S9

S9 ("we", "us") operates s9cards.com, a casual online card game. This policy explains what personal data we collect, why, and your rights in relation to it. By using the service, you agree to this policy.

Information we collect

Sign-in identity. Playing requires signing in with Google. We use Google's OAuth flow with minimal scopes: we receive only your Google account identifier and first name. We do not request your email address, last name, profile photo, or any other profile field, and we do not receive them.
Account record. When you first sign in we create an account associated with your Google account identifier and use it to retain your gameplay statistics (total score, games played, level, currently-active game). Your name is not part of this record.
Live game state. While a game is in progress we hold its state (cards, scores, hands) on our servers. It is automatically deleted after a short period of inactivity once the game ends.
Analytics. We use Google Analytics 4 to understand aggregate usage (page views, session length, general engagement). IP addresses are anonymized by Google before storage. Analytics data does not include your name, account identifier, or game content.

How we use it

We use this information solely to operate the service: to sign you in, to associate your gameplay with your account so your level and score persist between sessions, to deliver the game in real time, and to understand aggregate site usage. We do not sell, rent, or share personal data with third parties for marketing.

Information we do not collect

Email address.
Payment information of any kind. The service is free.
Precise location.
Advertising identifiers. The service does not display advertising.

Cookies

We set first-party cookies necessary to keep you signed in and to remember the table you are seated at. Google Analytics sets its own cookies under the google.com domain. You can disable cookies in your browser; if you do, sign-in will not persist and you will be returned to the sign-in screen on each visit.

Service providers

Google — sign-in (OAuth) and analytics. Google Privacy Policy
Cloudflare — hosting and edge infrastructure. Cloudflare Privacy Policy

Data retention

Your account record persists until you ask us to delete it (see below). Live game state is short-lived and is removed automatically after each game. Analytics data is retained according to Google Analytics' default retention period.

Your rights

Depending on your jurisdiction (including the EU, UK, and California), you may have the right to access, correct, export, or delete the personal data we hold about you, and to withdraw consent. To exercise any of these rights, email help@s9cards.com from the Google account in question. We will respond within thirty days.

Children

S9 is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

If this policy changes materially, the "Last updated" date above will change and, where appropriate, we will provide additional notice. Continued use of the service after a change constitutes acceptance.

Contact

For privacy questions or requests, email help@s9cards.com.

Back to the table