Privacy

Card Sard has no accounts, no ads and nothing for sale, and keeps as little as it can. This page says what it keeps, why, and for how long.

Last changed 31 October 2026.

Who runs Card Sard

Card Sard (cardsard.com) runs this site and decides what happens to what it keeps. Write to privacy@cardsard.com about anything on this page.

On your device

Card Sard keeps a few things in your browser’s storage, so it works the way you left it:

• a random code that gets a phone back into its seat after a reload or a locked screen;
• the name you play under;
• the room you were last in, and the room you were hosting or showing on a TV;
• your settings, and how you last set up each game;
• whether your games may be counted and, if they are, the random number they’re counted by (below).

They stay on your device. Card Sard sets no cookies. Clearing this site’s data in your browser removes all of them.

While you play

Rooms run on Card Sard’s server. While a room is open, the server holds the names players typed, who sits where, and the game itself, in memory only. They’re gone when the room closes, or 10 minutes after the host leaves if they don’t come back. No game is saved.

Counting games

To learn which games are played and whether they get finished, the server records what happens in each room: a room opened, a game started or ended, a match finished, a room closed. With each goes the game, how long it took, how many people, bots and TVs were there, and the country the room was opened from.

A device that may be counted is counted by a random number kept on it. The server scrambles that number with a secret before storing it, so the record can tell a device that comes back from a new one, but nothing in it leads back to the device or to anyone. A device makes itself a new number every 13 months.

The record never holds names, network (IP) addresses, or anything anyone typed. It keeps each entry for three months, then deletes it. Entries can’t be changed once written, so turning counting off stops new ones, and the old ones go when their three months are up.

Your choice

In the EU, the rest of the European Economic Area, the UK and Switzerland, Card Sard asks first, and your device isn’t counted unless you say yes. Everywhere else it’s counted unless you turn it off. Either way, you can change your mind here at any time. A game played uncounted still adds to its room’s totals (a game started, how many played), with nothing in them about your device.

Reporting a problem

If you use Report a Problem, Card Sard receives what you wrote, with the name you play under, the room and game you were in, your browser, screen and language, and the last few errors on the page. The report shows all of it under “What’s sent with it” before you send. The time and the country it came from are added. Reports are kept until the problem is dealt with, and no longer than a year.

Keeping the site running

Like any website, Card Sard sees your device’s network address when it connects. It’s used to send you the site, to tell which country a room was opened from, and to limit how many rooms or reports one network can start in a minute, which keeps the site up for everyone. Card Sard doesn’t store it.

Cloudflare hosts Card Sard and runs its rooms on Card Sard’s behalf. Its servers keep short-lived logs of requests and errors, for a week at most, which Card Sard uses to find and fix faults. Cloudflare handles all of this under its data processing terms, which cover moving data between countries. See Cloudflare’s privacy policy.

Nothing is sold or shared with anyone else, and there are no ads or trackers from other companies.

Why it’s allowed

For the GDPR and the UK GDPR, each use rests on one of these:

• Running rooms, and the code that gets a phone back to its seat: giving you the game you asked to play.
• Limits per network and the server’s logs: Card Sard’s legitimate interest in keeping the site working and safe.
• Counting games: your consent, where you’re asked first. Elsewhere, Card Sard’s legitimate interest in learning which games to improve, which you can object to with the switch above.
• Problem reports: your choice to send one, and Card Sard’s legitimate interest in fixing what went wrong.

Your rights

You can ask what Card Sard holds about you, ask for it to be corrected or deleted, or object to how it’s used, by writing to privacy@cardsard.com. Card Sard holds nothing that names you, so it may only be able to find what’s yours from something you send with the request, such as the words of a report. In the EU, the EEA, the UK or Switzerland, you can also complain to your data protection authority.

Children

Card Sard is for everyone, and asks nobody, of any age, for a real name, an email address or anything else that says who they are.

Changes

When what Card Sard keeps changes, this page changes with it, and the date at the top says when.