Your information and choices
Privacy Policy
Card Chain works without a player account and is designed to collect only what is needed to operate and improve the game.
Anonymous game analytics
When allowed, the game records broad events such as puzzle started, card accepted or rejected, hint used, puzzle completed, and result shared. Submitted card names are not included. A random browser identifier is salted and hashed before server storage.
Data stored on your device
Unfinished attempts, completed results, streaks, settings, reminder preferences, and an anonymous analytics identifier are stored in local browser storage. The iOS app also shares today’s completion flags and streak with its Home Screen widget through Apple’s private App Group storage. Clearing site data removes browser records; removing the app removes its local and widget records. Because the game has no accounts, these records do not automatically transfer to another browser or device.
Daily reminder notifications
Reminders are optional and require a direct permission request. For browser Web Push, the server stores the push endpoint and encryption keys required for delivery, a salted hash of the anonymous browser identifier, today’s Easy and Hard completion flags, and whether a reminder was sent or suppressed. Typed card names are not included.
At 8:00 PM Eastern, the server sends a reminder only when Easy, Hard, or both remain unfinished. Completing both suppresses the notification. Disabling reminders removes the browser subscription; when it is the final subscription for that anonymous identifier, associated reminder-completion flags are deleted.
The native Capacitor app uses device-local scheduled notifications. Those schedules and completion checks remain on that device and do not synchronize across devices.
Contact messages
When you use the contact form, the server stores the name and email address you choose to provide, the selected topic, the message, and the submission time. This information is used only to review the message, investigate a report, and respond when contact information is supplied.
Contact messages are available only through the protected administration dashboard and are normally deleted automatically after 180 days. Do not submit passwords, payment details, or other sensitive information.
Technical operations and security
The hosting provider and server may process basic request information such as IP address, browser headers, requested path, and timestamps to deliver pages, prevent abuse, and diagnose outages. The application uses IP addresses temporarily for in-memory rate limiting but does not place them in its analytics or contact-message database.
When the app has a technical error, it may store the error message, limited stack information, page path, app version, and request identifier. If the device is offline, up to 20 diagnostic reports may remain queued locally until connectivity returns. The native app can also report that its previous active session ended unexpectedly. Error reports should not include submitted card names or account information because the game has no accounts.
Advertising, cookies, and consent
The Card Chain website uses Google AdSense, while the native iOS app uses Google AdMob. Third-party vendors, including Google, may use cookies, local storage, device information, or similar technologies to serve, limit, and measure advertisements. Google and its partners may process device information, IP-derived approximate location, diagnostics, performance data, and ad interactions for fraud prevention, frequency capping, reporting, and ad selection.
The iPhone and iPad app requests non-personalized ads for both its banner and optional rewarded placement and does not request App Tracking Transparency permission. Google’s certified consent-management platform is still checked before an ad loads where required, and an in-app privacy-options entry point is provided when required. The website’s AdSense choices may vary by location and consent.
Learn how Google uses information from sites and apps that use its services, review Google’s Privacy Policy, or manage broader personalization through Google’s My Ad Center.
Browser signals and retention
Card Chain disables optional anonymous analytics when the browser sends Do Not Track. Essential local storage, security controls, contact processing, error reporting, and opted-in notifications are handled separately because they support requested features or service reliability.
Anonymous analytics are normally retained for up to 180 days, error reports for up to 90 days, and contact messages for up to 180 days. Notification subscriptions remain until disabled, expired, or rejected by the push provider.
Children and international visitors
Card Chain is a general-audience word game and is not directed specifically to children under 13. Do not use the contact form to submit personal information about a child. Privacy and advertising choices may vary by location, and additional consent controls may be shown where required.
Your choices and requests
You can disable analytics on this page, disable reminders in the game, clear local site data through the browser, or send a privacy request through the contact form. A reply may require enough information to identify the specific contact message or notification subscription involved.
Changes to this policy
This policy may be updated as the game, advertising setup, hosting, or legal requirements change. The latest revision date is shown below. This plain-language policy is not a substitute for legal advice and should receive professional review when needed.