Privacy Policy

This policy explains what Deuces Arena collects, why it is needed, and the choices available to players. The project does not sell personal information or use gameplay data for advertising.

Last updated September 3, 2026

Information we collect

Deuces Arena may process the following information when you use the service:

  • Google account information: name, email address, profile image, and a stable account identifier when you choose Google sign-in.
  • Profile and progression: display name, avatar choice, rating, games, placements, wins, Arena Coins, cosmetic unlocks, and equipped cosmetics.
  • Gameplay and replay data: rooms, seats, cards, legal-move context, selected moves, passes, turn history, results, replay labels, trades, and simulation evaluations.
  • Feedback: report text, report category, optional contact email, room code, browser user-agent information, and whether you choose to publish the report on the Community Feedback board.
  • Local device data: a guest identifier, hand-sort preference, and room recovery information stored in your browser. Authentication also uses secure session cookies.
  • Mobile notification data: an Expo push token and device platform when a signed-in app user chooses to enable table alerts.
  • Promotional widget data: normal network metadata, such as an IP address and browser information, may be processed by Ad Swap when its sandboxed lobby widget loads. Deuces Arena does not send account or gameplay data to the widget.

How we use information

Information is used to:

  • authenticate accounts and keep profiles available across devices;
  • run rooms, validate moves, reconnect seats, calculate results, and prevent abuse;
  • maintain ratings, match history, replays, earned currency, and cosmetics;
  • deliver opted-in room invitation and matchmaking alerts to the mobile app;
  • analyze game decisions through simulations and improve future coaching tools; and
  • investigate feedback, bugs, balance concerns, and service reliability.

Google account information is used only for sign-in, account identification, profile display, and the account features described above. Deuces Arena does not request access to Google Drive, contacts, messages, or passwords.

Public and shared information

Display names, ratings, game statistics, equipped cosmetics, and match summaries may be visible to other players or on public profile pages. Email addresses are not intentionally displayed on public profiles. Table chat is shared with players in that room and is not part of the persisted match-history schema.

When you explicitly choose public feedback, the report text, category, Deuces Arena display name, status, and any creator response are visible to anyone. Private feedback and contact email addresses are not shown on the public board. Public posts may be hidden for spam, harassment, hate speech, exposed personal information, or another policy violation.

Service providers process data only as needed to operate the app. Current infrastructure includes Google for authentication, Vercel for the web app, Render for realtime services, Neon for PostgreSQL storage, Expo for opted-in mobile notification delivery, and Ad Swap for the reciprocal indie-site promotion shown in the lobby. These providers may process normal network metadata such as IP addresses, request logs, device push tokens, and delivery receipts under their own policies.

Retention and security

Account, match, move, replay, cosmetic, and feedback records may be retained while they are needed to provide the service, maintain rankings, analyze gameplay, or resolve abuse and reliability issues. Temporary room and chat state may disappear when a room is removed or the realtime service restarts.

Deuces Arena uses HTTPS, server-authoritative move validation, signed realtime identity tokens, restricted production origins, and access controls intended to protect player data. No internet service can guarantee absolute security.

Your choices

You can play casual modes as a guest, sign out of Google, clear local browser storage, or stop using the service. Mobile table alerts are optional and can be disabled from the player profile. To request access, correction, or deletion of account information, submit a privacy request through the in-app feedback form and include an email address that can be used to verify the account.

Changes and contact

This policy may change as Deuces Arena adds features or providers. The date at the top will be updated when material changes are published. Privacy questions can be submitted through the feedback form available from the lobby.