Privacy Policy.

Introduction

SpadeTown is a spades game, scorer and card-night companion for iPhone, iPad and Android, made by Judedon Ltd ("we", "our" or "us"). This policy explains what personal data SpadeTown collects, why, where it's kept, how long, and your rights.

In short: you can play without giving us anything. Every install starts with an anonymous account that has no name and no email address. We use first names only, we never ask for your contacts or your location, and our usage stats are off until you switch them on. We show no ads, we don't track you across other apps, and we never sell your data.

Data we collect

Your account

The first time you open SpadeTown it signs you in anonymously and invisibly, through Firebase Authentication. That gives your phone an account ID and nothing else. You can stay that way for good: playing the robots, keeping score and joining a friend's table never need more.

If you choose to sign in, so that your purchase and your tables follow you to another phone, you can use Apple, Google, or a sign-in code we email you. We receive your email address and, if Apple or Google share it, your name. With Apple you can hide your address behind a private relay address, and SpadeTown never shows it. For the emailed code, we keep only a scrambled (hashed) copy of the code and the address, with a short expiry (15 minutes), and delete it when it's used or has expired. We don't ask for a password, and SpadeTown never sets one.

Names

SpadeTown uses first names only. The name you give at a table, on a score sheet or in the cookout board is whatever you type, up to a short limit, and we ask you to use a first name or a nickname.

Only on your phone

Your games against the robots, your record and Crew, your score sheets, your rules cards, today's deal, your settings and how many free games you've used stay on your phone. They don't go to our servers. "Export your data" in Settings makes a file of them for you. If you delete the app they go with it.

Friends' tables

When you host or join a friends' table, our server keeps the table so everyone sees the same game: the host's first name, the first names of the people seated, the seats, the rules card the host chose, the bids and the cards played, the game's totals and the preset table-talk lines sent. Each person's own hand is readable only by that person: not by the host, not by their partner, and not by the robots, who never see a hidden card. The table also holds an invite code. We never show a hand's deal number until the hand has ended, when you can check it against the lock we published before the cards were dealt.

Call the table. If you choose to share a way to be reached (a FaceTime or WhatsApp contact), it is shown only to the other people seated at that table, never on the invite page. You can take it off at any time, and it's deleted when you leave or when the table ends. The call itself happens in FaceTime or WhatsApp, not through us.

How long. A live table's records are kept for a day after its last move. A table at your own pace is kept until it has been idle for 14 days. When a table ends, its hands and invite code are deleted at once and the rest is deleted within a day. After that, they are removed automatically (the deletion can take up to a further day).

Live boards and shared rules cards

If you share a score sheet's live board, anyone with its link or QR code can see the team names, the players' first names, the scores, the bids and the last hand, with no sign-in. It closes a day after its last update, and you can end it sooner. If you share a rules card by link, the card's settings and your first name are stored with it and anyone with the link can read it. It stays until you stop sharing it or delete your account.

Cookout and card night events

When you run a who-got-next line, a bracket or a most-points night, the event (its name, the team names and first names, the settings and the results) is stored so the TV board and the people joining by QR code can see it. Anyone with its link or join code can read it. It closes a week after its last update and is then deleted.

Notifications

If you allow notifications, we store your device's push token, its type (iPhone or Android), and when it was last refreshed, so we can tell you it's your turn at a friends' table. A reminder names the host's first name and never a card. A token is removed when the push service reports it's no longer valid, and otherwise expires 60 days after the app last refreshed it. You can turn notifications off in your phone's settings or in the app.

Purchases

SpadeTown, for good is bought through the Apple App Store or Google Play. We never see your card or payment details. RevenueCat checks the purchase with the store, and our server asks RevenueCat to confirm it before unlocking anything, so a purchase can't be faked on a phone. RevenueCat knows you only by your account ID. We keep a small record linked to that ID: whether SpadeTown is unlocked, since when, which store, whether it came by Family Sharing, whether it was refunded, and when we last checked. We also count how many friends' tables an account has hosted, for the free taste.

Usage stats

Only if you switch on "Share usage stats" in Settings (it's off until you do), the app tells PostHog which screens you open and what you do, such as starting or finishing a game, with your account ID, device model, operating system and app version. Screens are recorded by name, never with the ids of your tables. These stats only ever hold counts and choices. They never include a name, an email address, what you type, a card or a hand. Switch it off and the app stops sending at once.

Crash and error reports

Crash reports go to Sentry whether or not you share usage stats, because they're how we find and fix faults for everyone. A report holds your account ID, your device model, operating system and app version, what went wrong and where, and the steps just before it. It never holds your name, email address, a card or a hand.

Support reports

If you use Report a problem or Suggest a feature, we receive what you wrote, the topic, and some context to help us find the cause: the app version and build, your device, operating system and language, your account ID, whether you've bought SpadeTown, the screen you were on, the rules card in use, the last few error codes, and the id of the last crash report. You can add a reply address (your account's address is filled in if you have one). The report goes to the studio's inbox in Studio HQ and to our support mailbox, and we send an acknowledgement to your reply address. Reports are kept on your phone until they're sent, including after a restart.

What we never collect

• Your contacts. SpadeTown never asks for them and never uploads them.
• Your location, precise or approximate.
• Advertising IDs. There are no ads.
• Card or payment details. The stores handle those.

How we use your information

We use it to run your account; keep friends' tables fair and working; show the live board, rules cards and events you share; send the turn reminders you've allowed; unlock and restore SpadeTown, for good; find and fix crashes; understand which features are used, if you've said yes; and answer your support messages.

Under UK and EU data protection law, we rely on: our contract with you (your account, friends' tables, the live board, events and your purchase); our legitimate interest in keeping the app working and safe (crash reports, throttles that stop abuse); and your consent (usage stats, notifications and the contact you choose to share, any of which you can withdraw at any time).

We don't show ads, we don't sell your data, and we don't use it to track you across other companies' apps or websites.

Where your data is kept

Your account, friends' tables, live boards, shared rules cards, events and purchase record are stored in Google Firebase (Firebase Authentication and Cloud Firestore) in the United States (the nam5 multi-region), and our server code runs in Google Cloud's us-central1 region. Usage stats (PostHog) and crash reports (Sentry) are stored in the European Union. Support reports are also held in Studio HQ, our own inbox, and our mail. Sign-in codes and support emails are sent through Resend. When data moves outside the UK or EU, these providers protect it with the safeguards the law requires (such as standard contractual clauses). We use appropriate security measures against unauthorised access, change, disclosure or destruction of your data.

Third-party services

Each has its own privacy policy:

• Firebase and Google Cloud (Google): sign-in, database and server code
• Sign in with Apple and Google Sign-In: if you choose them
• Resend: sign-in code and support emails
• Expo, Apple Push Notification service and Firebase Cloud Messaging: delivering turn reminders
• RevenueCat, the Apple App Store and Google Play: purchases
• PostHog (EU): usage stats, only if you switch them on
• Sentry (EU): crash and error reports
• FaceTime and WhatsApp: only if you tap Call the table, and the call is theirs

How long we keep it

• Account: until you delete it.
• Sign-in codes: 15 minutes, or until used.
• Friends' tables: as above (a day for a live table, up to 14 days idle at your own pace, a day after it ends).
• Live boards: a day after their last update. Events: a week. Shared rules cards: until you stop sharing them or delete your account.
• Push tokens: until the push service rejects them or 60 days after their last refresh.
• Purchase record: our copy until you delete your account. Apple or Google, as the seller, and RevenueCat keep the purchase itself, linked only to your account ID.
• Support reports: until you delete your account. The copy in our support inbox is kept as long as we need it to help you; ask us and we'll delete it.
• Usage stats and crash reports: for a limited time set by PostHog and Sentry, then deleted.

Deleting your account

You can delete your account at any time in the app (Settings → Account → Delete account). If your account has an email address or a way in, we ask you to sign in again first, so a borrowed phone can't delete it. You can also follow the steps on our delete account page, or email support@judedon.com from the email address on your account.

Deleting removes your sign-in and any code waiting for your address, the live boards and rules cards you shared, our record of your purchase, the phones registered for notifications and the reports you sent from the app, and, if you used Apple, we revoke the token we hold for it. We email you to confirm. Anything of yours at a friends' table, event or on a live board that others can see ends with its own timetable above. Apple or Google and RevenueCat keep the purchase itself, linked only to an account ID that no longer has a name or address. Deleting your account doesn't touch your purchase: it stays with your store account, and Restore purchase brings it back on a new account. Everything on your phone goes when you delete the app.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy, and restrict or object to how we use it. To use any of these rights, email support@judedon.com. If you're in the UK, you can also complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority.

Children

SpadeTown is not intended for children under the age of 13, and we don't knowingly collect personal data from children under 13.

Independence

Independent. Not affiliated with any spades league, tournament, publisher or app.

Changes to this policy

We may update this policy. We'll post the new version on this page and change the "Last updated" date; if a change is important, we'll tell you in the app.

Contact us

• Email: support@judedon.com
• Website: www.judedon.com