Privacy policy

Our Deck is made by ffchn software (“we”, “us”), based in New Westminster, British Columbia, Canada. We decide how the little data described here is used. Questions about privacy go to contact@ourdeck.app.

Our Deck is built to work without knowing who you are. These are stored only on your iPhone and are never sent anywhere:

• the two names you enter
• the anatomy you choose for each of you, which decides which cards can be dealt
• your settings: language, true black, haptics and timer sound
• which phases past rounds reached and which preset they used (never which cards)
• the cards you have seen in the last 30 days, so the same card does not open two rounds in a row
• cards you mark to see again
• the cards you have taken out of the deck in Choose your cards, and the packs you have switched off in Round settings (neither is ever part of the usage counts below)
• a paused round, for up to three hours
• a copy of what you have bought, so your cards unlock without a connection

Deleting the app deletes all of it. We can't see any of it, and we can't recover it for you.

Anonymous usage counts. To understand how the game is played, the app sends a short list of events to PostHog, an analytics service, which stores them in the United States. This is the complete list:

• the app was opened
• a round started, with whether it is Guided or Free Draw and its time limit
• a round finished or ended early, with how many phases it got through (never which ones)
• a card's timer was started
• store activity: a deck, pack or card-choosing page was viewed, Unlock was tapped, a purchase completed or did not (and the reason, such as cancelled), or Restore purchases was tried. Store events say which product they were about: the full deck, Everything, or a pack by number only, never its name
• with every event: whether you own the full deck or Everything, and how many packs you own (never which ones)

Events carry a random ID created on your phone, not anything that identifies you. We don't build profiles, we ask PostHog to discard IP addresses, and the app turns off location lookup, device names, time zones, screen recording and automatic tracking. Events never contain card text or card names, your names, your anatomy, the round settings you chose (preset, phases, dares, drinking), which phases you reached, what you skipped, what you marked or who a pack's cards were aimed at. A round ended with the safe word looks exactly like any other round that ended early.

If you'd rather send nothing, play with your phone offline. Every card works without a connection.

Purchases. You buy through the App Store. Apple handles payment, and we never see your card details or your Apple ID. We use RevenueCat to check what you've bought and to restore it on a new phone. RevenueCat receives a random ID created by the app, your App Store purchase records, and the technical details any internet request carries (such as app version, device model, operating system and IP address). We never give it your name, email or any details about you.

Updates. When it opens, Our Deck checks for new cards and fixes using Expo's EAS Update service. The request includes the app's version, update channel and platform, may include a random installation identifier Expo uses to deliver updates, and carries your IP address like any internet request. It never includes anything about your rounds.

Apple. If you have turned on Share with App Developers in your iPhone's settings, Apple shares crash reports and usage statistics with us, in aggregate. That setting is yours to change.

• Ask you to make an account, log in or give an email address.
• Show ads, or include advertising or tracking code in the app.
• Sell or share personal data, or track you across other apps and websites.
• Use your contacts, photos, camera, microphone or location.
• Ask about, record or act on anything either of you has done before.

This site has no cookies, no ads and no cross-site trackers. When you confirm you're 18 or over, your browser keeps that answer in its session storage until you close the tab, so you aren't asked on every page; it never leaves your browser.

To learn which parts of the site people find useful, it counts visits anonymously with PostHog, an analytics service, which stores them in the United States. Each visit gets a random ID that lives in the page's memory and is gone when you close the tab: nothing is stored on your device, there is no profile of you, and your IP address is discarded. Your browser's Do Not Track or Global Privacy Control setting turns it off. This is the complete list of what it counts:

• Pages viewed and left, with how far down you scrolled.
• Which parts of a page were on screen, and for how long.
• Answering the 18+ question.
• Using the page's own controls: dealing the sample cards, stepping through the phases or the phone tour, picking a preset or a mode, opening a question. For the couple picker, only that it was used, never which couple.
• Which links and buttons were followed, and from which part of the page.

It never sends card text, names, anything you type, or anything that identifies you.

The site is hosted by Vercel, which processes your IP address and basic request details to deliver the pages and keep the service secure. Vercel also works out from your IP address which country you are in, so the site can show App Store prices for that country. The country picks the page; it is not stored, and nothing is sent to us or anyone else.

If you write to us, we see your email address and whatever you send, and use them only to reply. Please don't include anything more personal than you need to. We delete support conversations once they're no longer needed.

Our Deck is for adults 18 and over, and asks you to confirm that every time it opens. It isn't directed at anyone younger, and we don't knowingly collect information from minors.

When you confirm you're 18 or over, Our Deck also asks Apple, through its Declared Age Range feature, whether your Apple Account's age range is 18 or over, and reads which country's App Store your phone uses. Both are used only on your phone to decide whether the app can open, are kept in memory until the app closes, and are never stored, sent to us or anyone else, or included in analytics.

Where data protection law such as the GDPR applies, we rely on our legitimate interest in understanding how the game is used and keeping it working to collect the anonymous usage counts and update checks, and on providing what you bought to process and restore purchases.

Under Brazil's LGPD, these are our legitimate interest (art. 7, IX) and carrying out the purchase you asked for (art. 7, V).

We are based in Canada. PostHog, RevenueCat, Expo and Vercel process data for us in the United States, under contracts that require them to protect it and use it only to provide their service. While it is there, it is subject to US law and may be accessed by US courts, law enforcement and national security authorities.

We keep usage events only for as long as they help us understand how the game is played, and never more than two years. Because they aren't linked to you, we can't usually find one person's events. Deleting the app also resets its random ID, so nothing new is connected to the old one. Purchase records are kept for as long as you might need to restore them.

Depending on where you live, you can ask to see, correct or delete personal data we hold about you, object to how we use it, and complain to your data protection authority. Write to contact@ourdeck.app. As we hold nothing that identifies you, there is usually nothing for us to return, but we will always answer.

If you're in Brazil: as a small processing agent we haven't appointed a data protection officer (encarregado); write to contact@ourdeck.app for anything about your data. You can also petition Brazil's data protection authority, the ANPD.

If this policy changes, we'll update this page and the date at the top. The previous version is available on request. For how the app itself works, see the terms of use.