World of Card Games Privacy Policy

Last modified: Oct 3, 2026

Who we are

World of Card Games is run by Holger Sindbaek ApS, Lyngbyvej 42, 1 th., Denmark ("we" or "us"). We decide how your personal data is used, so under European data protection law we are the data controller. You can write to us at holger@worldofcardgames.com.

This policy explains what we collect when you use World of Card Games, why we collect it, who we share it with, how long we keep it, and what you can do about it.

What this policy covers

This policy covers:

the website worldofcardgames.com (the "website");
our game apps for iPhone, iPad and Android: Euchre, Hearts, Spades, Gin Rummy, Double Deck Pinochle, Twenty-Nine and Sergeant Major (358) (the "apps"). On the App Store the apps are published by Holger Sindbaek, and on Google Play by Online Solitaire;
our apps for Mac and Windows, which show the website, so the website's part of this policy applies to them;
emails and other messages between you and us.

It does not cover other companies' websites or services, even when we link to them.

Every game follows this policy, on the website and in the apps. Which games you play does not change what we collect.

Hearts: Dodge hearts and the Queen of Spades in this 4-player game where fewer points mean victory.
Spades: Join in teams of two, to bid strategically in this timeless trick-taking game.
Euchre: Dive into fast-paced trick-taking with a unique deck and dynamic play.
Gin Rummy: Master the art of draw-and-discard, seeking melds in this 2-player classic.
Double Deck Pinochle: Double the deck and fun in this 4-player, 80-card challenge.
Pinochle: Team up, strategize, and win in this 4-player, single-deck Pinochle duel.
Canasta: Partner up in this rummy-style game. Meld and strategize to outscore opponents.
Hand & Foot: Play through two hands in this Canasta variant with wild piles and team strategy.
Whist: Challenge your wits in this 4-player trick-taking game of tactics and teamwork.
Rummy: Form sets and runs in this lively 4-player race to create winning combinations.
Cribbage: Race to 121 points in this classic 2-player pegging game.
Crazy Eights: Race to empty your hand in this fast-paced game where 8s are wild and change everything.
Bridge: Master bidding and trick-taking in this classic partnership game of skill and strategy.
Go Fish: Ask for cards and collect books of four in this easygoing 4-player card game.
Old Maid: Avoid being stuck with the Old Maid in this classic 4-player card game.
Sheepshead: Play American Schafkopf, a 4-player trick-taking game with fixed trumps and a blind.
Twenty-Nine: Harness the power of the Jack of Trump in this lively 4-player team challenge.
Sergeant Major: Beat your trick target, trade up your cards and race to 12 tricks in this 3-player game.

Children

World of Card Games is for players who are 13 or older. Children under 13 may not use the website or the apps, as a guest or with an account. Our children's privacy page explains what we do if we learn that a player is under 13, and how a parent or guardian can reach us.

What we collect, and why

When you play as a guest

You can play without an account. We then give you a guest account: a player number, a guest name such as Guest 1234, your game statistics and your settings. Your browser or app keeps a sign-in token, so that it finds the guest account again.

When you create an account

Your username, your email address and your password. We store the password only in a scrambled form (a salted hash), so we cannot read it. We use your email address to sign you in, to confirm that the address is yours, to reset your password and to write to you about your account.
If you sign in with Google, Facebook or Apple, that company tells us an id for your account with them, your email address and whether the address is confirmed. It may also send us your name, but we do not keep it. With Sign in with Apple, you can hide your email address behind an address from Apple. We also keep a token from Apple, so that we can end our access when you disconnect Apple or delete your account.
Your avatar, which you pick from our own pictures. You cannot upload photos.

When you play

The games you play, your moves at the table, your results, statistics, ratings, places on the leaderboards and Daily challenge results.
Your settings, such as the card speed and the deck.
The players you like, dislike, mute or befriend, the games you played together, your recent games, your standing tables and the activity that your friends see.
Games you play offline in an app. The app reports them to us when it is online again, so that they count in your statistics.

We need this data to run the games, to seat you with other players, to show your statistics and to keep the leaderboards fair.

Chat and messages

We store what you write in table chat, in private messages to friends and in table names, and the reports and flags that you send. We use it to deliver the messages, to keep the chat safe and to look into complaints (see "Automated moderation" below). Chat is not private: the other players at the table see it, and our moderation reads it.

Data we collect automatically

Your IP address. Your device sends it when it connects. We use it to connect you, to limit how often one address can try things such as signing in, to stop one person from taking two seats at a table, and to find your country. Your device also sends your IP address to ipapi.is, which tells us the country and whether the address belongs to a VPN or a proxy. We use that answer to enforce bans. If we ban a player, we keep an identifier made from the IP address.
Device and app details, such as the type of device, the operating system, the browser, the screen size, the language and the app version.
How you use the website and the apps, such as the pages and screens you open, the games you start, the buttons you press, errors, lost connections and how fast the games run.
Cookies and local storage. We use them to keep you signed in, to remember your settings and your consent choices, and for analytics. On the website, our ad and analytics partners also use their own cookies and similar technology.

When you pay (website only)

You can pay for a subscription or make a one-time support payment on the website. Stripe handles the payment, and we never see or store your full card number. We receive what we need to manage your subscription: your Stripe customer id, the status of your subscription and payments, and your billing email address. The apps do not sell anything.

When you contact us

We keep your emails and our replies. When you send a bug report from the game, it also holds details that help us find the problem: the state of the game, your device and browser, your IP address and recent errors.

On the website

CMI Marketing, Inc., d/b/a Raptive ("Raptive") places the ads on the website, and Raptive collects and uses certain data for advertising. To learn more, read Raptive's advertising privacy statement. Where the law asks for your consent, Raptive's consent tool asks you, and you can change your choice with "Update Privacy Preferences" in the footer of the frontpage.

In the apps

The apps show ads from Google AdMob: a banner at the table, and sometimes a full-screen ad between games. AdMob collects your IP address, your device's advertising id, information about the ads you see and tap, and diagnostic information. Google uses this data to show and measure ads and to prevent fraud. Read how Google uses data from apps at policies.google.com/technologies/partner-sites.

In the European Economic Area, the United Kingdom and Switzerland, Google's consent form asks you before the app shows personalised ads. In some US states, the same form lets you opt out of ads based on your activity. Where the form applies, you can change your choice at any time in the app under Settings > Account > Privacy choices.
On iPhone and iPad, Apple asks whether the app may track you. If you say no, the app cannot use your device's advertising id. You can change this in your device's settings, under Privacy & Security > Tracking.
On Android, you can reset or delete your advertising id in your device's settings.

When ads are not personalised, AdMob still uses some data, such as your IP address, to show the ads, to count them and to prevent fraud.

Analytics and error reports

We use these services to see how the website and the apps are used, how fast they run and what goes wrong, so that we can fix problems and make the games better:

OpenPanel, which we run on our own server, so this data stays with us. It records events such as pages opened, games started and errors, with details of your device. It finds your country and city from your IP address. When you are signed in, the events are linked to your account.
Google Analytics, on the website only. It records pages and events, and finds your approximate location from your IP address. Read Google's privacy policy.
RumDash, on the website only, which measures how fast the pages load and respond, on one device in three.
Sentry, on the website only, which reports errors in the page with details of your browser.

Signing in with Google, Facebook or Apple

On the website, the Google and Facebook sign-in buttons load those companies' own code when you open the sign-in box, so they can see that you opened it. In the apps that offer these sign-ins, you sign in through Google's, Facebook's or Apple's own screens on your device. In the apps, Facebook's code starts only when you choose to sign in with Facebook, and its automatic app events and its use of the advertising id are turned off. Google, Facebook and Apple handle this data under their own privacy policies.

App updates

We plan to update the apps' content through Capgo, so that you get fixes without a new download from the store. When we do, the app will send Capgo a random id for the app on your device, the app and system versions, and your IP address, so that it gets the right update.

Who we share data with

We share personal data only as this policy describes. The companies that work for us may use it only to provide their service to us:

Hosting. Our servers are in the United States, at our hosting provider. Cloudflare carries the website's traffic and protects it from attacks.
Email. SendGrid (Twilio) sends our account emails, such as the email that confirms your address or resets your password.
Moderation. OpenAI checks chat messages and usernames for us. OpenAI may not use this data for its own purposes, including to train its models.
Payments. Stripe handles payments on the website.
IP address checks. ipapi.is tells us the country of an IP address and whether it belongs to a VPN or a proxy.
Analytics and error reports. Google Analytics, RumDash and Sentry, on the website, as "Analytics and error reports" describes.
App updates. Capgo, when we start to use it.

Some partners also use data for their own purposes, under their own privacy policies: Raptive and its ad partners on the website, Google for the ads and the consent form in the apps, and Google, Facebook and Apple when you sign in with them.

We may also disclose personal data:

when the law, a court or a public authority requires it;
to enforce our Terms of Use, and to protect the safety and the rights of our players, of others and of us, which includes preventing fraud;
to a buyer or a successor, if all or part of World of Card Games is sold or transferred.

We may share statistics that do not identify anyone.

Automated moderation

We use automated systems, including services from OpenAI, to moderate chat messages, usernames and other things that players write:

When you send a message, it is checked for harassment, hate speech and other breaks of our Community Guidelines. A flagged message can be blocked, you can be asked to confirm it, or your account can be restricted for a time or for good.
When a message is flagged, we may check it together with the recent chat at the table, with the usernames, so that it is judged in context and fewer messages are flagged by mistake.
Chat logs are analysed in batches to find patterns of abuse and harmful or illegal activity, and to learn what players think of the games.

These systems can act on your account, with a warning, a restriction for a time or a permanent ban, before a person looks at it. If you think that a decision is wrong, write to holger@worldofcardgames.com and ask for a person to review it.

Legal bases (EEA, United Kingdom and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we use your personal data on these legal bases:

To provide the service you asked for (contract, Article 6(1)(b) GDPR): your account, the games, chat, friends, your statistics, emails about your account, and payments.
Our legitimate interests (Article 6(1)(f) GDPR): to keep the games safe and fair, to moderate, to prevent abuse, fraud and the evasion of bans, to keep backups, to find and fix errors, and to measure how the website and the apps are used, so that we can improve them. We have weighed these interests against your rights, and you can object to this use (see "Your rights").
Your consent (Article 6(1)(a) GDPR): personalised ads and the cookies they need on the website, personalised ads in the apps, and the use of your device's advertising id on iPhone and iPad. You can withdraw your consent at any time, as "Ads" explains. This does not change what we did before.
Legal obligations (Article 6(1)(c) GDPR): to keep accounting records of payments, and to answer lawful requests from authorities.

How long we keep data

Your account, with your username, email address, settings and statistics: until you delete the account.
A guest account, with its statistics and settings: until you ask us to delete it.
Table logs, which hold every message sent at a table, including chat and a coded form of the sender's IP address: 3 days. Chat logs: 2 days.
Private messages: the last 100 messages of each conversation.
Activity in friends' feeds: 30 days. The calendar of days you played: 100 days. Daily challenge results: 3 days. Reports of games played offline: about 30 days.
Bug reports, with the state of the game: 30 days.
Moderation records: your strikes and ban dates until you delete your account. If we ban a player, we keep the identifier made from the IP address after the account is deleted, so that the ban cannot be avoided with a new account.
Backups: a daily copy of our database for 7 days, and our hosting provider's backups of the server for a short time.
Server logs: for a limited time.
Payment records: 5 years, as Danish accounting law asks.
Analytics data: for the time that each analytics service keeps it.
Emails: as long as we need them to answer you and to keep a record of the conversation.

Deleting your account

You can delete your account in an app or on the website, under Settings > Account > Delete account. You can also write to us and ask us to delete it. Our page Delete your account gives the steps and lists what we delete and what we keep.

Your rights

You have the right to:

see the personal data we hold about you, and get a copy of it;
correct data that is wrong or incomplete;
delete your data;
restrict how we use your data, or object to how we use it, including the use based on our legitimate interests;
receive the data you gave us in a common, machine-readable format, or have us send it to another company;
ask a person to review a decision that our automated moderation made about you;
withdraw your consent at any time, where we rely on it.

To use a right, write to holger@worldofcardgames.com, from the email address on your account if you have one. We answer within one month. We may first ask you to show that the data is yours.

If you think that we handle your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk, or to the data protection authority where you live.

If you live in a US state with a privacy law, you can ask us in the same way to see, correct or delete your data, and you can opt out of targeted ads with the choices that "Ads" describes. Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may write to holger@worldofcardgames.com. We do not currently sell data that triggers that statute's opt-out requirements.

Your choices

Cookies. On the website, use "Update Privacy Preferences" in the footer of the frontpage, where it is offered. You can also set your browser to refuse some or all cookies, but parts of the website may then stop working.
Personalised ads on the website. You can opt out at Raptive and in Google's ad settings, and from the members of the Network Advertising Initiative on the NAI's website.
Ads in the apps. Use Settings > Account > Privacy choices in the app where it is offered, Apple's tracking setting on iPhone and iPad, and the advertising id settings on Android, as "Ads" explains.
Other players. You can mute or block a player from their seat at the table, and undo it in Settings > Account > People.

International transfers

Our servers are in the United States. If you use World of Card Games from outside the United States, your data is sent to the United States and stored there. Several of the services named above, such as Stripe, OpenAI, Google and SendGrid, also process data in the United States.

When we send personal data from the EEA, the United Kingdom or Switzerland to a country that the European Commission has not found to protect data adequately, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or on the EU-U.S. Data Privacy Framework where the company is certified under it.

Security

The website and the apps send your data over encrypted connections. We store passwords only as salted hashes. No system is perfectly secure, so we cannot promise that nobody will ever see your data without permission. Keep your password to yourself.

Terms of Use

Please also read our Terms of Use.

Changes to this policy

When we change this policy, we post the new version on this page and change the date at the top. If a change matters for how we treat your personal data, we also tell you on the website's frontpage or in the apps.

Contact

To ask about this policy or about your data, write to holger@worldofcardgames.com, or by post to Holger Sindbaek ApS, Lyngbyvej 42, 1 th., Denmark.