Privacy Policy

← Back to home

This Privacy Policy describes how The Goldens Cards (“we”, “us”, “our”) processes personal data of players and visitors (“you”). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.

1. Who we are (Data Controller)

The data controller responsible for your personal data is GOLDENS CARDS OÜ (trading as The Goldens Cards), registered in Estonia. Our contact details are provided in the GDPR & Contact section below.

2. What data we collect

• Account & profile data — such as username, email address, and in-game identifiers.
• Purchase data — order references from platforms such as Steam and the Epic Games Store (we do not store your full payment card details).
• Support & contact data — information you provide when you contact us, open a ticket, or submit a form on this site.
• Technical & gameplay data — device/OS information, crash reports, diagnostics, and gameplay analytics used to improve the game.
• Website data — standard server logs and, where applicable, cookies/analytics (see Cookies below).

3. How we use your data (purposes & legal bases)

• To provide and operate the game and its features — performance of a contract.
• To provide customer support and respond to your requests — legitimate interests / contract.
• To improve, secure, and debug the game via diagnostics and analytics — legitimate interests.
• To comply with legal obligations — legal obligation.
• For marketing communications where you have opted in — consent.

4. Sharing your data

We may share data with trusted service providers who act on our behalf (e.g. hosting, analytics, crash reporting, and store platforms such as Steam and Epic). These providers are bound by contractual obligations to protect your data and may only process it on our instructions. We do not sell your personal data.

5. International transfers

Your data may be processed in the European Economic Area (EEA) and in other countries, including the United Arab Emirates, where our offices and service providers operate. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data retention

We keep personal data only for as long as necessary for the purposes described above or as required by law. When data is no longer needed, we delete or anonymize it.

7. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us using the details below. To delete your data, you can use our dedicated Data Deletion Request form.

8. Cookies

This website uses essential cookies required for it to function and may use analytics cookies to understand how visitors use the site. You can control cookies through your browser settings.

9. Children's privacy

The game is not directed to children under the age required by applicable law for consent. We do not knowingly collect personal data from children without appropriate consent.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

11. GDPR Compliance & Contact

For any privacy or data-protection matter — including access, correction, or deletion requests — please contact us at privacy@beyondtheskygate.com. You can reach our offices below:

If you are located in the EEA and believe your data has been handled unlawfully, you also have the right to lodge a complaint with your national data-protection supervisory authority (in Estonia: the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon).