Privacy Policy

Last updated 4 August 2026

This explains what information MAYG collects, why we collect it, who sees it, and what you can ask us to do with it. We have tried to write it in plain English rather than in the usual fog.

1Who is responsible

Peeking Duck Studios Ltd., Nassau, The Bahamas, is the controller of the personal data described here. Questions, requests and complaints go to sinjin@peekingduck.io.

2The short version

• We collect what we need to run your account, run matches, keep the game fair, and fix things when they break.
• We do not sell your personal data.
• You can play without connecting an external wallet. If you connect one, we record its public address and nothing else about it.
• You can ask us for a copy of your data, or ask us to delete it.

3What we collect

Account information

Your email address, player name and password (stored hashed, never in readable form), and the account type you hold. If you connect an external wallet, we record its public address so that we can link it to your account. We never see, request or store your private keys, seed phrase or recovery details.

Gameplay information

Match history and results, in-game balances, items and dresses you own or equip, matchmaking data, and reports made by or about you.

Technical information

IP address, approximate country derived from it, device and operating system, launcher and game version, crash reports and performance logs, and timestamps of when you connect.

Communications

In-game text and voice chat may be recorded and reviewed where a player report is made or where we are investigating cheating or abuse. Emails you send us are kept so we can answer them.

Website

This site uses no advertising or tracking cookies. Fonts are loaded from Google Fonts, and video is embedded from YouTube in privacy-enhanced mode, which means YouTube does not set cookies until you actually press play on a video.

4Why we use it

• To run your account — creating it, signing you in, supporting it.
• To run the game — matchmaking, hosting matches, saving progress and balances.
• To keep it fair and safe — detecting cheating, investigating reports, enforcing our Terms.
• To fix and improve it — diagnosing crashes, understanding which features are used, balancing the game.
• To talk to you — service messages, downtime notices, replies to your questions.
• To meet our legal obligations — including sanctions and anti-fraud requirements.

5Our legal basis (if you are in the EU or UK)

• Contract — we need this data to give you the game you signed up for.
• Legitimate interests — anti-cheat, security, abuse prevention, and improving the game. We balance these against your rights.
• Legal obligation — where a law requires us to keep or disclose something.
• Consent — for optional marketing emails, which you can withdraw at any time.

6Wallet addresses and public records

A wallet address is personal data, so we treat it as such: it is stored against your account, used only to deliver the features you connected it for, and covered by every right described in this policy.

7Who we share it with

We do not sell personal data. We share it only with:

• Service providers who host our servers, deliver our emails, provide crash reporting or voice services, and who are only allowed to use the data to provide those services to us.
• Authorities, where we are legally required to disclose something, or where it is necessary to protect someone's safety or our rights.
• A buyer or successor, if the business is sold or reorganised. If that happens, this policy continues to apply until you are told otherwise.

8Where your data goes

We operate from The Bahamas and use service providers located in other countries, including the United States. Where personal data of players in the EU or UK is transferred, we rely on appropriate safeguards such as Standard Contractual Clauses.

9How long we keep it

• Account data — while your account is open, and for a reasonable period after you close it in case of disputes.
• Match and gameplay data — while it is useful for leaderboards, anti-cheat and balancing.
• Chat recordings tied to a report — only as long as needed to investigate and enforce.
• Crash and technical logs — typically a short rolling window.
• Ban records — kept long term, so that a banned account cannot simply be recreated.

10Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service. You can also withdraw consent to marketing at any time.

Email sinjin@peekingduck.io and we will respond within 30 days. We may need to verify who you are first. Exercising these rights costs nothing and we will not treat you differently for it.

If you are in the EU or UK and you are unhappy with our response, you can complain to your local data protection authority. Note that we can delete a wallet address from our own records, but we cannot delete anything already written to a public network, because that is technically impossible for anyone to do.

11Children

MAYG is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has created an account, contact us and we will delete it. The marketplace and other paid features are restricted to players aged 18 and over.

12Security

We use encryption in transit, hashed passwords, access controls and a code-signed game client. No system is perfectly secure, so please use a strong, unique password. If a breach affects your personal data and the law requires it, we will notify you and the relevant authority.

13Changes to this policy

If we change this policy we will update the date at the top, and for significant changes we will give notice in the game or on our community channels.