SHUFFLEBITS™Privacy policy
Effective October 11, 2026. SHUFFLEBITS LLC operates Shufflebits. Contact hello@shufflebits.com with privacy questions or requests.
What the table needs
You join with a nickname and a character avatar, without creating an account. We process your room code, random participant identifier, avatar choices, cards, table settings and game actions to keep everyone's table in sync. Use a nickname rather than a full name, and share room codes only with people you intend to play with.
What other players see
People in your room can see your nickname, avatar, card counts and public table activity. Your private card faces are filtered out of other players' views until you reveal them. Someone looking at your screen can still see what you see.
Your device
Local storage remembers your nickname, room and participant token so you can return to your seat. Clearing site data removes that local access; it does not itself delete the server's room record. Installing the app stores its icon and an offline notice on your device. Live play requires internet access.
Usage reporting
When enabled, first-party reporting uses random browser and visit identifiers to count visits, selected button clicks, action outcomes, response times and error categories. We honor browser Do Not Track and Global Privacy Control signals for this browser reporting. Table reporting records timestamped game action types, anonymous participants sharing a table, and active, idle and unattended time, along with table labels. It does not copy chat messages, passwords, other input contents or card faces. Reports are restricted to the owner. Reporting records are retained until removed by the operator or in response to an applicable deletion request; provider backups may persist separately. Clearing site data resets your browser identifier.
Service providers and diagnostics
Supabase stores and synchronizes room data. Our hosting and development services, including Lovable where used, process requests and may receive technical information such as IP addresses, browser details and error reports. Error reports may include the page path and error details. These services help run, secure and troubleshoot the app. Google Fonts supplies a font; loading it sends a request, including technical connection information, to Google.
This version does not implement advertising, purchases or advertising trackers in its application code. If those features are added, this policy will be updated before they are introduced.
Retention and requests
Inactive rooms become eligible for cleanup after 12 hours; cleanup currently runs when another room is created, so removal may occur later. Provider logs and backups can have separate retention periods. Email us to request access, correction or deletion of your data. Include your room code and approximate play time, but never send your participant token. We may need to verify your connection to a request.
Children and family use
Parents and guardians should supervise family play and choose nicknames that do not identify children. We do not ask for dates of birth. Verified parental consent and a dedicated children's privacy process are not currently implemented. Contact us about children's use or to request deletion of a child's information. A parent's presence alone does not establish compliance with children's privacy requirements.
Security and changes
We limit private card information by participant and use service access controls. No online service can promise absolute security. This policy may change as the app develops; the effective date above identifies the current version.