Skip to content
R
RummyDen

Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains how RummyDen ("RummyDen", "we", "us") collects, uses, and protects your information when you use rummyden.com and our related apps (the "Service"). RummyDen is a free, social card-game service for private play between friends. There is no real-money play, deposit, wager, or cash settlement of any kind.

Who we are

RummyDen is the data controller for the personal data described here. If you have any questions or requests, use the public RummyDen contact form.

Information we collect

  • Account information: a display name, email address and password hash if you use email sign-in, or your Google email address and profile photo if you use Google sign-in. Guest play uses a display name and session identifier. We do not store email passwords in plain text.
  • Gameplay data: the rooms you create or join, rounds, scores, chat messages, and in-game preferences.
  • Technical & usage data: IP address, browser/user-agent, device type, approximate region, and interaction events used for analytics, security, and abuse prevention.
  • Support & feedback: messages, contact details, and any screenshots you choose to send us through the feedback form.

How we use your information

  • To operate the games, host rooms, keep scores, and sync play between friends.
  • To create and secure your account and prevent cheating, spam, and abuse.
  • To understand product usage and improve the Service (analytics).
  • To respond to your feedback and support requests.

Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your preferences, and measure usage. You can clear or block cookies in your browser settings, though some features (like staying signed in) may stop working.

Optional analytics preferences

With your permission, RummyDen uses PostHog to measure steps such as opening a room, taking a seat and completing a round. These events use a pseudonymous browser identifier; we do not send your account ID, name, chat, cards, room code or invite URL in these events. Session recording and automatic interaction capture are disabled.

Rejecting optional analytics does not affect your ability to play. You can change this choice here at any time. This preference controls PostHog and the first-party entry measurement below, not essential gameplay records or infrastructure logs.

Optional analytics: not allowed on this browser.

First-party entry measurement

When you allow optional analytics, our own service can record one entry event per page load. It uses a randomly generated browser identifier stored in local storage, the landing path, referrer information and a coarse campaign label. If you are signed in, your session identifier is hashed before being attached to the event. These are pseudonymous identifiers, not anonymous data. We use this measurement to compare acquisition and return visits. It is not used for advertising or cross-site tracking. Private room paths are generalized and referrer queries are removed before transmission.

Rejecting optional analytics stops new entry measurement and removes its browser identifier. Clearing browser storage also removes it; accepting analytics on a later visit can generate a new one. Privacy questions or deletion requests can be sent to the contact listed below.

Advertising and subscriptions

Advertising is disabled and Plus subscriptions are currently unavailable. There is no active paid offer. Our focus is free play supported by advertising after approval and appropriate consent setup. The optional analytics control above manages usage measurement; it is not an advertising consent mechanism.

How we share information

We do not sell your personal data. We share data only with service providers that help us run the Service, under contract and only as needed:

  • Google — optional sign-in and web fonts.
  • Hosting & infrastructure — Cloudflare, Fly.io, Neon, and similar providers that host the app and database.
  • PostHog — optional usage events when you allow analytics. Cloudflare also provides cookieless traffic measurement separately from this preference.

We may also disclose information if required by law or to protect our rights and users' safety.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent.

  • EEA/UK (GDPR): our legal bases are performance of our service to you, our legitimate interests (security and service operation), your consent for optional analytics, and legal obligations.
  • California (CCPA/CPRA): we do not sell personal information; you may request access to or deletion of your data.

To exercise any right, use the contact form and describe your privacy request. Include an email if you would like a reply. Do not send a password or payment information.

Data retention

We keep account and gameplay data while your account is active and for a reasonable period afterwards for security and legal purposes, then delete or anonymize it. You can request deletion at any time.

Children

RummyDen is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

International transfers

We operate globally, so your data may be processed in countries other than your own, including the United States, with appropriate safeguards in place.

Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, provide a more prominent notice.

Contact

Contact RummyDen — the public form works without an account.