Privacy Policy
Last updated: October 27, 2026This policy explains how your personal data is processed, in line with the GDPR (Regulation EU 2016/679).
1. Data controller
The data controller is Overzoom, publisher of DupeGo. For any privacy request write to privacy@dupego.app.
2. Data we collect
Unique OAuth account ID (Apple or Google) and email, username, in-game profiles, card inventory and trades, and the push notification token (FCM). The connect_payload (Player ID or invite link) is protected: it is never public and is shown only to the other player of an accepted trade. Your IP address is not stored persistently: it is read only in memory, through the offline GeoLite2 database, to choose the language of the site.
3. Purposes and legal bases
We process data to provide the service you asked for (performance of a contract), to prevent fraud and abuse (legitimate interest) and to send the notifications you enable. Advertising in the app is shown only according to the consent you give.
4. Recipients and transfers
Data is shared only with the providers needed to run DupeGo: Google Firebase (push notifications, FCM), RevenueCat (subscriptions) and Google AdMob (advertising). Where data leaves the European Economic Area, transfers rely on the Standard Contractual Clauses. We never sell your data.
5. Your rights and account deletion
You can request access, rectification, erasure, portability and restriction of your data, object to processing, and complain to your data protection authority. To delete your account and its data write to privacy@dupego.app from the email of your account: we reply within 30 days.