This policy covers the Deck to Go app for iPhone and iPad, the browser version at play.deck-to-go.com, and this website. Deck to Go is operated by Jack Lewis, an individual doing business as Deck to Go, in Wisconsin, United States ("Deck to Go", "we", "us"). Questions go to support@deck-to-go.com. The short version: we collect what's needed to run your account and your games. We don't show ads, we don't use tracking or analytics tools, and we don't sell or rent your information to anyone.
What we collect
- Account details. Your email address, your password (stored only as a one-way hash by our sign-in provider, never readable by us), and the display name you choose. If you turn on two-factor authentication, we store the authenticator registration needed to check your codes.
- Sign in with Apple or Google. If you use one, we receive a stable account identifier from Apple or Google and, where you allow it, your name and email address. If you use Apple's "Hide My Email", we only see the relay address Apple gives us.
- Games you play. Match history: which game, when, who took part (by display name), final scores and who won. We also keep simple counts of games you've hosted and played. While a match is in progress we save its state so it can resume after a dropped connection; that copy is deleted when the match ends, or within about a day if it never does.
- Ratings and stats. From your match results we work out a rating for each game and stats such as your win percentage. If you leave a match and it's ended before you come back, it counts as a loss for you.
- Leaderboards. Your ratings are private unless you choose otherwise in Profile → Leaderboards. Choose Friends and your friends see your display name, ratings and number of rated matches on their friends leaderboard. Choose Everyone and any signed-in player can see them on the global leaderboard. Players you've blocked, or who have blocked you, never see you there. You can change or undo this at any time.
- Table chat. If the host has chat on, the messages you send at a table. Messages sent once a match has started are kept with that match, so the people who played in it can read them again in their match history. Messages sent in a lobby before the first match aren't kept. Guests can read chat but can't send messages.
- How hands were played. We keep anonymous records of how hands were played — the cards dealt, the bids, and the cards played, and whether each seat was a person or a computer player — to improve our computer players. They don't include your name, your account, or which match they came from.
- Friends. Your friend list, friend requests, players you've blocked, whether you're currently online (shown only to your friends), and whether you let friends join your lobbies. Someone who already knows your exact account email can look you up to send a friend request, which tells them that address has an account. Nobody can search by name or partial email.
- Notifications. If you allow notifications in the iPhone or iPad app, a push token for that device, which is how a notification finds it, and your choices in Profile → Notifications. Game invites a friend sends you are kept only while their table is open. The token is removed when you sign out on that device or delete your account.
- Credits and purchases. Your credit balance and a history of credits added and spent. If you buy credits, Apple handles the payment; we never see your card or billing details. We receive a record of the purchase (the product, the date and a transaction id) so the credits reach your account.
- Things you send us. Bug reports, game requests, reports about another player's display name or chat message, and the email address you give us if you sign up for updates or choose to include one with feedback. We use an updates email only to send occasional news about Deck to Go, with an unsubscribe link in every message, and a feedback email only to reply to you.
- Technical information. Our servers see your IP address when your device connects. We use it to limit abuse (for example, too many requests in a short time) and to diagnose problems. It isn't used to build a profile of you.
- On your device only. Preferences such as dark mode and card style, and your sign-in session, are stored on your device.
- What we don't collect. No location, contacts, photos, microphone, advertising identifier, or browsing activity on other sites or apps.
Playing as a guest needs no account. We record the name you type for that game in the match history of the people you played with, and, as for every player, an anonymous record of how the hands were played.
How we use it
- To create and secure your account, including two-factor authentication.
- To run games: matchmaking with invite codes, showing each player only what they're allowed to see, and resuming interrupted matches.
- To show your match history, stats, ratings, friends and credit balance, and the leaderboards you choose to appear on.
- To send the notifications you allow: friend requests, accepted requests and game invites.
- To deliver purchased credits and handle refunds that Apple processes.
- To send account emails you ask for, such as confirmation codes and password resets.
- To prevent abuse, such as offensive display names or repeatedly creating accounts for free credits.
- To fix bugs and decide which games to add, using what you send us.
- To improve our computer players, using anonymous records of how hands were played.
Who can see it
Other players see your display name, your seat and moves in games you share, the results of those games in their own match history, and the chat messages you send at their table. Messages kept with a match can be read only by the people who played in it. Your friends also see when you're online. If you choose to share your ratings, the players you share them with see your display name, ratings and number of rated matches on a leaderboard. Your email address is never shown to other players.
Service providers process information for us, only to provide their service:
- Database, account and sign-in hosting.
- Cloud servers that run games.
- Website hosting.
- Email delivery, for account emails.
- Push notification delivery (Expo, and then Apple to your device), which receives your device's push token and what the notification says, such as a friend's display name and the game they invited you to.
- In-app purchase verification, which receives your account id and purchase records.
- Apple and Google, if you choose to sign in with them, and Apple for payments.
Each is bound to use your information only to provide its service to us and to protect it at least as well as this policy describes.
We may also disclose information if the law requires it, or to protect players and the service from fraud or abuse.
Cookies and similar technologies
This website sets no cookies and uses no analytics or advertising tools. The browser version of the app keeps your sign-in session and preferences in your browser's local storage, which is strictly necessary for it to work, and nothing is used for tracking. If you choose Sign in with Apple or Google in the browser, their sign-in window is run by Apple or Google under their own privacy policies, and they may use their own cookies there. Because we don't use optional cookies, there is no cookie banner to accept.
Do Not Track. We don't track you across other websites or apps, so we treat every visitor the same whether or not their browser sends a Do Not Track or Global Privacy Control signal.
How long we keep it
We keep your account information for as long as you have an account. Chat messages kept with a match stay as long as that match's history does, unless you delete your account. In-progress match saves are deleted within about a day. Feedback and reports are kept while they're useful for improving the game.
Deleting your account
You can delete your account at any time in the app: Profile → Delete account. Deletion is immediate and permanent. It removes your profile, ratings, friends, credit balance and credit history, the chat messages you sent, your devices' push tokens, and purchase records we hold. If you used Sign in with Apple, it also disconnects Deck to Go from your Apple ID.
A few things remain, and here's why:
- Past matches in other players' history stay, so their history still adds up, but your name is replaced with "Deleted player".
- Anonymous records of how hands were played stay. They aren't linked to your account, so there's no way to pick yours out.
- A one-way hash of your email address is kept, not the address itself and not linked to any account. It lets you sign up again, but stops new accounts on the same address from collecting the free starting credits again.
- Purchase records held by Apple and our purchase-verification provider are kept under their own policies.
To ask about anything you've sent us, or anything else in this policy, email support@deck-to-go.com.
Security
Connections to our servers are encrypted. Access to account data is restricted, and our own administrative access requires two-factor authentication. You can add two-factor authentication to your own account under Profile. No system is perfectly secure, but we work to protect your information.
Children
Deck to Go isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
Where it's processed
We're based in the United States, and our service providers process information in the United States and other countries. If you use the Service from elsewhere, your information is transferred to the United States, relying on the safeguards our providers offer, such as the European Commission's standard contractual clauses.
If you're in the EU, EEA, UK or Switzerland
Jack Lewis is the controller of your information. We rely on these legal bases: performing our contract with you (running your account, games, friends and credits); our legitimate interests (security, preventing abuse and repeat free-credit signups, and improving the game, balanced against your rights); legal obligations (for example, records of purchases); and your consent (the optional updates email, which you can withdraw at any time). You have the right to access, correct, delete, restrict or object to our use of your information, and to get a copy of it. Email support@deck-to-go.com, and we'll respond within one month. You can also complain to your local data protection authority.
Your choices and rights
You can change your display name, turn two-factor on or off, control whether friends can join your lobbies, choose which notifications you get, and delete your account, all in the app. You can also turn notifications off for Deck to Go in your device's settings. Depending on where you live, you may have rights to access, correct, delete or get a copy of your information. Email support@deck-to-go.com to use them. We'll verify the request comes from the account holder, and we won't treat you differently for making it. We don't sell or share personal information for targeted advertising, as those terms are defined in U.S. state privacy laws.
Changes to this policy
If we change this policy, we'll update the date at the top of this page. If a change significantly affects how we use your information, we'll tell you in the app before it takes effect.