Privacy Policy
Last updated: August 20, 2026
Short version: we collect the minimum needed to run a card game with leaderboards, we don't sell anything to anyone, and most of what we store you typed in yourself.
What we collect
- Account basics: your username, a hashed PIN (we cannot see the PIN itself), an avatar emoji, and when you signed up.
- Optional contact info you choose to give: an email address (for game updates and feedback, if you opt in) and a phone number (for rally texts, if you opt in). Both can be removed on your profile page any time.
- Sign-in providers: if you sign in or link with Google (or Apple, where available), we store the provider's account ID and your verified email address from that provider. We never see your Google/Apple password and get no access to your inbox or contacts.
- Gameplay: the cards played in finished rounds, results, and statistics. Round history powers leaderboards, bot improvement, and features like per-player insights.
- Technical: IP addresses on signup/login (kept private, used only for abuse prevention and rough geography) and standard analytics via Google Analytics (which uses cookies; your browser's settings control this).
What's public
Your username, avatar, and game stats (wins, losses, winnings, streaks, badges) appear on public leaderboards. Your first name, if you add one, is shown only to members of your own Bangs. Email, phone, IP, and sign-in details are never public.
What we do with it
- Run the game: accounts, tables, leaderboards, Bangs, rallies.
- Email you about updates and feedback — only if you opted in. Every email tells you how to stop them.
- Text you when your Bang rallies — only if you added a phone and switched it on.
- Improve the bots: finished rounds feed bot training and per-player play-style profiles. These profiles are internal, never shown publicly, and only exist for registered players with 10+ rounds.
What we don't do
- No selling or renting your data. No ad networks with your identity. No sharing with third parties except the services that run the site (hosting on Fly.io, analytics by Google, SMS delivery for rally texts).
Deleting your data
Email matthew.r.richter@gmail.com and your account — including stats, contact info, and sign-in links — will be deleted. Finished-round telemetry (which cards were played) is kept in anonymous form for bot training.