Privacy policy

Last updated: 2 October 2026. This page covers the Wiki Million website (wikimillion.com) and the Wiki Million apps for iPhone and Android.

The short version: the game keeps what it needs to save your cards and run trades, it shows no ads, and it never sells or rents what it knows about you.

What the game keeps

• A guest account. You can play without signing up. The game then creates an anonymous account, known only by a random identifier kept on your device.
• Your account, if you make one. Your email address, and what Google or Apple hand over when you sign in with them (your email address and the identifier of your account there). The game never sees or stores a password: signing in is done by Google, by Apple, or by a link sent to your mailbox.
• Your player name. The pseudo you choose is public: friends, trades, auctions and shared links show it.
• What you do in the game. The cards you own, your Wikicoins, your packs, your showcases, your friends, your trades, your auctions and bids, the friends you invited.
• Purchases. Payments are handled by Stripe. The game never sees your card number: it keeps a Stripe customer identifier, what was bought and until when Premium runs.
• On your device. The browser or the app stores your session and a few settings (effects, streamer mode, a copy of your collection to open it faster). No advertising cookie, no tracker from an ad network.

Why

To save your collection and give it back on any device, to run trades and auctions between players, to deliver what you bought, to send the emails you ask for (the sign in link), and to keep the game fair (limits on free packs, on invitations, on abuse).

Who handles it

The game relies on a few companies, each for one job. They process the data on our behalf:

• Supabase: accounts and the game's database, hosted in the United States.
• Vercel: hosting of the website.
• Stripe: payments.
• Resend: sending the sign in emails.
• Google and Apple: only if you choose to sign in with them.

Card pictures are loaded straight from Wikimedia's servers and fonts from Google Fonts: like any website you visit, they receive your IP address when your device asks for them.

How long

As long as your account exists. A guest account that was never turned into a real account can be removed after a long period without play.

Your rights, and deleting your account

You can ask for a copy of what the game holds about you, have it corrected, or have your account and everything attached to it deleted. To delete your account yourself, at once: sign in to the game (the website or the app), open the menu under your name, and choose Delete account. Your cards, Wikicoins, friends, trades and auctions are erased, and a running Premium is cancelled. You can also write to contact@wikimillion.com from the email address of your account: it is done within 30 days. Records of past payments are kept by Stripe as the law requires. If you live in the European Union or the United Kingdom, you also have the right to complain to your data protection authority.

Children

Wiki Million is not directed at children under 13, and does not knowingly collect their data. Cards mirror Wikipedia, which covers every subject, mature ones included.

Changes and contact

If this policy changes, the date at the top changes with it. Any question: contact@wikimillion.com.