Privacy Policy

This policy explains what information Pocket Birds ("we", "us") collects when you play, how we use it, and the choices you have. Pocket Birds is a free online card game run by Kevin Shaffer-Morrison, an individual. You can reach us at ksm@supabase.io.

1. Information we collect

If you sign in with Google

• Your Google account name, email address and profile picture link, as provided by Google. We ask Google only for basic profile information (the standard "openid", "email" and "profile" scopes).
• We never receive your Google password, and we do not access your Gmail, Google Drive, contacts, calendar or any other Google data.
• We show only your name to other players. We do not show your email address or picture to them.

If you play as a guest

• The display name you type. We create an anonymous account for you that has no email address and no password.

Gameplay information

• The games you create or join (including each game's join code), which players are in them, your moves, the state of the game and the game feed. Other players in the same game can see your display name and your moves.

Technical information

• Sign-in session tokens, stored in cookies in your browser so that you stay signed in.
• Standard request information, such as your IP address, browser type and the pages requested. Our hosting and database providers process this to deliver the service, keep it secure and diagnose problems.
• A small preference stored in your browser (for example, whether you switched on in-game hints).

We do not collect payment details, precise location or your contacts. We do not use advertising or analytics trackers.

2. How we use your information

• To sign you in, create and run games, and show your name to the other players in them.
• To keep the service secure, prevent cheating and abuse, and fix problems.
• To reply when you contact us. We do not send marketing email.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing the service you asked for (providing the game), and our legitimate interests in keeping it secure and working.

3. Google user data

We use the information we receive from Google only to sign you in and to show your name in the game. We do not sell it, use it for advertising, or transfer it to anyone except the service providers listed below who help us run the service. No person at Pocket Birds reads it except to provide support, keep the service secure or comply with the law.

Pocket Birds's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Who we share information with

• Other players in your games see your display name and what you do in the game.
• Supabase provides our database, sign-in, realtime updates and background functions. Our project is hosted in Ireland (EU).
• Vercel hosts the website and keeps standard request logs.
• Google handles the Google sign-in step.
• The law. We may disclose information if required by law or to protect people's safety or our rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Cookies and local storage

We use only what the game needs to work: session cookies that keep you signed in, and a small browser setting for in-game hints. We do not use advertising or tracking cookies. You can clear these in your browser settings at any time, but a guest account is tied to its browser session, so clearing cookies will sign you out of it and you will not be able to get that guest account back.

6. How long we keep information

We keep your account and game records while your account is active. We may remove inactive guest accounts and old game records from time to time. Backups and provider logs are kept on the providers' own schedules. You can ask us to delete your information at any time (see section 7).

7. Your choices and rights

• Access, correction and deletion: email ksm@supabase.io and we will respond within 30 days. If you signed in with Google, tell us the email address on your account so we can find it. Deleting your account removes your name and sign-in details; game history in which other players took part may be kept with your name removed.
• Stop Google sharing: you can remove Pocket Birds's access at any time in your Google Account permissions.
• EEA/UK residents can also ask us to restrict or transfer their data, object to its use, and complain to their local data protection authority.
• California residents can ask to know, delete or correct their information. We do not sell or share personal information as those terms are defined in California law, and we will not discriminate against you for exercising your rights.

8. International transfers

Our providers process information in the European Union and the United States, and possibly other countries. Where required, we rely on safeguards such as the providers' standard contractual clauses.

9. Security

We use encrypted connections, restrict access to data so that players can only see their own games, and keep the hidden order of each game's card decks on the server. No online service can be perfectly secure, but we take reasonable steps to protect your information.

10. Children

Pocket Birds is not directed to children under 13 (or under 16 where that is the age of digital consent). We do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

11. Changes to this policy

We may update this policy. We will change the date at the top and, for significant changes, post a notice on the site. Continuing to use Pocket Birds after a change means you accept the updated policy.

12. Contact

Kevin Shaffer-Morrison · ksm@supabase.io