Privacy Policy
Placeholder copy — lawyer-reviewed version replaces this before public launch.
What we collect
- Account fields: email, username, password hash (bcrypt). Never the plaintext password.
- Gameplay events: seat claims, bids, cards played, hand outcomes, chat messages. Stored in our database to power replays, leaderboards, and the provably-fair audit ledger.
- Connection metadata: IP address (for rate-limiting and abuse detection), browser user agent, session timestamps.
- Optional cosmetic preferences: equipped card backs, felts, hand skin, and provably-fair client seed.
What we don't collect
We do not collect payment card numbers, banking details, government ID, location data, or any third-party social-graph data. We do not run third-party advertising trackers.
How we use it
Only to power the gameplay experience: matchmaking, leaderboards, replays, support, fraud detection, and the provably-fair audit ledger. We do not sell or rent personal data to anyone.
Sharing
We share data with hosting providers (database, realtime, CDN) only to the extent required to operate the service. Each provider is bound by their own data-processing agreement.
Retention
Account data is retained for as long as your account is active. After account deletion (request via support), we purge personal data within 30 days, subject to any legal retention obligations. Provably-fair audit rows are kept indefinitely with the player's userId replaced by a stable hash so historical hands stay verifiable without identifying the player.
Your rights
You may request a copy of your data, ask us to correct inaccurate data, or delete your account. Email support with the request from the email address on file.
Cookies
We use a single httpOnly session cookie (
royal_session) for authentication. We do not use third-party tracking cookies.Changes
We may update this policy; the current version is always at this URL. Material changes will be announced via in-app notification.
Last updated: 2026-06-04. Contact: /support.