What We Collect
When you create a Mogged account and enter the arena, we collect the following categories of data:
- Profile data. Display name, age, gender, faction, region, and the photos you upload to compete.
- Battle data. Every vote cast for or against you, every vote you cast on others, and the resulting PSP/PSL calculations.
- Authentication data. Email address and a securely hashed password. We never store your password in plain text.
- Device data. Device model, operating system version, app version, language and region settings, and a randomly generated device identifier.
- Usage data. Which screens you view, which features you use, crash reports, and aggregated session statistics.
- Payment data. If you subscribe to Mogged+, your purchase is processed by Apple or Google. We never receive your card number — only a transaction receipt.
How We Use It
Your data exists to make the arena work. Specifically, we use it to:
- Display your card in mog battles and on global, faction, and regional leaderboards.
- Calculate your PSP percentage and PSL rating after each vote.
- Match you with appropriate opponents based on your faction, region, and rating tier.
- Detect and remove fake profiles, bots, and bad actors.
- Send service-critical notifications such as authentication codes and account warnings.
- Improve the app through aggregated analytics — never personally identifiable.
Mogged does not and will not sell your personal information to advertisers, data brokers, or any third party. Full stop.
Your Rights
Depending on your jurisdiction (GDPR, UK GDPR, CCPA, and equivalents), you have the right to:
- Access a copy of the data we hold about you. Use the Download My Data action in app settings.
- Correct any inaccurate information by editing your profile.
- Delete your account and all associated data by tapping Delete Account in the Danger Zone of settings.
- Withdraw consent to optional processing at any time via Privacy Preferences.
- Object to processing or request restriction. Email us; we'll comply or explain why we can't.
- Lodge a complaint with your local data protection authority if you believe we've handled your data unlawfully.
Data Retention
We keep your data for as long as your account is active. When you delete your account:
- Profile data, photos, and login credentials are permanently deleted within 30 days.
- Aggregated, anonymised statistics may be retained for arena integrity (these cannot be linked back to you).
- Records we are legally required to keep — such as proof-of-age verification or tax records for paid subscriptions — may be retained for the duration required by law, then deleted.
Security
All data is encrypted in transit (TLS 1.3) and at rest. Photos are stored in access-controlled buckets. Database access is restricted by row-level security policies that enforce who can read or write each record.
No system is perfectly secure. If we ever discover a breach that affects your data, we will notify you and the relevant authorities within 72 hours, in compliance with applicable law.
Age Restriction
Mogged is strictly for users aged 18 and over. We verify age at sign-up. If we learn that someone under 18 has created an account, we will delete it immediately and permanently.
Changes to This Policy
We may update this policy as the app evolves. When we make material changes, we will notify you in app and update the Last Updated date at the top of this page. Continued use after the effective date constitutes acceptance.
Contact
Privacy questions, data requests, or anything else — reach us at privacy@mogged.site.