Privacy Policy

Who we are

POCA (“the Service,” “we,” “us”) is a fan-made idol photocard collection game operated at k-card.app. This policy explains what information we collect when you use the Service and how we use it.

Information we collect

• Account data. If you sign in with Google, we receive your Google account identifier, email address, and basic profile information (such as name and profile image) from Google. If you use email and password, we store your email and a hashed password. Guest play uses a temporary guest identifier stored in a cookie / local storage and is not linked to your Google account unless you later sign in.
• Game progress. We store your in-game save on our servers (collection, currency, progression, settings tied to your account).
• Things you send us. If you are a supporter and suggest an idol or group, we store the names and any note you write with your account so we can review it. Deleting your account deletes these too.
• Technical data. Standard server logs may include IP address, browser type, timestamps, and request paths needed to operate and secure the Service.
• Cookies / session. We use session cookies (and related auth cookies) to keep you signed in and to maintain guest sessions.

How we use information

• To create and maintain your account and authenticate you.
• To save and sync game progress across sessions.
• To operate, secure, debug, and improve the Service.
• To communicate about account or security issues when necessary.

We do not sell your personal information. We do not use Google user data for advertising.

Google sign-in

When you choose “Continue with Google,” authentication is handled by Google OAuth. We request access only as needed to sign you in (typically email and basic profile). Google’s use of your information is governed by Google’s Privacy Policy. You can revoke POCA’s access to your Google account at any time in your Google Account permissions.

Patreon

If you link Patreon from Profile, we store your Patreon user id, membership status, and the access tokens Patreon issues so we can unlock full-game progression while your paid membership is active. Linking is optional and only happens when you choose Link Patreon. Unlinking or deleting your account removes this data.

Third parties

We share data only with the providers that run the Service:

• Vercel hosts the app and provides Vercel Web Analytics, which counts page views and in-game events (such as sign-ups and pulls) without advertising cookies or cross-site tracking.
• Neon stores the database (accounts and saves) and card images.
• Google handles “Continue with Google” sign-in.
• Patreon handles supporter memberships and billing. We never see or store your card or bank details.

Optional links (such as Patreon) open third-party sites we do not control; their policies apply when you leave POCA.

Data retention

We keep account and save data while your account is active. Guest identifiers last until you clear site data or the guest session expires. Server logs are retained only as long as needed for operations and security.

Your choices

You can delete your account and all server-side progress at any time from Profile → Settings → Delete account. You may also stop using the Service, clear local guest data in your browser, or revoke Google access as described above.

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us using the details below. We will respond within 30 days.

Children

The Service is not directed to children under 13 (or the minimum age required in your country). Do not use POCA if you are under that age.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy.

Contact

POCA is operated by an independent developer (FreeSmoke). Privacy questions or requests: freesmoke@k-card.app.