CARDS ON THE TABLE (The Couples Compatibility App)

Privacy Policy

Effective Date: November 5, 2026

This Privacy Policy explains how Casey Staton dba Cards On The Table (The Couples Compatibility App) (“we,” “us,” or “our”) handles information for the Cards On The Table phone web application and related account, purchase and support services (“the Game”). Our mailing address is 284 Everett Avenue, PMB#185, Chelsea, MA 02150, United States. Contact: cardsonthetabledatinggame@gmail.com.

This policy covers the current progressive web application used in a supported Android or iOS phone browser or from the phone's home screen. It does not describe a separate native App Store application or purchases made in a different application. Account services and optional summaries are available as described below. Live Full Game purchases are offered only when live checkout is enabled; a checkout labeled as a test does not represent a real-money purchase.

1. What the current Game does

The Game is a voluntary conversation game for two adults using one phone. It is not a public dating network or a random matching service. The current Game does not provide saved online two-phone tables, stored gameplay histories, private bookmarks, an address-book upload, or in-app recipient messaging. Features not available in the Game are not promised by this policy.

2. Age requirements and individual choices

The Game is for people aged 21 or older. Each player must personally confirm their eligibility. This is a self-reported age declaration, not identity or age verification. Before play, each player enters their birth month and year to confirm they are 21 or older. This check happens only on the phone used to play. We do not save, store on our servers, transmit, sell, or share birth month or year, and it is never sent to any AI service. Birth day is never requested.

We do not knowingly permit under-21 use. If you believe an ineligible person has provided information or created an account, contact us so we can investigate and take appropriate action, including deleting information where required. The Game is not directed to children.

Gender, pronouns and identity descriptions are optional. Players may leave them unset. They are not inferred from an avatar, are not used to limit pairings, and do not affect scoring. Eligibility confirmation, using an account or buying the Game does not grant permission for optional AI processing or marketing.

3. Information and its sources

Temporary gameplay information. Players choose an avatar or emoji, a zodiac sign and, optionally, gender, pronouns or identity descriptions. The Game holds those profile selections, selected responses, skips, timeout markers, scores and game progress in the current browser session's memory. Gameplay identifies the seats as Player 1 and Player 2. It does not ask players for names, nicknames, photographs or typed question responses.

The Game does not create an account-linked archive of profiles, answers, scores or generated summaries in its application database. Ending or replacing the game or reloading the page clears the corresponding session information. A browser may temporarily keep a page alive in the background; backgrounding a phone alone should not be treated as secure deletion. The account session and browser preferences described below are separate and can persist.

Accounts. If you create an account, you provide an email address and password to the account service. Account information includes the email address, account identifier, authentication information, verification status and creation or service timestamps. Passwords are processed by the authentication service in protected form; we do not receive your password in readable form as part of normal account administration. Account confirmation and password recovery use email.

Browser preferences and sign-in. Your browser can persist a language preference, a random trial seed and sign-in session credentials. The random seed keeps the seven-question trial consistent in the same browser storage; it is not a verified identity and is not used by the Game for advertising or cross-site identification. Clearing site data, switching browsers or using a different device may reset the trial selection. The seed and language preference are not substitutes for purchase verification.

Purchase information. We receive account-linked purchase information and payment confirmations as described in Section 4.

Support information. If you email us, we receive your email address, message and any information you voluntarily include, such as a receipt reference. Do not send passwords, full card details or unnecessary intimate information.

Technical information. Hosting, account, payment and AI services may process IP addresses, browser/device information, request times, authentication and security events, errors and other service records to deliver, secure and troubleshoot their services. Provider diagnostic or request records can be separate from the Game's application database. This policy does not promise that infrastructure has no logs or that all requests are anonymous.

4. Purchases and Stripe

When live checkout is enabled, the Full Game is a one-time $4.99 USD purchase, subject to any additional tax disclosed before payment. An account is required to link the purchase and restore access on another supported phone.

Stripe processes checkout and payment. We provide the buyer's account identifier and account email to create the checkout, together with product and price information. You provide payment information directly to Stripe. The Game's application database does not store your full card number or card security code.

The Game records the buyer's account identifier, product, payment/access status, amount, currency, Stripe checkout reference and creation timestamp. Stripe can retain additional payment, receipt, customer, fraud-prevention and dispute information under its own obligations and practices. Stripe's Privacy Policy is available at https://stripe.com/privacy(opens in a new tab).

We use purchase information to confirm paid access, restore purchases, investigate billing problems, process refunds and payment disputes, update access when a purchase is fully refunded or a payment is reversed, and handle lawful payment obligations. Casey Staton is the Game's seller and support contact; Stripe's payment processing does not replace our consumer obligations. Refund requests, eligibility and the effect of refunds on access are described in our Refund Policy: https://doc-hosting.flycricket.io/cards-on-the-table-the-couples-compatibility-app-refund-policy/5816c4df-8c5b-4fdb-a8c1-6d8591c6244f/other(opens in a new tab). That policy forms part of our Terms of Use (https://doc-hosting.flycricket.io/cards-on-the-table-the-couples-compatibility-app-terms-of-use/dc9e3b33-aee2-4dc1-a15d-93843cb7accb/terms(opens in a new tab)); this Privacy Policy explains how related personal information is handled.

5. Optional Zodiac and AI summaries; sensitive information

Players can request a Zodiac Summary and an AI Summary for entertainment. This is internet-based processing through Lovable's AI service and an OpenAI model, not on-device Apple Intelligence.

Each player's permission starts off. Generation requires both players' separate permission and an explicit action requesting the summaries. One player must not select permission on behalf of the other. The shared-phone controls are personal choices, not independent identity verification. Regular gameplay and deterministic scores work without these summaries.

For the requested summaries, the Game sends the selected gameplay questions and categories, each player's selected response or skip/timeout status, both zodiac signs, the requested language and permission indicators. The service resolves question identifiers into question and response text for the AI request. It does not intentionally include the players' avatars, optional gender, pronouns, identity descriptions, email addresses, account identifiers, birth details or contact lists in the summary prompt. Technical request information can nevertheless be processed by infrastructure as described in Section 3; omitting account identifiers does not make every answer anonymous.

Questions and responses can reveal or imply highly personal information, including sex life or sexual preferences, religious or philosophical beliefs, family matters, finances and relationships. Depending on applicable law, some of this can be sensitive or special-category personal data. Do not enable summaries unless you understand that the disclosed choices will be sent online and want that processing. We do not use these inputs for advertising, eligibility decisions or deterministic scoring.

Either player may withdraw permission through the summary controls. Withdrawal blocks future summary requests and clears or prevents display of associated output in the current game. It cannot undo transmission or completed processing, erase another person's screenshots, or guarantee immediate deletion of provider records.

The Game does not save summaries as an account-linked history. The AI gateway and model provider may have separate request, response, diagnostic or security records under their applicable service arrangements. We do not promise zero retention, a specific provider deletion time or a no-training guarantee that has not been confirmed for the applicable service. You may request information about the current provider arrangements at our contact address.

6. Why we process information and who receives it

We use information to operate the Game; authenticate and secure accounts; provide and restore paid access; generate summaries you request; communicate about account confirmation, recovery and support; troubleshoot problems; prevent fraud or abuse; and comply with applicable law.

Where a law requires a legal basis, account and purchase processing is used to perform the requested service or contract; optional summary processing relies on consent, including explicit consent where required for sensitive information; legally required records rely on legal obligations; and proportionate security, troubleshooting and support processing may rely on legitimate interests where applicable. We do not treat consent to optional summaries as permission for unrelated uses.

Service recipients include Lovable/Lovable Cloud for hosting, accounts, the application database and server operations; Stripe for payments; Lovable's AI service and OpenAI for requested summaries; and the services that deliver account emails and support correspondence. Their authorized infrastructure providers may also process information as needed to perform their services. Stripe and some other recipients may act as independent controllers for their own legally required or operational purposes, rather than solely following our instructions.

We may disclose information when required by law or valid legal process, or where legally permitted and reasonably necessary to protect rights, safety or service security, or investigate fraud. A lawful business transfer may include relevant account or service records, subject to applicable law and required notice.

We do not sell personal information or share it for cross-context behavioral advertising. The Game's trial and Full Game contain no advertising. This does not mean that independent external sites are ad-free or that necessary service providers process no information.

7. Local storage, technical services and communications

The Game uses browser storage for language selection, trial consistency and persistent sign-in. Signing out removes the active sign-in session according to the account service's operation; clearing this site's browser storage removes locally saved site data but does not delete your online account or a Stripe record. Clearing local preferences does not cancel or refund a purchase.

We do not deliberately upload the trial seed or optional identity selections for advertising. Technical traffic and any host-supplied measurement or diagnostic functions are separate from local gameplay memory and may be subject to provider settings and applicable privacy or cookie requirements.

The current Game does not operate an email/SMS marketing subscription through invitation sharing. Account confirmation, recovery, purchase receipts and replies to support requests are service communications, not marketing opt-in. Future optional marketing or materially new optional processing will require appropriate notice and consent where required.

8. Retention, withdrawal and account deletion

Temporary gameplay and displayed summaries are held in the browser session rather than an account-linked gameplay archive. Browser preferences and sign-in can persist until removed through sign-out, site-data controls or the relevant service operation.

Account information and active purchase records are kept while needed to provide account and purchase services. From GAME MENU → MY ACCOUNT → Delete Account, the account owner can confirm permanent deletion. The Game's authenticated deletion action removes the active account and its purchase rows and clears the current game session. No saved gameplay-summary archive is maintained by the current Game to delete.

Account deletion removes the account used to restore Full Game access. That purchase cannot then be restored to the deleted account. Signing out, removing a home-screen icon, or clearing browser data is not the same as deleting the online account. Deletion is not automatically a refund and does not prevent you from requesting a refund or another remedy you are legally entitled to receive. For refund eligibility, request instructions and the effect of a refund on access, see our Refund Policy: https://doc-hosting.flycricket.io/cards-on-the-table-the-couples-compatibility-app-refund-policy/5816c4df-8c5b-4fdb-a8c1-6d8591c6244f/other(opens in a new tab). If you need billing help, contact support before deleting your account where possible; doing so is not a condition that limits any statutory refund right.

Deletion of active Game records does not promise immediate deletion from provider security logs, backups, Stripe/payment records, support correspondence or legally required records held separately. Those records may be retained for lawful security, accounting, fraud-prevention, dispute or other obligations and applicable provider retention practices. We do not promise a fixed provider retention period that has not been verified. Contact us for retention questions or requests; we will apply legally required deletion and retention limits.

If deletion fails or cannot be confirmed, contact cardsonthetabledatinggame@gmail.com. Do not assume an error message means every part of the deletion was completed. We may need to verify a request using reasonably necessary account information; never email your password.

9. Security and international processing

We use access controls and encrypted network connections for relevant account and server communications. No device, transmission or storage system is completely secure. Someone who can access the phone can see on-screen player selections, answers and summaries or copy them. The Game does not provide an end-to-end-encrypted private online table service.

Our service providers may process information in the United States and other countries, whose laws may differ from those where you live. Where applicable law requires a transfer mechanism or other safeguard, that requirement applies. You may contact us for information about the arrangements applicable to your information. We will provide notices required by applicable breach-notification law.

10. Invitations and external services

Invitation controls open your phone's sharing, SMS or email service with a game link. You choose recipients and send the invitation through that service. The Game does not upload your address book or maintain an invitation-recipient list through these controls. Your messaging provider processes what you send under its own terms and privacy practices.

Links to Instagram, YouTube, Spotify, Amazon, Flycricket policy hosting and other external services lead to independent sites with their own privacy practices. Information you provide directly to them is not governed solely by this policy. An invitation does not provide another person's consent or paid access.

11. Your privacy choices and rights

You may leave optional identity selections unset, decline summaries, withdraw summary permission, sign out, clear browser site data, or request account deletion. These actions have different effects as described above.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection; withdraw consent; or appeal a privacy-request decision. Some rights are subject to verification and lawful exceptions. Withdrawal does not invalidate processing that was lawful before withdrawal. We will respond within the period required by applicable law and will not discriminate against you for exercising protected rights.

Send requests to cardsonthetabledatinggame@gmail.com or the mailing address above. An authorized agent may act where law permits, subject to reasonable verification of authority. Do not send unnecessary sensitive documents or card information. You may also complain to the relevant data-protection or regulatory authority.

12. California and other state privacy rights

If the California Consumer Privacy Act/California Privacy Rights Act or another state privacy law applies to our business and your information, you retain the rights that law provides. The existence of this policy does not mean every statute automatically applies.

Relevant categories can include identifiers and account information (email, account identifiers and session/technical identifiers); commercial information (purchase and payment-reference records); internet or network information (service and security records); correspondence (information you send support); and, only for requested summaries, gameplay choices and zodiac signs that may reveal sensitive information such as religious beliefs or sex life. Sources and recipients are described in Sections 3–6, and retention in Section 8.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use summary inputs for unrelated profiling or advertising. Applicable rights to access, correct, delete, receive portable information, limit qualifying uses of sensitive information or appeal decisions may be exercised through our contact address. Where legally applicable, we will honor required opt-out preference signals and other statutory obligations.

13. Policy updates and contact

We will publish updates with a revised effective date and provide additional notice or obtain renewed consent when required by applicable law. A policy update is not blanket permission for materially new optional processing.

Privacy and support contact: cardsonthetabledatinggame@gmail.com

Operator: Casey Staton dba Cards On The Table (The Couples Compatibility App)

Mailing address: 284 Everett Avenue, PMB#185, Chelsea, MA 02150, United States

Effective Date: November 5, 2026