Privacy Policy

This policy explains what personal data Deft Move (“we”, “us”) collects, why, and the rights you have over it. Deft Move is a product of EverKnight Limited, a company registered in Ireland, which is the data controller for your information.

Who we are

EverKnight Limited, registered in Ireland. For any privacy question or request, contact us at [email protected].

What we collect

• Early-access list. If you join the waitlist, we store the email address you give us.
• Account data. If you create an account, we store your email and a unique account identifier.
• Your preferences. Decks and cards you favourite, and your chosen card theme — saved to your account and, for speed, in your browser’s local storage.
• Technical data. Our hosting provider processes standard request data (such as IP address and browser type) to serve and secure the site. We don’t use advertising or cross-site tracking.
• Payments (future). When paid plans launch, card payments will be handled by our payment processor. We never see or store your full card details.

Why we use it, and our legal basis

• To provide the service (accounts, favourites, themes) — performance of a contract.
• To send early-access and product updates — your consent, which you can withdraw at any time: every email we send includes a one-click unsubscribe link, or just reply “unsubscribe”.
• To keep the service secure and improve it — our legitimate interests.
• To take payment (future) — performance of a contract.

We don’t use your data for automated decision-making with legal or similarly significant effects, and we don’t use it to train machine-learning models.

Cookies and local storage

We keep things minimal. We use your browser’s local storage to remember your theme and to keep you signed in. We don’t run advertising cookies or third-party tracking pixels.

Who we share data with

We use a small number of trusted providers (“processors”) who handle data on our behalf:

• Supabase — authentication and database (accounts, favourites, preferences).
• Cloudflare — website hosting and early-access list storage.
• Stripe — payment processing, once paid plans launch.

We do not sell your personal data.

International transfers

Some of our providers process data outside the European Economic Area. Where they do, the transfer is covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

How long we keep it

We keep your early-access email until you unsubscribe or we close the list. We keep account data for as long as your account is active, and for a reasonable period afterwards, then delete or anonymise it.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to our use of your data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, email [email protected]. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

Children

Deft Move is intended for adults in a working context and is not directed at children under 16. We don’t knowingly collect their data.

Changes

We may update this policy as the product evolves. We’ll change the “last updated” date above, and for material changes we’ll let registered users know.