altered or lost, we will take immediate remedial action and notify the authorities and affected users as required by law.
The Steam edition’s baseline minimum age is 13. Below the local age of independent consent, a guardian must review and consent as required by law. Until compliance measures concerning minors are complete, mainland China online account services are limited to testers aged 18 or older. We do not collect or store birth dates, birth years or exact ages for this purpose. These thresholds are not official content ratings.
We identify policy versions. Wording corrections that do not affect rights or obligations may be updated directly. Material changes to information scope, purposes, recipients, storage methods or user rights will receive prominent notice and renewed consent as required by law. When new-version confirmation is required, you must expressly accept through a separate screen with a confirmation box unchecked by default before continuing online. You may read the full agreement and policy or exit. Continuing to sign in, closing the window or historical records do not count as consent; prior acceptance records remain.