PRIVACY & ADS.

THE PRACTICAL VERSION

Every board is private from other players. A game host can view all cards and marks for management. Other players see a name and percentage only if you choose public progress. A post-game card reveal requires separate opt-in.

Guests use a display name and recovery phrase, stored as a one-way hash. Registered users provide an email and hashed password. Game-announcement email requires explicit opt-in and a verified address. Password recovery and verification emails are transactional. We use Resend to deliver verification, password-reset and opted-in host emails; OneSignal is only used for optional browser push. Web push subscriptions are registered for individual games only after opt-in and can be disabled through the game page. Resend processes recipient email addresses and message delivery information; OneSignal processes push subscription identifiers and push delivery data. Text invitations open your own device’s native messaging app; Square Riot never sends or stores SMS messages or recipient phone numbers.

Finished games are scheduled for deletion after the site retention period (default 180 days). Unstarted abandoned lobbies can also be deleted after 180 days. Cards reused in other games may be retained as anonymized board layouts until those games expire. Accounts can be deleted from the Account page; guest data can be erased from a game under your privacy settings.

Topic suggestions and chat may be moderated by hosts or site admins. You can report inappropriate material from a game. We do not use personal chat data to train AI.

AD SETTINGS

H5 game ads are optional, off by default, and only enabled if the site has access to Google's H5 program. If enabled, the site currently uses an opt-in in-app switch. A consent management platform may additionally be needed for launch in regulated regions.

Your current choice: H5 ADS DISABLED.

Operator: replace this starter privacy notice with legal language for your deployment, disclose analytics/cookies and configure an appropriate consent management platform before activating personalized ads.