Privacy policy

Effective November 4, 2026. Provenance is made by Jeelay Pillai. Questions: provenance.game.parents@gmail.com.

Provenance is an art-card collecting game. We keep as little about you as we can: enough to save your collection and keep the game fair, nothing for advertising.

What we keep

About every player

• Your country or region and your month and year of birth, asked once when you first open the game, so we can follow the right rules for your age.
• A player name the game makes up (like "Cobalt Heron 41"). You never type a name.
• Your game: your cards, unopened packs, balances and an account number.
• Technical records: our server provider keeps short-lived logs, including IP addresses, to run the service and protect it from attacks.

If you sign in with Apple or Google

• The email address of that account (with Apple, this can be a private relay address). We use it only to sign you in, to recover your account and to answer support requests.
• Apple and Google may also send your name and profile picture. We delete them automatically every time you sign in.

If you buy something

• Apple handles payment. We receive a record of the purchase (what was bought and when) so the right amount reaches your account. We never see your card details.

Children

Players below their country's age of digital consent (13 in the United States, up to 16 elsewhere) start as guests. A guest has the whole game. We keep their cards, packs, balances, made-up name, country and month and year of birth under an account number, and no email, name or picture.

A guest can ask a parent or guardian to let them link an Apple or Google account, so they can recover their collection on a new phone. When they ask:

• We email the parent at the address the child gives, explaining what we'd keep and why.
• The parent agrees on a web page by pressing "I agree". Opening the email or page alone changes nothing. We check the parent's year of birth shows an adult, but don't keep it.
• We then send the parent a confirmation with a link to withdraw permission at any time.
• If the parent doesn't agree within 14 days, we delete their email address, and nothing changes for the child.
• Withdrawing unlinks the account and deletes its email address. The child keeps their cards as a guest.

Players under 16 can't buy anything until a parent or guardian agrees, in the same way: we email the parent, they agree on a web page, and we send a confirmation with a link to withdraw at any time. Players under 16 can then spend up to $20 a day and $35 a month, and players aged 16 and 17 up to $50 a day and $130 a month. Payment goes through Apple. Packs contain random cards, and the game shows the odds before anyone buys.

We never show children's details to other players, and there is no chat. Children's information is used only to run the game, never for advertising, and is never sold or shared for marketing. A parent can ask us to see, change or delete their child's information at any time: write to provenance.game.parents@gmail.com, or use Delete Account in the game.

How we use it

• To run the game and save your collection.
• To sign you in and keep your account safe.
• To keep the game fair, for example stopping cheating and misuse.
• To answer support requests, and to meet legal requirements.

We don't show ads, we don't track you across other apps, and we don't sell or rent anyone's information.

Who helps us

• Supabase runs our server and database, and handles sign-in. Your data is stored in the United States.
• Apple and Google confirm who you are when you sign in with them, and Apple processes purchases.
• Google (Gmail) sends the parent permission emails.
• Cloudflare hosts this website.

They handle data only to provide these services to us.

How long we keep it

• Your game and account: until you delete your account.
• A parent's email: 14 days if they don't answer. If they agree, until they withdraw or the account is deleted.
• Backups: up to 30 days, after which deleted information is gone from them too.

Your choices and rights

• Delete your account in the game: Profile > Delete Account. This removes your cards, packs, balances and sign-in from our server.
• Ask for a copy of your information, or for it to be corrected or deleted: write to provenance.game.parents@gmail.com.
• If you're in the EU or UK, you have these rights under data protection law, and you can complain to your data protection authority.
• If you're in California: we don't sell or share personal information.

Keeping it safe

Everything travels over encrypted connections. Players can only read their own game, and only our server can change cards, packs or balances.

Changes

If this policy changes, we'll update this page and tell you in the game. If a change affects children's information, we'll ask parents again where the law requires it.

Contact

Jeelay Pillai, provenance.game.parents@gmail.com