Effective date: 27 January 2026
Deckle ("we", "us", "our") is operated by Jordan Wallwork, a private individual. This privacy policy explains how we collect, use, and protect your personal information when you use the Deckle web application at deckle.games.
By using Deckle, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Account Information
When you sign in to Deckle using a third-party authentication provider (such as Google), we receive and store the following information:
- Your name
- Your email address
We do not collect or store passwords. Authentication is handled entirely by third-party OAuth providers.
1.2 User-Generated Content
You may upload image files for use in your game component designs. These images are stored in Cloudflare R2 object storage.
You may also create project data, component designs, and other content as part of using the service. This data is stored in our database.
1.3 Analytics Data
We use PostHog for analytics in a cookieless, anonymised configuration. This means:
- No cookies are placed on your device for analytics purposes
- No personally identifiable information is collected through analytics
- Analytics data is processed in the EU
1.4 Information We Do Not Collect
We do not currently collect:
- Payment or billing information
- IP addresses or device fingerprints
- Browsing activity outside of Deckle
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the service — to authenticate your account, store your projects, and deliver the functionality of Deckle
- Improving the product — to understand how the service is used (via anonymised analytics) and to fix bugs
We do not use your information for marketing, advertising, or profiling purposes.
3. Data Sharing
We do not sell, rent, or share your personal information with third parties for their own purposes. Your data is only processed by the following service providers as necessary to operate Deckle:
- Google — authentication provider (OAuth sign-in)
- Railway — database hosting (PostgreSQL, EU West — Amsterdam, Netherlands)
- Cloudflare R2 — image file storage
- PostHog — anonymised, cookieless analytics (EU hosted)
- Exceptionless — error logging and monitoring
4. Data Storage and Security
Your data is stored in a PostgreSQL database hosted by Railway in EU West (Amsterdam, Netherlands). Uploaded images are stored in Cloudflare R2.
All data transmitted between your browser and our servers is encrypted using HTTPS (TLS).
While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your personal data for as long as your account is active and you continue to use the service.
If you request deletion of your account, we will delete your personal data and associated content within 30 days of the request. Some data may be retained in backups for up to 90 days before being permanently removed.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate personal data
- Erasure — request deletion of your personal data
- Data portability — request a copy of your data in a portable format
- Objection — object to processing of your personal data
To exercise any of these rights, please contact us at privacy-enquiries@deckle.games. We will respond to your request within 30 days.
7. Children's Privacy
Deckle does not impose age restrictions on its users. However, we do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy-enquiries@deckle.games and we will take steps to delete such information.
8. Cookies
Deckle does not use cookies for analytics or tracking. We may use essential cookies strictly necessary for the operation of the service (such as session authentication). These cookies are not used to track you across websites.
9. International Data Transfers
Our primary data storage is located in the EU (Amsterdam, Netherlands). If you access Deckle from outside the EU, your data will be transferred to and processed in the EU.
Some of our service providers (such as Cloudflare) may process data in locations outside the EU. Where this occurs, appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
10. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify users through the Deckle application or by email.
The "Effective date" at the top of this page indicates when this policy was last updated.
11. Contact Us
If you have any questions about this privacy policy or our data practices, contact us at: