Call of Spades ยท Privacy Policy
Playing the Game
The server processes your entered player name, room session, cards, calls, scores and chat to operate multiplayer games. Players in your room see your name, public plays and chat. The public leaderboard shows names, games and practice-coin earnings. Coins have no cash value. Your device stores preferences, practice coins and a random profile ID. Room tokens are access credentials; do not share them.
Google Sign-In
If you choose Sign in with Google, Google provides an account identifier and may provide your name, email address and profile picture. Call of Spades stores the Google account identifier only to link your game profile; email is not used as the account key. A secure, HTTP-only session cookie keeps you signed in on that browser. You can sign out at any time from the Google profile window. Google Sign-In is optional and Guest play remains available.
Game Session Notifications
When a game starts or ends, or a player exits or loses connection, the owner receives a private Telegram notification with your player name, game mode, start time, whether your saved profile has played before, and your linked Google or Facebook identity (account ID and email where available). End notifications include elapsed session duration and ending time. Unconfirmed connection endings are labelled estimated. Multiplayer notifications group player details. Telegram processes these notification messages. Guest identification uses a random browser profile. Notification tracking stores the player details above, timestamps, duration, delivery status and a hashed room token to track endings and prevent repeated alerts. Raw room tokens and bot credentials are not stored in those records.
Page Visitor Counter
A random browser identifier is saved locally to count one visit per browser per India calendar day, including visits without gameplay or optional analytics. The server stores a different hashed deduplication key for each day and keeps daily aggregate totals. These keys are removed by nightly cleanup once their day is more than two days old; aggregate totals are retained. The counter does not record your name, login identity or IP address. Clearing browser storage or switching browsers can count as another visitor. Daily and cumulative totals appear in owner reports and the daily Telegram summary.
Optional Analytics
Only if you choose Allow Analytics, we record the name exactly as entered, a random player ID, session ID, connection IP, session times, foreground active-play duration, games started/completed, rounds completed, rematches, last game phase (drop-off), first/last played and returning status. The random ID is pseudonymous, not proof of identity. No MAC address, microphone, contacts or precise location is collected.
Active-play time counts visible gameplay with interaction in the last minute, excluding background tabs. Session ends after a missing heartbeat are estimates, marked as connection lost or closed. Blocking analytics or losing connectivity can create gaps.
Retention & Exports
IPs are removed within 7 days plus the hourly cleanup interval. Detailed sessions and events are kept for 90 days plus the cleanup interval. Player-level aggregate history is retained for the leaderboard and game analysis. The owner can export CSV reports and synchronise analytics to a private Google Sheet. Sheet exports exclude raw IPs. Cloudflare provides hosting/database services; Google processes the Sheet exports if enabled. Separate infrastructure security logs may be handled by the hosting provider.
Your Choices
Use Privacy Settings to decline or withdraw future analytics. Withdrawal ends the current analytics session and removes its stored IP; it does not erase earlier history. For access or deletion of retained records, contact contact@callofspades.com. Include your random player ID from your browser storage if available, never a room token. Clearing browser data creates a new identity; history is not automatically linked across devices.
Ratings, reports and email
Submitted ratings and available social identity information may appear in private owner reports. Reports can be exported and delivered by email through Resend when configured. Exported reports and Telegram messages are separate copies and are not automatically removed by database cleanup. Ask the owner to check retained copies when requesting deletion.
Facebook Login
Facebook Login is being configured. When enabled, it may supply an account identifier, name, profile photo and email where available and permitted, to link and display your game profile.