Privacy Policy

Commander Crush is operated by Cargo Shorts Studios LLC, a Minnesota limited liability company ("we," "us"). This policy explains what we collect when you use the Commander Crush app, why, who receives it, and what you can do about it.

It covers the Commander Crush mobile app. It does not cover the stores, card databases, and other sites the app links to, which have their own privacy policies.

The short version

• There are no accounts. The app creates a random identifier for your install and attaches it to what we receive from your device, so we can find your data when you ask for it.
• We collect how you use the app, including the commanders and cards you crush and pass, the decks you build, and any card collection you import. The app uses this on your device to personalize what it shows you.
• Unless you turn it off, the app also sends that activity to us, so we can analyze it and build better recommendations. You can turn this off when you first open the app or at any time in Settings.
• If the app crashes, the report includes your recent activity and your identifier.
• Ads are not personalized. We don't build an advertising profile about you, and we don't sell your personal information.
• Store links credit us, and we may earn a commission when you buy. They don't carry anything that identifies you.
• You can erase what's stored on your device in Settings, and email us to get a copy of, or delete, what we hold.

Where the app is available

We offer Commander Crush in the United States only.

What we collect

We collect information automatically, as you use the app, and directly from you, if you send us feedback or email us. We don't buy information about you from data brokers.

Your activity in the app

We collect how you use the app: the screens and features you use, your searches, the commanders and cards you crush, pass, or save, the decks you build or import and the cards you choose or pass on for them, card collections you import, the prices you view and the store links you tap, and the context of those actions, such as which deck or commander you were working on, how long you looked at a card, and whether it was already in your collection.

This activity is stored on your device, so the app works offline and can personalize what it shows you. Unless you turn it off, it is also sent to us. See "Sending your activity to us" below.

Identifiers

When the app is first installed, it creates a random identifier. It contains nothing about you, and you can see it in Settings. We attach it to the usage data, crash reports, and activity the app sends us, so we can link them to one another and find them when you ask us for a copy of your data or to delete it.

Our analytics, crash reporting, and advertising providers also assign their own device-level identifiers, and the app uses a short-lived token that proves a request came from a genuine, unmodified copy of the app. On iOS, the advertising identifier is a limited identifier, not the IDFA.

We don't attach your identifier to ad requests or to store links.

Device and technical information

We receive technical details such as your device type, operating system, app version, and language. Our analytics and advertising providers also derive an approximate location, at the level of a city or region, from your IP address. We don't collect precise location, and the app never asks your device for it.

Crash and performance data

When the app crashes or misbehaves, we receive a report containing technical details about the failure, your device type, the app version, the app activity leading up to it, and your identifier. We use it to find and fix problems.

Ads and store links

We record that an ad was shown and what it earned, alongside your other app activity. When you buy something after following one of our store links, the store reports the sale to us, as described in "Store links and affiliate programs" below.

Feedback and messages

If you send feedback through the app, the form has an optional, free-form field for contact information so we can follow up with you. Whatever you enter there, such as an email address, is what we receive. If you email us, we receive your email address and whatever your message contains. Please don't include personal details beyond what's needed to describe the problem.

What we don't collect

Apart from contact information you choose to give us, we don't collect your name, email address, or phone number. We don't collect your contacts, photos, precise location, or payment information.

Sending your activity to us

Unless you turn it off, the app sends us the activity described in "Your activity in the app," including your crushes, passes, decks, and imported card collections, with your identifier attached. We use it to:

• analyze how players choose commanders, cards, and decks;
• build and improve recommendations and other features, for you and for other players; and
• produce the aggregate statistics described below.

The app explains this the first time you open it, before the tutorial, and you can turn it off there or at any time in Settings. The app's personalization on your device works either way.

Turning it off stops the app sending this activity from then on. It doesn't delete what we already hold. To have that deleted, email us. See "Your choices and rights."

If you used the app before version 2.0 of this policy, activity recorded before you accepted version 2.0 is sent to us only if you choose to send it.

How we use information

We use what we collect to:

• operate the app and personalize what it shows you;
• analyze activity, including your swipes, decks, and card collection, to understand how players choose commanders and cards, and to build and improve recommendations and other features;
• understand which features are used, so we can decide what to build;
• diagnose crashes and bugs, and measure performance and reliability;
• measure which ads were shown and what they earned alongside app activity, so we can tell which features support the app;
• receive and measure commissions from store links;
• produce aggregate statistics, which we may show in the app or publish;
• respond to feedback, questions, and privacy requests;
• protect the app against fraud, abuse, and automated misuse;
• display ads, as described below; and
• comply with the law and enforce our Terms of Service.

If we want to use your information for a purpose that isn't described here, we will update this policy and tell you in the app before we do. See "Changes to this policy."

Advertising

The app shows ads through a third-party ad network. Every ad request we make is non-personalized, for every user. We don't ask for ads targeted to your interests or behavior, and we don't build, sell, or share an advertising profile about you. Your activity shapes what the app recommends to you, not which ads you see.

To deliver an ad, the network receives a device advertising identifier, your IP address, and basic technical details about your device. It may use these to limit how often you see the same ad, to prevent fraud, and to produce aggregate reports, under its own privacy policy.

Because we don't request personalized ads, the app doesn't show Apple's App Tracking Transparency prompt, and the ad network doesn't receive your device's IDFA.

Store links and affiliate programs

The app links to online card stores. Store links may carry our referral code, which credits us, and we may earn a commission when you buy something after following one, at no extra cost to you. A link may also carry details about where it came from in the app, such as the feature, the card or commander, the app version and whether you use the iOS or Android app, or a reference to the cart you sent. Those details are not linked to your identifier and don't identify you.

When you follow a store link, you leave the app. The store and its affiliate network receive your visit, and what you do on their site is governed by their privacy policies. They report sales made through our links back to us, with details such as order totals, the items bought, and the link details above. Those reports don't identify you, and we don't link them to your identifier.

Who receives information

We use outside companies to run the app. Most handle data on our behalf, only for the purposes in this policy, under agreements that limit what they may do with it. Our advertising provider is the exception: it serves ads under its own terms and privacy policy, as described in "Advertising." The categories are:

• Analytics and product measurement providers, which receive your app activity, technical information, and identifiers.
• Crash and performance reporting providers, which receive crash reports.
• Software and data analysis providers, which help us analyze app activity, diagnose problems, and improve recommendations and features.
• Advertising providers, which serve the non-personalized ads described above.
• Hosting, storage, and content delivery providers, which store the data the app sends us and serve the card data the app downloads.
• Feedback, support, and issue-tracking providers, which receive what you send us.
• App integrity and security providers, which confirm requests come from a genuine copy of the app.
• Card stores and their affiliate networks, which receive your visit when you follow a store link, as described above.

Some of what the app shows, such as card images, loads directly from services we don't operate. Your device contacts them the way a browser contacts a website, and they see your IP address and basic technical details, but we don't send them information about you.

We may change providers within these categories without updating this policy. You can ask us for a list of the specific companies we've shared personal information with, and we'll give it to you whether or not your state requires it.

We may also disclose information where the law requires it, for example in response to a subpoena or court order, or where we believe in good faith it's needed to investigate fraud or abuse or to protect the rights, property, or safety of our users, the public, or us. Where we're allowed to tell you about such a request, we will.

If we're involved in a merger, acquisition, financing, sale of assets, or insolvency, information may be disclosed to the other parties and their advisers, and transferred to an acquirer or successor. We will require the recipient to honor this policy for information collected before the transfer, or give you notice and a choice before your information is used in any new way.

Aggregated and de-identified data

We may combine data from many users into aggregate statistics, such as which commanders are most popular, or how many players like two given commanders. We may use them to improve recommendations, show them in the app, or publish or share them.

We may also keep de-identified records of app activity, such as a set of commanders crushed together on one device, with no identifier, no precise time, no location, and no device details, and with details that could single someone out removed or generalized. We use them to understand how commanders relate to one another and to improve recommendations.

We keep de-identified records in a form that can't reasonably be linked to you, your device, or your identifier, and we won't attempt to re-identify them, or anyone from our aggregate statistics. We don't publish de-identified records, and anyone we share them with must agree in writing not to re-identify them. Because they can't be linked to you, deleting your data doesn't reach them.

Selling and sharing

We don't sell your personal information, and we don't share it for cross-context behavioral advertising, as US state privacy laws define those terms. We don't sell or license your individual swipe history, decks, or collection to anyone. If that ever changes, we will update this policy and offer the opt-out the law requires before it takes effect.

How long we keep information

• On your device: until you delete it in Settings or delete the app.
• Usage data and crash reports: deleted automatically within about 90 days of the last activity we receive from your device.
• Activity sent to us for recommendations: until you ask us to delete it, or until 24 months after the last activity we receive from your device.
• Feedback and email: as long as we need it to deal with your report or question. You can ask us to delete it at any time.
• Records of privacy requests: 24 months, so we can show how each was handled.
• Aggregate statistics and de-identified records: may be kept indefinitely.

Your choices and rights

• Erase the data on your device in Settings. This deletes your activity, decks, imported collection, and unsent crash reports from the device. It keeps your settings, the record of which versions of this policy and our Terms of Service you agreed to, and your identifier, so you can still ask us about data we hold. It doesn't delete data already sent to us.
• Turn off sending your activity, or usage analytics, in Settings. While either is on, our analytics provider also records basic details whenever the app sends anything, such as when the app was opened, your device type, and your approximate location. Crash reports are sent either way.
• Ask us for a copy of your data, to correct it, or to delete it by emailing legal@cargoshortsstudios.com with the identifier shown in Settings. We may ask for more information to confirm the request is yours, but we won't ask for a government ID.
• Ask us to delete feedback or email you sent us by emailing us with the contact information you used.
• Turn off shake-to-report in Settings, which stops the app reading your device's motion sensor. That reading happens only on your device.
• Reset your advertising identifier in your device's system settings.

We respond within 45 days. If we need longer, we'll tell you why within those 45 days, and we'll take no more than another 45. We don't charge for requests and don't treat you differently for making one. If you no longer have your identifier, for example because you deleted the app without a backup, we may not be able to find your app activity, but we can still find feedback and email by the contact information you used.

If we decline a request, you can appeal by replying to our response, and we'll explain our decision in writing. If your appeal is denied, you can complain to your state attorney general.

Depending on where you live, state law may give you further rights, such as the right to a list of the specific third parties we've disclosed personal information to, or to ask how profiling has been applied to you. Email us to use them.

Device backups

If your phone backs up app data to your Apple or Google account, or copies it to a new phone, that copy can include your activity, settings, and identifier. Apple or Google holds those backups under your account settings, and we can't access them. Erasing the data on your device doesn't reach a backup made earlier, so restoring one can bring that activity back.

Categories of personal information

US state privacy laws describe personal information in a standard set of categories. Here is where we land, covering the twelve months before the date at the top of this policy.

We use each category for the purposes in "How we use information," disclose it to the recipients in "Who receives information," and keep it as described in "How long we keep information." We have not sold or shared personal information.

Children

Commander Crush is a general-audience app. It isn't directed at children under 13, and we don't knowingly collect personal information from them. If we learn we have, we will delete it. If we learn a user is under 16, we will stop receiving their activity for recommendations. We don't sell or share any child's personal information.

If you're a parent or guardian and believe your child's data reached us, email legal@cargoshortsstudios.com.

Security

We use industry-standard measures to protect the information we hold, including encrypted connections for the data the app sends to us. No system is perfectly secure. There are no accounts and we never collect payment details, and apart from feedback and email, what we hold is linked to a random identifier rather than to your name.

Changes to this policy

When we make a material change, such as collecting a new kind of information, using it for a new purpose, sharing it with a new kind of recipient, or reducing your rights, we will tell you in the app before it takes effect, and it will apply only to information collected afterwards unless you agree otherwise. Other changes, such as clarifications, are listed below with their version and date.

Change history

• 2.0, October 17, 2026. The app's random identifier links the data we receive, including crash reports. Unless you turn it off, your activity, decks, and imported collections are sent to us for recommendations. Requests for a copy of your data, or to delete it, are made by email with your identifier. Store links may carry non-personal details about where in the app they came from.

Earlier versions are available on request.

Contact

Cargo Shorts Studios LLC

legal@cargoshortsstudios.com