Data needed to run a game
When you create or join a room, the server processes a nickname, room code, player identifier, seat assignment, game options, actions, and saved game state. Nicknames, public actions, and public game state are visible to other people in the same room. Avoid entering your real name or other personal information as a nickname.
Your browser stores a secret seat credential. The server stores a hash of that credential to verify actions and return the appropriate private view, such as your reserved cards. Treat the credential as a password. Room links contain a room code, not the secret credential. Sharing a room link allows others to find that room; it is not a public social profile.
Cookies and local browser storage
The game uses localStorage to remember your nickname, selected edition, last room, room-specific seat credentials, and audio preferences. These values remain in that browser until you remove them or they are replaced.
Browser storage that enables a requested game is separate from website analytics and advertising. Adsterra, advertisers, or their measurement partners may use cookies, pixels, device identifiers, IP addresses, and similar technologies where ads are shown. You can clear site data through your browser settings, but removing seat credentials can make an existing seat inaccessible.
Website analytics
All generated pages load our Umami analytics script, hosted at umami-rho-khaki.vercel.app. It measures page visits and technical information such as browser, device category, referrer, screen size, and visited path. Requests necessarily reach the analytics service with network information, including an IP address; this policy does not claim that all infrastructure logs are anonymous.
Our integration excludes URL query strings and fragments from page tracking, so room codes and other query values are not stored in tracked page URLs. We do not send nicknames or seat credentials as custom events, and we do not use analytics to create advertising audiences.
Hosting and service providers
Vercel serves the website and routes game requests to the Railway game server. These providers process requests and may retain operational or security logs, including IP addresses, requested URLs, timestamps, and error information. Umami is used for website measurement. Adsterra is used to deliver advertising through scripts from bauval.org. If you email us, your email service and our Gmail mailbox process the message and any attachments.
Data may be processed in countries other than your own through these providers. Their infrastructure and account settings affect locations and log retention. We do not promise a particular storage region or an automatic deletion deadline for provider logs.
How long data remains
Game room files persist on the server so a room can resume. At server startup, the application removes room files that have not been updated for more than seven days. This is a cleanup rule, not a guarantee that a continuously running server deletes every file exactly on day seven. Browser-held credentials and preferences have their own lifetime described above.
Support emails can remain in the operator’s mailbox to handle the request and follow-up. Contact us about access or deletion rather than assuming that clearing browser storage deletes a server file, analytics record, provider log, or email. Some information may need to be retained for security, resolving a dispute, or applicable legal obligations.
Third-party advertising
Content pages and game pages load Adsterra advertising. The current placements include display banners and a native banner container. Trust pages such as About, Contact, Privacy, and Terms are not ad-monetized. Adsterra or participating advertising partners may place or read cookies, use web beacons, IP addresses, device identifiers, browser information, and similar technologies to deliver ads, measure performance, limit repeated ads, and prevent abuse.
We do not send email addresses, phone numbers, nicknames, room seat credentials, or other directly identifying account information in ad requests. Advertising requests still necessarily include network and browser information. No Google AdSense ad code is currently loaded and no Google advertising cookies are set by this integration.
Your choices and requests
You can clear browser storage and contact the operator about your data. Depending on your location and applicable law, rights may include access, correction, deletion, restriction, objection, portability, and withdrawal of consent where processing relies on consent. Where applicable, you may complain to your local data protection authority.
Adsterra privacy and cookie information is linked below. You may also use browser privacy controls, cookie clearing, tracking protection, and industry opt-out tools where available. These external controls supplement, and do not replace, any consent choice required on this website.
Children, location, and sensitive information
The site does not request precise geolocation and does not ask for health, religious, sexual-orientation, financial, or other sensitive profile information. Do not put such information in nicknames or support attachments. We do not sell user lists or build sensitive-interest advertising audiences.
Some game editions can appeal to children. The site does not ask children to register or provide an email address. A parent or guardian can contact the operator about information a child may have provided. Edition audience and any required child-directed treatment should be reviewed when advertising settings change.
Policy updates
This policy describes the current implementation as of the date shown below. Changes to data collection, providers, or advertising require a corresponding policy update.