Privacy Policy

1. Who we are

Conflict Cards is a casual web game. This policy describes what information is processed when you use the site and how long it lasts. There is no sign-up and no user accounts.

2. What we do not collect

We do not ask for or verify:

• Real name, email, phone, or postal address
• Payment information (the service is free)
• Social logins or third-party identity providers

3. Data stored on your device

Your browser keeps a random identifier in local storage so the app can recognize your session when you create or join a room. You can clear it at any time via your browser settings; you will get a new id on the next visit.

We may store your interface language preference in a cookie so the UI loads in the language you chose.

4. Data processed while you play

While a room exists and you are in it, our servers may store:

• A display name you type (shown only inside that room to other players)
• Your session id (random uuid from your browser), linked to that room for game logic
• Game state: hands, scores, current round, deck configuration for that room
• If the host uses a custom deck, the uploaded JSON file (and a copy of its text on the room record) until the room is removed or the file is replaced

This information exists only to run the session. It is not used for advertising profiles, sold, or combined with off-site tracking for marketing.

5. After you leave the game

We do not keep a personal profile of you after play ends. There is no “account” to delete. When you leave a room, your player row is removed from that room. When the room is closed by the Card Bro, remaining player rows are cleared and the room record is removed from the database. When a room is deleted for inactivity, all related players and room data are removed, and any custom deck file in storage is deleted.

A short tombstone record (room code + reason + timestamp) may exist briefly after a room is removed so someone reopening an old link sees whether it was closed by the host or expired from inactivity, rather than a generic error. Tombstones are deleted automatically after about a day.

Our hosting provider (Convex) may retain routine backups or logs according to their own retention; those are not exposed through the game and are not used to rebuild player histories for this app.

6. Hosting & subprocessors

The application runs on infrastructure operated by third parties (e.g. Convex for backend and storage, and your deployment platform for the Next.js frontend). They process data only as needed to serve the site.

7. Children

The game may include mature humor depending on deck content. It is not directed at children under 13, and we do not knowingly collect personal information from children.

8. Contact

For privacy questions, contact the site operator via the LinkedIn link in the site footer.

9. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do.