CardYard Privacy Policy

This Privacy Policy explains how CardYard ("CardYard," "we," "us" or "our") collects, uses, and shares information when you visit https://www.cardyard.ai, use the CardYard iOS or Android app, or use any related products or services (collectively, the "Service").

1. Information We Collect

• Account Information: email address, display name, password (stored using strong hashing), and OAuth account identifiers for supported sign-in providers such as Google sign-in/OAuth and Sign in with Apple.
• Subscription & Payment Details: payment method tokens, billing address, and related metadata processed securely by Stripe® for web purchases; Apple transaction identifiers and subscription events for iOS purchases; and Google Play purchase tokens, product and base-plan identifiers, subscription state, and renewal or expiration data for Android purchases. CardYard never stores credit-card numbers.
• Usage Data: game sessions, prompts, cards you generate, feature interactions, logs, feedback, and quota counters (per account or IP) used to enforce free and premium limits.
• Room and Safety Data: Room nicknames, answers, clues, player-submitted prompts and drawing vectors are processed to run shared games. Safety reports may include a note, the content visible to the reporter, relevant Room and participant identifiers, and a saved drawing checkpoint. Rules acceptance and Room-scoped blocks are recorded to enforce safety controls.
• AI Generation Inputs: themes, custom theme text, selected play mode and relevant prompt context may be sent through OpenRouter to its selected AI providers to generate and check game content. Avoid entering private or sensitive information into custom themes or game prompts. Provider processing is subject to the applicable provider policies.
• CardYard in ChatGPT: if you use CardYard inside ChatGPT, ChatGPT sends our server your request (for example the theme, language and team names you chose) with an anonymized identifier that OpenAI assigns to you. We immediately turn that identifier, and the IP address of the connection, into one-way hashes with a secret key and use them only to enforce daily usage limits, which expire after about 24 hours. We do not receive your name, email address or conversation history, and this use is not linked to a CardYard account. Themes you enter are processed as described under AI Generation Inputs. Game results (theme preset, language, number of teams and rounds, how many cards were played and guessed) and card reports (the card text and the reason) are recorded without names or user identifiers.
• Cookies & Device Data: IP address, browser/OS type, device identifiers, language, referrer URLs, and analytics cookies.
• Advertising Data: on eligible free web pages, Google AdSense may process IP address, cookie/device identifiers, approximate location, ad interactions, and visible page context, including ad-safe gameplay content, to select, deliver, limit, and measure ads. On iOS, advertising measurement may include app launches, game views, game starts, paywall views, purchase/subscription events, app version/build, product identifiers, price, currency, and device or advertising identifiers where permitted by Apple’s App Tracking Transparency settings. CardYard does not include email addresses, raw user IDs, or custom theme text in AdSense request parameters, and does not load AdSense in Premium or mature gameplay contexts.
• Push Notification Data: if you enable notifications on a supported app, we may store a device push token, package or bundle identifier, app version, locale, environment, and notification permission status so we can deliver and troubleshoot CardYard announcements. Android push registration remains inactive unless the feature is configured and enabled.
• Age Confirmation: a yes/no response confirming you meet the required age before accessing mature content. The iOS app uses a 17+ confirmation and the Android app uses a 16+ confirmation. Android Truth or Drink also processes an optional self-declaration that you are at least 18 and have reached the legal drinking age where you are before enabling drinking mode. Alcohol-free play remains available without this declaration. We do not collect your birthdate for these confirmations.

2. How We Use Information

• Provide, operate, and personalize the Service;
• Apply self-declared age eligibility controls for mature content and drinking mode;
• Process payments, manage subscriptions, and prevent fraud;
• Process game content, explicit reports, service diagnostics and quota counters to run games, moderate reported content, troubleshoot failures and enforce free/premium limits, with retention described below;
• Perform analytics, monitor performance, and troubleshoot issues;
• Measure which ads and campaigns help people discover CardYard, improve ad relevance, and understand subscription funnel performance;
• Send transactional emails (receipts, critical updates) and marketing emails (you can opt out at any time);
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Bases (EEA/UK)

We process personal data when necessary to (a) perform our contract with you, (b) pursue our legitimate interests (e.g., improve and secure the Service), (c) meet legal obligations, or (d) with your consent (e.g., marketing emails).

4. Sharing of Information

We share information only with:

• Stripe for web payment processing;
• Apple for iOS in-app purchases, subscription management, Sign in with Apple, refunds, push notification delivery, and App Store transaction validation;
• Google for Google sign-in/OAuth, Google Play billing and subscription validation, Android push delivery when enabled, analytics, and eligible web advertising;
• OpenAI, when you use CardYard inside ChatGPT: the prompts and results CardYard returns appear in your ChatGPT conversation and are handled by OpenAI under its own terms and privacy policy;
• Supabase for authentication, account records, database storage, and serverless functions;
• PostHog for optional product analytics across web and apps, and sampled, masked website recordings, hosted in the United States;
• OpenRouter and its selected AI providers for processing themes and prompt context to generate or check game content;
• Invited Room participants, who can see nicknames and the answers, clues, prompts or drawings shared with them during gameplay. Safety reports are available to authorized CardYard moderators for review and response;
• Analytics providers (e.g., Google Analytics) for usage insights;
• Advertising partners (including Google AdSense on eligible free web pages, and Meta or TikTok for iOS app install and campaign measurement), subject to applicable consent and platform controls;
• Service providers who process data on our behalf under strict confidentiality;
• Authorities or third parties when legally required or to protect rights, safety, or property.

We do not sell or rent personal information.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to recognize you, remember preferences, perform analytics, deliver and measure advertising on eligible free web pages, and improve the Service. Google’s consent-management message provides required privacy choices where applicable. AdSense may load on eligible free editorial and ad-safe gameplay pages. Premium users do not receive AdSense ads, and CardYard does not load AdSense on room, checkout, account, legal, or mature-content surfaces. On iOS, if Apple requires tracking permission, CardYard shows the App Tracking Transparency prompt before using data for tracking. You can deny or change that permission in iOS Settings, and the app remains usable if you decline. You can also change web advertising privacy choices from the privacy controls presented by Google. Disabling cookies may limit some features.

Optional Product Analytics

If you opt in, CardYard and PostHog collect selected usage events, such as meaningful play, offer views, signup, verified purchases and first Premium use. A server-generated random identifier connects consenting signed-in activity across devices. We do not send names, email addresses, authentication IDs, custom themes, answers, player names or drawings to PostHog. Your choice applies to this browser or app installation and also controls optional first-party behavioral analytics. Google Analytics runs automatically on eligible public website pages unless you disable analytics using the controls below or your browser sends Do Not Track or Global Privacy Control. There is no automatic analytics popup. Choosing No thanks below disables Google Analytics as well as PostHog on this browser. Existing acceptance is renewed before enabling account linking. Advertising choices remain separate.

On the website only, a small sample of consenting sessions has masked replay enabled. Text and inputs are masked; account, checkout, authentication, Room, admin, contact and legal pages are never recorded. Sanitized lifecycle events can still be collected from signup, checkout and Room flows. Do Not Track and Global Privacy Control disable optional website analytics. Change this browser’s choice below, or use Usage analytics in the mobile app’s Settings.

PostHog is hosted in the United States. Our plan retains analytics for one year and recordings for 30 days. Withdrawal stops future optional collection and clears pending events on that device. Account deletion also requests deletion of linked PostHog events and recordings; provider processing may take additional time. Billing, entitlements, security and essential service diagnostics remain separate. Contact support to request deletion of earlier anonymous data.

6. Data Retention

Account data is retained while your account is active. Routine custom themes and generated content are no longer copied into general analytics. Gameplay caches and explicit reports or support records retain content for their respective purposes. Historical records are not bulk-deleted by this tracking change. Delivery diagnostics are kept for up to 90 days; service logs follow their existing retention policies. Upon a verified deletion request, we will delete or anonymize personal data within 30 days. Delete your account from Profile on the website or Settings > Account > Delete Account in the iOS or Android app. Account deletion immediately cancels linked Stripe subscriptions and stops collection of unpaid subscription bills. No automatic refund is issued. Apple and Google Play subscriptions must be canceled separately in their store settings. Limited billing history and records required for legal, security, or fraud-prevention purposes may be retained, including Apple, Google Play, and Stripe records held by the applicable payment provider.

7. Your Rights

Depending on your location, you may request to access, correct, delete, export, object to, or restrict processing of your personal data. California residents may also request information about categories of personal information collected and opt out of any "sale" or "sharing" (we do not sell personal information). To exercise deletion rights, use the in-app flow or follow the CardYard account deletion instructions. For other requests, contact CardYard support.

8. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we learn that such data has been collected, we will delete it.

9. Security

We use industry‑standard measures, including encryption in transit, role‑based access controls, and regular backups, to protect personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email (if you have an account) or by posting a prominent notice on the Service. The "Last updated" date indicates when updates become effective.

11. Contact Us

Questions or requests? Use the CardYard contact page.