Privacy Policy
This Privacy Policy explains how RummyDen ("RummyDen", "we", "us") collects, uses, and protects your information when you use rummyden.com and our related apps (the "Service"). RummyDen is a free, social card-game service for private play between friends. There is no real-money play, deposit, wager, or cash settlement of any kind.
Who we are
RummyDen is operated by Adaptive Digital Studio LLC, a Texas limited liability company, which is the data controller for the personal data described here. If you have any questions or requests, use the public RummyDen contact form.
Information we collect
- Account information: a display name, email address and password hash if you use email sign-in, or your Google email address and profile photo if you use Google sign-in. Guest play uses a display name and session identifier. We do not store email passwords in plain text.
- Gameplay data: the rooms you create or join, rounds, scores, chat messages, and in-game preferences.
- Technical & usage data: IP address, browser/user-agent, device type, approximate region, and interaction events used for analytics, security, and abuse prevention.
- Support & feedback: messages, contact details, and any screenshots you choose to send us through the feedback form.
How we use your information
- To operate the games, host rooms, keep scores, and sync play between friends.
- To create and secure your account and prevent cheating, spam, and abuse.
- To understand product usage and improve the Service (analytics).
- To respond to your feedback and support requests.
Cookies and similar technologies
We use cookies and local storage to keep you signed in, remember your preferences, and measure usage. If ads are enabled, Google and other advertising vendors may also set cookies; see Advertising below. You can clear or block cookies in your browser settings, though some features (like staying signed in) may stop working.
Optional analytics preferences
With your permission, RummyDen uses PostHog to measure steps such as opening a room, taking a seat and completing a round. These events use a pseudonymous browser identifier; we do not send your account ID, name, chat, cards, room code or invite URL in these events. Session recording and automatic interaction capture are disabled.
Rejecting optional analytics does not affect your ability to play. You can change this choice here at any time. This preference controls PostHog and the first-party entry measurement below, not essential gameplay records or infrastructure logs.
Optional analytics: not allowed on this browser.
First-party entry measurement
When you allow optional analytics, our own service can record one entry event per page load. It uses a randomly generated browser identifier stored in local storage, the landing path, referrer information and a coarse campaign label. If you are signed in, your session identifier is hashed before being attached to the event. These are pseudonymous identifiers, not anonymous data. We use this measurement to compare acquisition and return visits. It is not used for advertising or cross-site tracking. Private room paths are generalized and referrer queries are removed before transmission.
Rejecting optional analytics stops new entry measurement and removes its browser identifier. Clearing browser storage also removes it; accepting analytics on a later visit can generate a new one. Privacy questions or deletion requests can be sent to the contact listed below.
Advertising
RummyDen does not show ads yet. We plan to show ads from Google AdSense only on public pages such as our guides, tools and home page — never in game rooms, at tables, in chat or on account screens.
When ads are enabled, third-party vendors, including Google, will use cookies to serve ads based on your prior visits to RummyDen or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to RummyDen and/or other sites on the Internet.
You can opt out of personalised advertising in Google Ads Settings. You can also opt out of some other vendors' use of cookies for personalised advertising at aboutads.info/choices or, in Europe, youronlinechoices.eu. Google explains how it uses information from sites that use its services.
Visitors in the European Economic Area, the UK or Switzerland will be asked for consent through a Google-certified consent message before any personalised ads are shown to them. The optional analytics control above covers usage measurement only; it is not an advertising consent.
How we share information
We do not sell your personal data. We share data only with service providers that help us run the Service, under contract and only as needed:
- Google — optional sign-in and web fonts.
- Hosting & infrastructure — Cloudflare, Fly.io, Neon, and similar providers that host the app and database.
- PostHog — optional usage events when you allow analytics. Cloudflare also provides cookieless traffic measurement separately from this preference.
- Google AdSense (only once ads are enabled) — advertising cookies, as described under Advertising.
Each provider publishes its own privacy policy: Google, PostHog, Cloudflare, Fly.io and Neon.
We may also disclose information if required by law or to protect our rights and users' safety.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent.
- EEA/UK (GDPR): our legal bases are performance of our service to you, our legitimate interests (security and service operation), your consent for optional analytics, and legal obligations.
- California (CCPA/CPRA): we do not sell personal information; you may request access to or deletion of your data.
To exercise any right, use the contact form and describe your privacy request. Include an email if you would like a reply. Do not send a password or payment information.
Data retention
We keep account and gameplay data while your account is active and for a reasonable period afterwards for security and legal purposes, then delete or anonymize it. You can request deletion at any time.
Children
RummyDen is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.
International transfers
We operate globally, so your data may be processed in countries other than your own, including the United States, with appropriate safeguards in place.
Changes to this policy
We may update this policy from time to time. We'll change the "Updated" date at the top of this page and, for significant changes, provide a more prominent notice.
Contact
Contact RummyDen — the public form works without an account.