Privacy Policy

Information we collect

Deuces Arena may process the following information when you use the service:

• Google account information: name, email address, profile image, and a stable account identifier when you choose Google sign-in.
• Profile and progression: display name, avatar choice, rating, games, placements, wins, Arena Coins, cosmetic unlocks, and equipped cosmetics.
• Gameplay and replay data: rooms, seats, cards, legal-move context, selected moves, passes, turn history, results, replay labels, trades, and simulation evaluations.
• Feedback: report text, report category, optional contact email, room code, and browser user-agent information submitted with a report.
• Local device data: a guest identifier, hand-sort preference, and room recovery information stored in your browser. Authentication also uses secure session cookies.

How we use information

Information is used to:

• authenticate accounts and keep profiles available across devices;
• run rooms, validate moves, reconnect seats, calculate results, and prevent abuse;
• maintain ratings, match history, replays, earned currency, and cosmetics;
• analyze game decisions through simulations and improve future coaching tools; and
• investigate feedback, bugs, balance concerns, and service reliability.

Google account information is used only for sign-in, account identification, profile display, and the account features described above. Deuces Arena does not request access to Google Drive, contacts, messages, or passwords.

Public and shared information

Display names, ratings, game statistics, equipped cosmetics, and match summaries may be visible to other players or on public profile pages. Email addresses are not intentionally displayed on public profiles. Table chat is shared with players in that room and is not part of the persisted match-history schema.

Service providers process data only as needed to operate the app. Current infrastructure includes Google for authentication, Vercel for the web app, Render for realtime services, and Neon for PostgreSQL storage. These providers may process normal network metadata such as IP addresses and request logs under their own policies.

Retention and security

Account, match, move, replay, cosmetic, and feedback records may be retained while they are needed to provide the service, maintain rankings, analyze gameplay, or resolve abuse and reliability issues. Temporary room and chat state may disappear when a room is removed or the realtime service restarts.

Deuces Arena uses HTTPS, server-authoritative move validation, signed realtime identity tokens, restricted production origins, and access controls intended to protect player data. No internet service can guarantee absolute security.

Your choices

You can play casual modes as a guest, sign out of Google, clear local browser storage, or stop using the service. To request access, correction, or deletion of account information, submit a privacy request through the in-app feedback form and include an email address that can be used to verify the account.

Changes and contact

This policy may change as Deuces Arena adds features or providers. The date at the top will be updated when material changes are published. Privacy questions can be submitted through the feedback form available from the lobby.