CardsGame privacy

Updated 1 October 2026. CardsGame is operated by Cloudeffic Ltd, registered in Scotland under company number SC493578. Its registered office is 35 Nasmyth Park, East Calder, Scotland, EH53 0GP. Contact support@cloudeffic.com with privacy questions.

What we use

• Your chosen guest name, a random session identifier and game actions let you join a private table and play.
• Optional Keystone account sign-in uses your name, email address and account identifier. Passwords are handled by the authentication service, not stored by the CardsGame app.
• Saved groups contain the group name, player names you enter and table rules. The app does not request your phone's address book.
• Online tables store the game state, scores and admission details. Other participants see player names, scores and publicly played cards. Calling Show reveals that player's cards to the table. Ordinary private hands are shown only to their player; the game authority holds the complete deal to run the game.

On your device

Offline and nearby saved games, hand arrangements and preferences are stored on your device. Nearby games send role-filtered state to devices admitted by the host over Bluetooth. Speech, sound and haptics run on your device; CardsGame does not record your microphone. Camera access is optional for scanning invitation QR codes; manual entry is available.

Optional turn alerts

If you enable available online turn alerts, Apple gives the app a device notification token. CardsGame links that token and a registration identifier to your admitted private seat, table, guest or account, notification environment and selected language. They are used only to send turn reminders through Apple Push Notification service, not for advertising or notification analytics. Apple processes the delivery token, generic alert and opaque table, round and turn identifiers. Alerts contain no player names, invitation codes, scores or card details.

Bindings expire when their table expires or after thirty days, whichever is sooner; database removal is asynchronous. Turning alerts off, leaving the table, signing out or deleting your profile removes owned bindings and queued reminders when the service receives the change. A suspended or offline app cannot immediately report a change made in system Settings. The app checks permission when it returns to the foreground. Restored backups discard notification bindings and queued alerts; fresh registration is required. An alert already accepted or delivered by Apple cannot be recalled, and tapping it never grants access or reveals a private hand automatically.

Reports and personal blocks

Where online reporting is available, a report sends the visible safe name or table title, your selected reason and the identifiers needed to establish who reported it and whose label was shown. It does not attach cards, screenshots, invitation codes or a saved game. An acknowledged receipt means the service received the report; it does not mean someone has reviewed it. Reports and their retry/link metadata become inaccessible after thirty days and await database cleanup.

Unsent reports remain protected on this device for up to thirty days of access. Offline and Nearby records are local only and are not automatically delivered when you reconnect. Local records are checked for expiry when the app accesses them and removed when your profile is deleted.

Where online blocking is available, your choice stores identity references and the date of the block until you unblock or the relevant profile is deleted. Blocking suppresses attributable names and prevents future shared play. It does not remove cards, settle an existing round or bypass required Show consent. Changing a name does not remove a block; creating a new guest identity can evade it. Block-operation and verified-link metadata become inaccessible after twenty-nine days and are scheduled for hourly cleanup. Other players cannot read your block list.

Sharing and tracking

Game and account data are processed by Yensi's CardsGame and Keystone services to operate the app. There are no advertising trackers, sale of personal data or cross-app tracking in CardsGame. Sharing an invitation through the system share sheet uses the service you choose.

Retention and deletion

Online rooms become inaccessible seven days after creation. Guest sessions become invalid after thirty days; signed-in sessions follow the authentication token's shorter expiry. Expired online records are scheduled for automatic database removal, which can occur after their access expiry. Saved groups and optional identity accounts remain until deleted. Local and nearby saves remain on the device until removed.

In Settings, choose Delete account or Delete guest profile and confirm. Complete or withdraw an active Show first. Deletion removes your CardsGame identity account where applicable, saved groups, linked guest profiles and all CardsGame sessions. Private saved hands in online tables are erased, and your attributed name in shared scores and discard history is replaced with Deleted player. Anonymous scores and cards already played publicly remain accessible until the table expires so other players retain their results; those records then await automatic database removal. Deletion requests that cannot finish immediately are held for retry; the app shows completion only when deletion finishes.

Deletion markers and retry receipts become invalid after thirty days and are then scheduled for automatic database removal. A pending retry receipt temporarily holds the account identifier and linked guest identifiers needed to finish cleanup; a completed receipt contains no name, account identifier or linked guest identifiers. Other players' own saved group entries and copies on their devices are not part of your account. Removing a local save on this device does not remove another device's save. Dedicated CardsGame runtime security traces are configured for twenty-nine-day expiry. Separate shared-gateway security diagnostics can contain network addresses and request paths; they are currently stored without an enforced universal time-based expiry. The service is hosted on Yensi's London server supplied by SSD Nodes. CardsGame does not currently run a scheduled service-backup workflow. Recovery is allowed only from a recent, independently covered snapshot after completed erasure has been replayed and current personal preferences preserved; an old or unproven snapshot is refused before service resumes. This does not assert that the hosting provider has no snapshots or that separate infrastructure copies have the same retention. Support correspondence and any additional personal-data requests can be addressed to support@cloudeffic.com.

Your choices

You can play locally without an account, refuse camera or Bluetooth access, and disable voice or sound in Settings. Turn alerts are optional and can be disabled separately in app or system Settings. You can delete your guest profile or account instead of continuing online data processing.