Privacy Policy

Effective: 6 September 2026 · replaces the 20 August 2026 version · DRAFT — pending legal review

CardsLobby (“we”) runs free online card games. This policy explains what we collect and why. The short version: you play as a guest, your game data stays on your device, and the games are supported by advertising.

What we collect

There are no accounts. You play instantly as a guest — no sign-up, no sign-in, no password — so we never ask for your name, email address or any other personal detail.

Your profile, coins, settings and progress are stored on your own device (browser local storage, or app storage on Android). We do not receive a copy.

Advertising

CardsLobby is ad-supported: the websites reserve advertising space, and ads are served by Google AdSense once active. Google and its certified partners may use cookies or similar identifiers to serve and measure ads. Depending on your choices (below), ads are either personalised or non-personalised.

Advertising appears on the websites only — never inside a hand of cards, and the mobile apps currently show no advertising.

Learn more in how Google uses information from partner sites.

Your consent choices

If you are in the EEA, the UK or Switzerland, a consent banner (Google’s certified consent management platform) asks for your choices before any advertising cookies are used. You can decline personalised ads and still play everything — you may then see non-personalised ads. You can change your choices any time via the “Privacy settings” link in the footer.

Cookies

We set no cookies of our own — there is nothing to log in to. Advertising cookies are set only by Google as described above, and only after consent where consent is required. Our analytics (Cloudflare Web Analytics) is cookieless.

What our servers see

Like any website, our hosting provider keeps short-lived technical logs of requests — IP address, timestamp and the route requested — used only to keep the service running and secure. We do not build profiles from them.

Who we share it with

The providers needed to run the service: Railway (hosting and database), Cloudflare (domain, network, cookieless analytics and email forwarding) and Google (advertising, as described above). We never sell your data.

Your choices

Because we hold no account for you, there is nothing for us to look up, export or delete. To remove your game data, clear your browser’s site data or uninstall the app. To change ad-consent choices, use the “Privacy settings” link in the footer.

Children

The games are not directed at children under 13, and since we collect no personal data we do not knowingly hold any child’s information. Ads are served under Google’s policies for family safety.

Changes

If our data practices change — for example if accounts or new ad partners are introduced — we will update this policy before that change ships.