Privacy Policy

This Privacy Policy explains what information Shuflr (“we”, “us”), available at shuflr.club, handles when you use the site, and the choices you have. You may play as a guest. Creating an account is optional and is used to save account-owned data across devices.

1. Information we handle

• Guest identity. We set an opaque, random guest credential in an HttpOnly cookie so that reconnecting players return to the same seat. The raw credential is not stored in our database; only a one-way hash is stored when the account database is enabled.
• Account identity. If you choose to sign in, Clerk processes your Google or email-code authentication. Shuflr stores Clerk’s user identifier, not your Google password, email password or OAuth tokens.
• Display name, Player ID, avatar and preferences. Guests keep these in browser local storage. Signed-in players may sync their display name, unique changeable Player ID, avatar, felt, card-back, sound and gameplay preferences to Shuflr’s database. Club organizers see the Player ID on membership requests.
• Saved setups and entitlements. Signed-in players may save game configurations. We also store server-issued access entitlements, including Game Night Pass and Club access. Browsers cannot grant entitlements to themselves.
• Billing records. If you buy a pass or Club subscription, we store the product, price, currency, payment or subscription identifiers, payment status, billing period and entitlement expiry. Paddle processes payment-method details; Shuflr does not receive or store your full card, bank-account or UPI credentials.
• Live game data. Temporary tables, hands, scores and table chat exist in server memory while a table is live and are removed after the room expires. Saving a setup does not save the room’s chat or private cards.
• Club history. Club games, ledgers, logs, privacy-filtered hand replays and derived stats are retained for Club members. If the subscription becomes inactive, that Club history is immediately locked, kept inaccessible for two months for renewal, and then deleted with the Club if it remains inactive.
• Technical logs. Like almost every website, our server may record standard access information (IP address, browser type, requested page, timestamp) for security and to keep the service running. These logs are routine, short-lived and not used to profile you.

2. Cookies and local storage

Shuflr does not use its guest cookie for advertising or cross-site tracking. We use an HttpOnly guest cookie for secure reconnection and local storage for device preferences. Clerk may use necessary cookies to keep signed-in sessions secure. Clearing site data signs the device out and removes its local guest credential and preferences.

3. Payments

Payments are processed by Paddle, which acts as merchant of record. Checkout sends Paddle the information needed to process and authenticate your payment. Paddle handles that information under its own privacy policy. We receive payment status and reference identifiers so we can activate access, reconcile charges, prevent duplicate fulfilment, and handle support or refund requests.

4. Advertising and third-party cookies

To keep Shuflr free, we may display advertising served by third-party partners, including Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info.
• For more on how Google uses data from sites that use its services, see policies.google.com/technologies/partner-sites.

5. Analytics

Shuflr does not currently run third-party analytics. If that ever changes, this policy will be updated first.

6. What we never do

• We do not sell, rent or trade any information.
• We do not require registration, an email address or a phone number to join ordinary private games.
• Game chips are always fictional play money and cannot be purchased or cashed out.

7. Children

Shuflr is a free game site with no real-money element, but it is not directed at children under 13, and we do not knowingly collect personal information from them.

8. Your choices

• Use the account panel to download a copy of your Shuflr profile, preferences, saved setups and entitlements.
• Clear your browser’s site data to remove the device’s local preferences and guest credential.
• Email us to request correction or deletion of account data.
• Use the advertising opt-outs linked above to control ad personalisation.
• Email us with any privacy question or request.

9. Changes to this policy

If we change this policy, the new version will be posted on this page with an updated date at the top.

10. Contact

Questions about this policy: dev@shuflr.club, or see the contact page.