Penny Foundry LLC · Effective 9 September 2026
The short version. Your Card Table has no accounts, no ads, no trackers and no third-party analytics. Almost everything the app knows about you stays on your own device. You can play every game without giving us anything at all.
Your display name, favourite games, win and loss records, streaks, deck choices, accessibility settings, remembered game setups and which game you last opened are stored only in your device's local storage. We cannot read them.
Clearing your browser data or deleting the app erases them permanently. There is no backup and no recovery.
We count how often features are used — for example, that a Cribbage table was opened. The entire message sent is a list of names:
{"names": ["open.cribbage"]}
There is no device identifier, no session identifier, no player identifier, no timestamp, no page address and no user-agent that we add. On our side these become a daily tally: a date, a name and a number. Nothing can be joined back to a person, a device or a session — not by us, and not by anyone who obtained the data.
We honour Do Not Track and Global Privacy Control. If your browser sends either signal, nothing is counted and nothing is queued.
Playing with a friend — live or by correspondence — needs an identity, so the app creates one silently. There is no sign-up form and no password.
We store a random identifier, a display name (default "Guest"), when the identity was created, when it was last seen, and the state and move history of matches you play. Your device holds a token proving the identity is yours; we store only a cryptographic hash of it, never the token itself.
Email is optional. You may add one so a correspondence opponent's move can reach you. If you do, we store the address, whether it has been verified, and a single-use verification token. You may remove it at any time, which deletes the address and any pending token. Email is delivered by Resend, who process it solely to send that message.
Our server uses your network address transiently, in memory, to rate-limit abuse. The application does not store it. Standard web-server logs may retain addresses briefly as part of normal operation.
The games are suitable for all ages. We do not knowingly collect personal information from children under 13. Play requires nothing; the only optional field anywhere in the app is an email address for correspondence play.
If this policy changes materially we will update the effective date and note the change in the app's What's New. Questions or requests: support@yourcardtable.com.