Privacy
This is a small site for playing rummy with friends. It keeps what it needs to run the games and nothing else.
What is stored about you
- Your account: the first name and the profile picture Google hands over when you sign in, your e-mail address, and when you last signed in. There is no password here: Google does the signing in, and we never see it.
- Your games: which games you joined, the cards you were dealt and still hold, and every move you made, with the table as you left it and when.
Your name and picture are visible to the other players at your table. Your name also appears in the list of games on the front page, which anyone can read without signing in. Your e-mail address is shown to nobody but you: it is only used to recognise you when you sign in again.
If you switch on turn notifications, your browser gives us an address to send them to and two keys to encrypt them with. We store those three values against your account, one set per device, along with when we last sent one. They are the browser's, not ours: they only let us send that browser a message it can read, and they cannot be used to identify you anywhere else or to read anything back. Switch the notifications off, or clear the site's data, and the record goes.
If you sign in from an app (the headset table, say), it gets a key of its own to call the site with. We keep a fingerprint of that key, the name the app gave the device, and when it was last used, so that signing out of the app cancels the key. Signing a device in with a code keeps the code for ten minutes at most, until the device has collected its key.
Cookies
- A session cookie lasting a week, so the site knows it is still you between pages.
- A sign-in cookie lasting a month, so that you are still signed in after the session is gone. Signing out removes it.
- A live-updates cookie lasting a day, which lets the page you are on hear about moves as they happen. It is only sent to the updates feed.
There is no advertising, no analytics and no tracking of any kind.
In your browser
The display options you pick from the bar (the theme, half cards, tapping instead of dragging) and the order you sort your hand in are kept in your browser's own storage. They never leave it. The site also keeps a copy of a small offline page, so that you get a message rather than an error when the connection drops.
This site sends no e-mail at all.
Other people
Your data is not sold, shared or passed to anyone else. Two outside services are involved: Google, when you sign in, and the push service of your browser's maker, when we tell you it is your turn. The push service carries the message but cannot read it, as it is encrypted for your browser alone. The site runs on its own server; the web server keeps ordinary access logs, which include IP addresses, and error logs are kept to fix faults.
Removing your account
Finished games have to keep showing who played them, so accounts are not deleted on request from the site itself. If you want your name, picture and address removed outright, ask and we will do it; the games you played will stay, without you named on them.
Getting in touch
For anything on this page, or to have your data removed, contact Massimiliano Arione.