Privacy policy

Changes to this privacy policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

How we collect and use your personal information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our players or others.

What personal information we collect

The types of personal information we obtain about you depend on how you interact with the Site and use the Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information we collect directly from you

Information that you directly submit to us through the Services may include:

• Account information: if you register, your email address, a hash of your password (we never store the password itself), your player name, and any passkeys or two-factor authentication you choose to set up.
• Guest information: if you play as a guest, a randomly generated player ID and player name. No email address is needed. A sign-in cookie keeps that guest identity for 30 days after your last visit, and signing out removes it.
• Gameplay information: the tables you create or join, your seat, your moves, and your wins and losses, linked to your player ID.
• Support information: the name, email address, and message you choose to send us through the contact form.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Information we collect through cookies

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we use cookies and similar technologies ("Cookies"). Usage Data may include your IP address, browser and device information, information about your network connection, and the requests you make to the Site. We use it to operate and secure the Services, for example to limit how often the contact form can be used and to diagnose errors.

Information we obtain from third parties

We may obtain information about you from service providers who collect information on our behalf or at your direction, such as:

• Google, if you choose to sign in with Google: your email address and a Google account identifier.
• Cloudflare, which tells us whether a form submission passed its bot check (see Bot protection below).

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see Third-party websites and links below.

How we use your personal information

• Providing the Services. We use your personal information to run the game — to seat you at tables, show your player name to the other players, apply your moves, and record results — and to create, maintain, and otherwise manage your account, including sending account emails such as email confirmation and password reset.
• Security and fraud prevention. We use your personal information to detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity, such as automated sign-ups or abuse of the contact form. If you register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your password or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Communicating with you. We use your personal information to respond to your messages and improve the Services. This is in our legitimate interests in order to be responsive to you and to provide effective services to you.

We do not send marketing emails, show advertising, or use your personal information for targeted advertising.

Cookies

Like many websites, we use Cookies on the Site, but only those the Services need to work: one keeps you signed in, one protects forms against forged submissions, two remember your language and tile colour, and short-lived ones carry status messages and complete sign-in with Google. We use no advertising or analytics cookies, and we do not permit third parties to place advertising cookies on the Site.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies will sign you out and may cause some of the Services, including signing in and playing, to work incorrectly or no longer be available.

Bot protection (Cloudflare Turnstile)

Sign-in, registration, password reset, the contact form, and Play as guest are protected by Cloudflare Turnstile to keep out automated abuse. Turnstile runs in your browser and sends Cloudflare technical signals such as your IP address and browser characteristics, which Cloudflare uses to tell people from bots. We rely on our legitimate interest in protecting the site and its players. Cloudflare's handling of this data is described in:

• Cloudflare Turnstile Privacy Addendum
• Cloudflare privacy policy

To stop abuse we also limit how often one connection can use forms, the API and live play. This uses your IP address (or your player ID while you play), held only in the server's memory for at most an hour and never logged or stored, again on the basis of our legitimate interest in protecting the site.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With other players: your player name, your seat, and the moves you make are visible to the other players at your table, and the tables you host (with your player name) may be listed in the public lobby.
• With vendors who perform services on our behalf, such as website hosting and cloud storage, email delivery, and bot protection (Cloudflare).
• When you direct us or otherwise consent to our disclosure of certain information to third parties, such as when you sign in with Google.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our players or others.

In the past 12 months we have disclosed the following categories of personal information for the purposes set out above: identifiers such as your email address, player name, player ID, and IP address; and internet or other similar network activity, such as Usage Data. The recipients were vendors who perform services on our behalf.

We do not "sell" or "share" (as those terms are defined in applicable law) personal information, we do not use it for targeted advertising, and we do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

Information other players can see

Your player name and gameplay are visible to the other players at your table. We do not control what other players do with what they see, and cannot ensure that they will respect your privacy. Choose a player name that doesn't reveal personal information you would rather keep private.

Third-party websites and links

The Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Children's data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. We do not "sell" or "share" (as those terms are defined in applicable law) the personal information of anyone, including individuals under 16 years of age.

Security and retention of your information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security". In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Registered account data is kept until you delete your account. Records of finished games are deleted automatically about seven days after the game ends.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to access / know. You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
• Right to delete. You may have a right to request that we delete personal information we maintain about you.
• Right to correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Restriction of processing. You may have the right to ask us to stop or restrict our processing of personal information.
• Withdrawal of consent. Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
• Appeal. You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
• Managing communication preferences. We only send emails about your account, such as email confirmation and password reset, and never promotional emails.

Registered players can download or delete their personal data themselves from Manage account. You may exercise any of the other rights by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us, or to lodge your complaint with your local data protection authority.

International users

Please note that we may transfer, store, and process your personal information outside the country you live in, including through our service providers. If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please get in touch through our contact form.

Contact us