Privacy policy

Information we process

• Account information: your Apple or Google sign-in identifier, email address, and authentication/session information. Apple may provide a private relay email address. We do not collect your name or profile image from Apple or Google. Username: the Username you choose, and the history of the Usernames you used, with their dates. This history is never shown in the app; we read it only to answer a request from an authority.
• Photos and discoveries: photos you submit for animal identification, identification and photo-assessment results, and photos you choose to save as card art.
• Gameplay and purchases: your collection, card rarities, Amber balance and history, your Cristal, Hourglass and Extra scan balances, your Pebbles balance and history, your experience and level, your trade offers and trades (with a snapshot of each card), your Market listings, bids, sales and purchases, your in-app purchases and their App Store or Google Play transaction records, tasks, streaks, your Friends and Friend requests, your who-can-see settings, the pairs of players who were ever Friends, the Friend request pushes already sent, your Daily quests, chests and their rewards, your Streak and Days played, your Wanted species, Lucky finds and Booster openings, your Season log, your Best photo and First discovery titles, your posts and the Reactions you give, and related timestamps.
• Battles and cosmetics: the avatars, Medals and card backs you own and wear, your Showcases and Achievements, your Teams and Stand-ins, your Garnet balance and history, your Battles (their mode, Contests, both Teams, moves, results and rewards), your hidden Battle rating and your Rank in each season.
• Sponsorship and shared links: your Sponsor link; the Share links made when you share a card video, with the card, the kind of video and the app or action you chose, as your phone reports it; your Sponsor and how you named them (a link you opened or pasted, the Google Play install referrer or a Username you typed); your Recruits, the dates they joined and saved their first scanned card, and whether each Sponsorship earned its reward; your Sponsorship rewards and when you collected them; a campaign link you came through only adds to that campaign's total and is never recorded on you.
• Technical and diagnostic information: IP address, device/browser information supplied with requests, request identifiers, service usage, errors, and performance information used to operate and protect the service. This includes crash reports, error details and performance timings, the push notification token of each device where you allow notifications, and an identifier each of your devices generates for Terra, which we also use to stop players who share a device from trading with each other. Before a Sponsorship pays its reward, we also use it to check that the Recruit's device was never used by another Terra account. On iPhone this identifier is kept in the device's keychain, and on Android it is derived from the identifier Android gives Terra on that device, so it stays the same if you reinstall Terra.
• Usage statistics: screens you open, features you use, the results of your scans, saves and boosters, your app version, device model, operating system and country, and a random identifier. Never your name, email, photos or precise location.
• Support messages: information you choose to include when contacting us.
• Reports, Blocks and moderation: the Reports you file (the player or card concerned, the reason, your optional note and the dates), the players you block, the Moderation decisions that concern you or your Reports, the messages in your Moderation inbox and your replies, the scans refused by the automated content check, the version and date of the terms of use you accepted, and the signals we record about unusual trading (many trades between the same players, very one-sided trades, bids between players who later blocked each other, recurring buyers and sellers, repeated attempts to trade from a shared device).
• Web report form: if you report content at terratcg.app/report, your name, your email address, the player or card you point to, your explanation, your ticket number, and a coded form of your IP address that only serves to limit abuse of the form.

Why we use it

We use this information to authenticate you, identify and assess animal photos, save and display your collection, provide gameplay and social features, run trades and the Market, respond to requests, and investigate errors or abuse. For people in the European Economic Area, our legal bases are providing the service you request, legitimate interests in security and reliable operation, and consent where required. Showing a traded card's photo to its new owners and to other players rests on providing the service under the terms of use you accepted, not on consent. Showing your Profile, collection, photos and Feed activity to other players as your who-can-see settings allow rests on our legitimate interest in a game where players see each other’s finds, not on consent: most of these settings start on Everyone, and changing them is how you object. Friends and Friend requests rest on providing the service. Detecting farming and sales for money rests on our legitimate interest in a fair, safe game. You can control camera and photo access in your device settings. We use usage statistics to understand which features work, find problems and decide what to improve. Statistics recorded by the app are anonymous audience measurement; statistics recorded by our servers and crash reports rely on our legitimate interest in a working, improving service. We use your Battle rating to match you with opponents of a similar level; this rests on providing the service.

We use Reports, Blocks and moderation information to keep Terra safe: to review Reports, apply Blocks, act against content and players that break our terms of use, tell the people concerned what we decided, and meet our legal duties as a host. Our legal bases are providing the service under the terms of use you accepted, our legitimate interest in a safe community, and our legal obligations, including French law on online hosts and the EU Digital Services Act.

Photo processing and AI

When you submit a scan, the photo is sent to our servers for animal identification and to OpenAI for assessment of the animal's liveness and photo quality. AI results can be wrong. Do not submit sensitive personal information. If a person can be recognised in a photo, they must agree to it, as our terms of use require. Terra does not keep an unsaved scan's original image in its card-photo storage. If you save the result, the photo is uploaded and retained as card art.

OpenAI processes API data under its own applicable terms and retention policies. Terra requests that assessment responses are not stored as retrievable API responses; this does not eliminate provider security or abuse-monitoring retention. We do not use your photos to train our own animal-identification model.

The assessment also checks for inappropriate content whenever a person appears. It also records whether a person is visible in the photo, so that photos of people cannot be traded or listed and are shown at most to the Friends of the player holding the card. A scan that appears to show inappropriate content is refused automatically: no card is created and no scan attempt is used. The refusal is recorded on your account, and the refused photo is kept privately, apart from card photos and never shown to other players, for 7 days so that we can check these automated decisions. It is then deleted automatically, and sooner if you delete your account. No action is taken against you automatically; we may look at repeated refusals ourselves. The refusal screen explains how to contest the decision.

Reports, Blocks and moderation

When you report a player or a card, we receive your Report by email: the reason, your note, the Username and Terra ID of the player concerned, a link to the card photo that expires after 7 days, your own Username and Terra ID, and how many other Reports are open on the same player or card. These emails contain Usernames, never anyone's sign-in name. A card you report disappears from your view at once. We send a receipt, then the outcome, to your Moderation inbox under Profile → Community, with a push notification if you allow them.

The player you report is never told who reported them, and is not told about the Report at all unless we act on it. If we hide one of their cards, reset their Username, which they can no longer use, give them a Social ban, which removes them from the social features, trades and the Market for good (their listings are withdrawn and bids refunded), or reverse one of their trades or sales, they receive a statement of reasons in their Moderation inbox: what was restricted, why, on which rule, and whether the decision was automated. They can reply to it to contest the decision.

The player you block is not told. A Block ends any Friendship or pending Friend request between you and hides each of you from the other in search, profiles, feeds, card photos and Friend notifications. It also cancels pending trade offers between you and hides each of you from the other's Market listings. It lasts until you lift it in Profile → Community → Blocked players or one of you deletes their account.

Moderation decisions are made or approved by a person and never edited: a later decision replaces an earlier one. They record what we did and why. They are kept with the Report they answer, as the record of our moderation, including after the account they concern is deleted; the link to that account is then removed.

If you use the web report form at terratcg.app/report, we use your name and email address to handle your report and to send you our decision by email. Every request gets a ticket number. For an intimate image of you, we aim to remove it within 24 hours, and we also look for identical copies among card photos. We keep your name, email address and the coded form of your IP address until 1 year after your report is closed, so that we can handle any challenge to our decision, then delete them automatically. The report itself, its ticket number and our decision are kept without them.

Referrals to authorities

When content appears illegal, in particular when it may show child sexual abuse or threaten someone's life, we report it to the competent authorities: in France, PHAROS, the police platform for illegal online content, or the police directly when someone is in danger. We send the content and the account information the report needs. While a referral is pending, the law may require us to wait before telling the player concerned.

We also answer requests and orders from authorities that the law obliges us to follow, using the information we hold, including the Deletion record described below.

When we report child sexual abuse material, we delete the image once it is reported and keep only its fingerprint (a hash), the account identifiers, the dates and the PHAROS reference, for 1 year.

Who receives information

We use Apple and Google for sign-in, Cloudflare for hosting, photo storage, network security and email about Reports and moderation, Neon for account and gameplay storage, OpenAI for photo assessment, RevenueCat for in-app purchases and currency balances, Expo with Apple Push Notification service and Firebase Cloud Messaging for delivering notifications, Sentry for error monitoring, and PostHog for usage statistics. Providers process information needed for their roles. PostHog and Sentry store data in the EU. Information may be processed outside your country, including outside the EEA, subject to applicable provider safeguards.

Your Username, avatar, card back, level and Terra ID are visible to every player who can see you, whatever your settings, and anyone who types your exact Username can find you. Other players never see a profile image. The rest follows your who-can-see settings in Profile → Privacy: “Profile” for your figures, Achievements and Showcases, except the figures that count your cards; “My collection” for the cards you have and the figures that count them (species, including each Season’s, Photos and Gold ex), which also need “Profile”; “My photos” for the photos you took, on cards you still hold; “Feed activity” for your moments in your Friends’ Feeds. Each starts on Everyone, except “Feed activity”, which starts on Friends. Cards you traded or sold and Field Guide cards already drawn show their photo to everyone. A photo in which our automatic check finds a person is shown at most to the Friends of the player holding the card. The photos of the cards in your Showcase follow “My photos”. Your level is shown with your Username. A Friend sees the cards you can trade when preparing an offer, if “My collection” allows it, and the cards and Pebbles in the trades between you. A player you send a Friend request to sees your Username, avatar and level, and may receive a push notification showing your Username. On the Market, every player sees your listings with their card photos, and your Username and amount on your bids. A scanned card you traded keeps your Username as photographer for its new owners. Your email address and authentication credentials are never shown to other players. Your avatar is shown with your Username. In a Battle, your opponent sees your Username, avatar, level and card back, your Team once both Teams are revealed, and your moves; in ranked Battles, also your Rank. Your Battle history shows the Usernames of your opponents. What your Sponsor, your Recruits and the people who open your links see is described under Sponsorship and shared links. Every player sees your Best photos, signed with your Username, on the animal’s pages and on the Field Guide cards drawn while the photo is elected, which keep it. If you hold an animal’s First discovery, every player sees your Username on the animal’s pages, and that card with its photo, unless a person is visible in it or your “My photos” is not on Everyone. Your First discoveries, Best photos and Season’s bests are posted in World, which every player sees; a photo showing a person is never shown there. A post in World needs your “My photos” on Everyone, whatever your “Feed activity”. Your other moments (scanned cards, Aurora Boosters, Medals, Rank, Streak and Level) are posted to your Friends, unless your “Feed activity” is on Only me. Anyone who can see a post may react to it: only you see who reacted to yours, the others see the counts. In their Friends list, your Friends see your Level beside theirs, your Rank if “Profile” allows it, your collection and Expedition figures if both “Profile” and “My collection” allow it, and your best scanned card of an animal compared with theirs if “My collection” allows it.

We share information with authorities only as described in Referrals to authorities above.

Sponsorship and shared links

When you share a card, Terra makes the video on your phone and hands it, with a short text and a link, to your phone's share sheet: you choose the app and the people who receive it. Terra never reads your contacts and never sends a message for you. The video shows the card, with its photo for a scanned card, its name and its rarity, never your Username or location. The text names the card, the Amber you would both earn and your Username, so that a friend can name you as their Sponsor. Each share gets its own Share link, which records the card, who shared it, the kind of video and, once the share ends, the app or action you picked, such as a messaging app or saving the video. If you turned usage statistics off, the app or action you picked is not kept, and your opens of shared links are not counted.

Anyone who opens your Sponsor link or one of your Share links without Terra sees an invitation page on terratcg.app with your Username and avatar. The page never shows the card, and it names no one if moderation has removed you from the social features. On iPhone, the page's App Store button copies the link so that you can paste it into Terra with the system Paste button; Terra reads the clipboard only when you tap it. On Android, the link reaches Terra through Google Play as the install referrer, which Terra reads only when you open the step to name a Sponsor.

When you name a Sponsor, you and your Sponsor become Friends, unless one of you already has 200 Friends. Your Sponsor sees your Username and avatar, how many days you have left to save your first scanned card, and when you qualify, with a notification. Before a Sponsorship pays its reward, we check on our servers that none of the Recruit's devices was used by another Terra account and that moderation has not removed either of you from the social features; a refusal never names the device. The codes in links serve only Sponsorship and our counts of shares, opens and players who joined, per link or campaign; the app never adds them to its usage statistics, and Terra uses no advertising identifier, fingerprinting or attribution provider for them. A campaign link is only counted in total: nothing records which campaign brought you.

Share links and Sponsorships rest on providing the service you ask for when you share or name a Sponsor; the device check and the monthly limit on a Sponsor's rewards rest on our legitimate interest in a fair game. We treat reading the code of the link that brought you to Terra, whether opened, pasted or passed on by Google Play, as strictly necessary to the Sponsorship it offers, so we ask no separate consent for it. Counting the players a campaign link brings rests on our legitimate interest in knowing which of our campaigns work.

Advertising and tracking

Terra has no in-app advertising or advertising identifier integration. We do not sell personal information or use it for cross-app advertising tracking. Links you share carry a code that tells us who shared them; we use it only for Sponsorship and to count shares, never for advertising. This website measures its audience without cookies and does no advertising or cross-site tracking. You can turn this off with the link below.

Permissions

Camera and photo access let you submit animal images. Device motion makes cards respond when you tilt your phone and is handled on the device. Terra does not request your precise location or contacts. Network providers may infer a general region from an IP address. Saving a card video asks, on iPhone, only to add it to your photos, never to read them; on Android it needs no permission.

Retention and deletion

Account, collection and saved-card information is kept while your account remains active unless you delete it. Some temporary scan outcomes are removed after 30 days; saved scans and card records remain with your collection. Your trade and Market history (offers, trades, listings, bids and sales, with a snapshot of each card) is kept as long as your account or the other player's account exists, so that each of you keeps their history; once one of you deletes their account, the other's history shows them as “a player”. Your Pebbles balance and history are kept like your Amber history: while your account exists, then deleted with it, except what the purchase records described below keep. The signals we record about unusual trading are kept for 12 months. Routine database backups retain the four most recent copies. Separately retained operational snapshots, diagnostic records, and provider security records may persist under their applicable retention periods. Battles are kept so that you and your opponents keep your history. Your Teams, Stand-ins, Garnets, Ranks, avatars and card backs are kept while your account exists. Your Share links and Sponsorships are kept while your account exists; Share links do not expire. Your Friends and pending Friend requests are kept while both accounts exist; a declined or cancelled request is deleted. While both accounts exist, we also keep a record of each pair of players who were ever Friends, even after the Friendship ends, so that the Daily quest counts a pair only once, and a record of the Friend request push one player already sent another, so that asking again sends no new push.

Use Profile → Sign-in and account → Delete account to delete your account. Your profile, collection, cards, scan photos (refused ones included), Blocks, Moderation inbox and your identity on your Reports are deleted with it, and photo removal is requested from our storage. Your Username is freed 30 days after the deletion, unless moderation reset it: until then nobody else can take it, and nothing links it to you. Scanned cards you traded or sold to other players stay in their collections with their photo. We delete everything that links them to you, including your Username, profile, player identifier, scans and your Username in trade and Market history, so they are credited “a player” and are no longer information about you. We keep a record of the license each traded photo carries (the card, the terms version and the date of its first trade), without anything that identifies you. If a photo shows you or anyone else, we remove it on request. Your pending trade offers are cancelled, your listings withdrawn and every bid on them refunded, and your Pebbles are deleted. A Report you filed is still reviewed after you leave, without your identity; a Report about you is closed and its reporter is told the content is gone. Backup or security copies may remain temporarily and are not used to restore your account for normal use. See Support for deletion instructions. Your Teams, Stand-ins, Garnets, season results, avatars and card backs are deleted. Battles you played stay in your opponents’ history, and the records of your Garnet operations are kept, without anything that links them to you. Your Share links stop naming you. If you were a Recruit, your Sponsorship is deleted, unless it had already qualified: it then stays without anything that links it to you, so that your Sponsor keeps their reward and their count. If you were a Sponsor, your Recruits keep their own rewards and see that their Sponsor left Terra. Your Best photos and First discoveries pass to other players, Field Guide cards wearing one of your photos return to the animal’s illustration, and your posts and Reactions are deleted. Your Friendships, Friend requests and the records of pairs and pushes that include you are deleted with your account.

Usage statistics are kept for up to 7 years. Crash reports are kept for 30 days. Deleting your account deletes the identifier that links server usage statistics to you; what remains can no longer be tied to you.

French law requires hosts to keep some data about deleted accounts (article 6 of the LCEN and decree no. 2021-1362). When you delete your account, we keep a Deletion record: your email address, Apple or Google identifier and the dates your account was created and deleted, for 5 years; and every Username you used and the IP addresses of your sign-in sessions, with their dates, for 1 year, both counted from the deletion. The Usernames are kept under article 3 of decree no. 2021-1362, which covers the pseudonyms used on an account. The Deletion record holds no game data, is read only to answer a request from an authority, and is deleted automatically at the end of its period.

Records of your in-app purchases are kept after you delete your account, under a separate purchase identifier that no longer points to an account: each purchase, grant, spend, refund or payment dispute for 5 years from the event, and the proof of how your deletion was handled, including the request to delete your RevenueCat customer record, for 3 years. We use them only to answer payment questions, refunds and disputes.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to certain processing. Contact support from an address associated with your account; we may verify ownership. You may also complain to your local data-protection authority, including the CNIL in France. Withdrawing device permission does not delete information already submitted.

You can stop usage statistics at any time in Profile → Privacy; this also stops statistics recorded by our servers for your account. Crash reports are always sent so we can keep Terra working; to object to them, contact support. In Profile → Privacy, under “Who can see”, you choose who sees your “Profile”, “My collection” and “My photos”, your “Feed activity”, and who can send you “Friend requests”; these settings are how you object to the display described in Who receives information. With “My photos” on anything but Everyone, your photos stay out of new Best photo elections and your First discovery photos out of World (the title stays yours); Field Guide cards already drawn keep theirs, and cards you gave away keep their photo.

Security

Connections to Terra's service use HTTPS. We use access controls and authentication to protect stored information. No service can guarantee absolute security.

Children

Terra is not directed to children under 13, and players must be at least 13. If we learn that a player is under 13, we delete their account. If you believe a child under 13 has supplied personal information, contact us so we can investigate and address it. Store age ratings and local eligibility requirements also apply.

Changes

We may update this policy as the service changes. The effective date above identifies the current version. Material changes will be communicated where required.