Privacy Policy

LAST UPDATED — PLACEHOLDER

What We Collect

When you create an account, we store:

• Your chosen username
• A hashed password (we never store your password in plain text)
• Your email address, if you choose to provide one
• Your ELO rating, used for ranked matchmaking
• Badges you've earned, and which one you've marked as your favorite
• Gameplay preferences: theme, card deck and card back style, game speed, and toggles for hints, tooltips, sound, auto-pass, and auto-confirm-retire
• Your chosen avatar — either a generated wireframe, or an image file you upload
• The date of your last login, and the date you agreed to this Privacy Policy

Why We Collect It

We use this data solely to operate the game — to authenticate you, track your stats, and allow you to recover your password if you provided an email address.

We do not sell your data, share it with third parties, or use it for advertising.

Visibility to Other Players

Your username, avatar, and ELO rating are visible to other registered players — for example in lobbies, game tables, and rankings. Your email address and gameplay preferences are never shown to other players.

Gameplay Data

We collect gameplay data (the moves made during a match) on an anonymized basis, not linked to your account or username. This is used for two purposes: to debug and improve the game, and to train AI players.

Feedback

If you submit feedback through the in-app form, the message text and your username (if logged in) are stored on our server and mirrored into a private bug tracker on GitHub, visible only to the developer. This is used solely to fix bugs and improve the game.

Guest Accounts

If you play as a guest (without registering), no data is stored on our servers beyond your current session. However, badges you earn and your theme choice are saved in your browser's local storage, so they persist between visits on that device. This data isn't sent to us and isn't tied to any account — registering carries it into a permanent account.

Inactive Accounts

Inactive accounts may be deleted after 2 months.

Email Use

If you provide an email address, it is used only for password recovery. We will not send marketing or promotional emails. A one-time confirmation link may be sent when you register.

Data Retention

You can permanently delete your account at any time from Account Settings → Account → Delete Account. This immediately removes your username, password, ELO rating, badges, and preferences from our systems. You may also request deletion by contacting us.

Data Breach Notification

If we become aware of a data breach affecting your personal data, we will notify the relevant supervisory authority within 72 hours where required by law, and notify affected users without undue delay.

Cookies and Local Storage

We use a single session cookie to keep you logged in. No third-party tracking cookies are used.

Your browser's local storage is also used to remember your theme and earned badges on this device — this stays in your browser and is only sent to us if you register.

Contact

For any privacy-related questions, please contact us at: [contact address — placeholder]