Privacy Policy

Data stored on your device

Unfinished attempts, completed results, streaks, settings, reminder preferences, and an anonymous analytics identifier are stored in local browser storage. Clearing site data removes them. Because the beta has no accounts, these records do not automatically transfer to another browser or device.

Daily reminder notifications

Reminders are optional and require a direct permission request. For browser Web Push, the server stores the push endpoint and encryption keys required for delivery, a salted hash of the anonymous browser identifier, today’s Easy and Hard completion flags, and whether a reminder was sent or suppressed. Typed card names are not included.

At 8:00 PM Eastern, the server sends a reminder only when Easy, Hard, or both remain unfinished. Completing both suppresses the notification. Disabling reminders removes the browser subscription; when it is the final subscription for that anonymous identifier, associated reminder-completion flags are deleted.

The native Capacitor app uses device-local scheduled notifications. Those schedules and completion checks remain on that device and do not synchronize across devices.

Contact messages

When you use the contact form, the server stores the name and email address you choose to provide, the selected topic, the message, and the submission time. This information is used only to review the message, investigate a report, and respond when contact information is supplied.

Contact messages are available only through the protected administration dashboard and are normally deleted automatically after 180 days. Do not submit passwords, payment details, or other sensitive information.

Technical operations and security

The hosting provider and server may process basic request information such as IP address, browser headers, requested path, and timestamps to deliver pages, prevent abuse, and diagnose outages. The application uses IP addresses temporarily for in-memory rate limiting but does not place them in its analytics or contact-message database.

When the app has a technical error, it may store the error message, limited stack information, page path, app version, and request identifier. Error reports should not include submitted card names or account information because the beta has no accounts.

Advertising and cookies

Card Chain includes Google AdSense code and may display advertisements after Google approves and activates ad serving for the site. Third-party vendors, including Google, may use cookies or similar identifiers to serve, limit, personalize, and measure advertisements based on visits to this and other websites. Google and its partners may process device information, IP addresses, and advertising identifiers for fraud prevention, frequency capping, reporting, and ad selection.

Where required, a consent-management message will appear before advertising cookies or identifiers are used. Visitors will be able to manage available advertising choices. Information about how Google uses data on partner sites and how to control personalized advertising is available through Google’s advertising and privacy controls.

Browser signals and retention

Card Chain disables optional anonymous analytics when the browser sends Do Not Track. Essential local storage, security controls, contact processing, error reporting, and opted-in notifications are handled separately because they support requested features or service reliability.

Anonymous analytics are normally retained for up to 180 days, error reports for up to 90 days, and contact messages for up to 180 days. Notification subscriptions remain until disabled, expired, or rejected by the push provider.

Children and international visitors

Card Chain is a general-audience word game and is not directed specifically to children under 13. Do not use the contact form to submit personal information about a child. Privacy and advertising choices may vary by location, and additional consent controls may be shown where required.

Your choices and requests

You can disable analytics on this page, disable reminders in the game, clear local site data through the browser, or send a privacy request through the contact form. A reply may require enough information to identify the specific contact message or notification subscription involved.

Changes to this policy

This policy may be updated as the beta, advertising setup, hosting, or legal requirements change. The latest revision date is shown below. This plain-language policy is not a substitute for legal advice and should receive professional review before a broad commercial launch.