Privacy Policy

1. Who this policy covers

Tileclack (“we,” “us,” or “our”) provides the game and community services described here. We are responsible for the information we process to provide those services. This policy covers guests, account holders, and people who contact us. It does not cover a third-party website or sign-in provider’s independent use of information; their own privacy notices apply.

Personal information means information that identifies you or can reasonably be linked to you, including an account identifier or a combination of gameplay and account records.

2. Information we collect

• Account and profile information. Your email address, display name, handle, verification status, profile picture, privacy preferences, and chosen login methods. Password login stores a password hash. Passkeys store a public credential and registration details; your device’s biometric unlock data and private key are not sent to Tileclack.
• Game and community activity. Guest names, room membership and invitations, game state and actions, connection status, season balances and results, point transactions, friend requests, friendships, blocks, and reports or moderation actions.
• Learning progress. Completed lessons, stars, lesson and independent-check revisions, course start and completion times, and your most recently opened lesson, linked to your account.
• Messages and support. Table chat and information you choose to send in a report or support email, including attachments. Please avoid sending passwords, login codes, or unrelated sensitive information.
• Connection and security information. IP addresses, browser or device information associated with sessions, request and event times, errors, and records needed to detect misuse, secure accounts, and operate the service.
• Information from others. Other players may invite, block, or report you. If you choose a linked login, the provider supplies the identifiers and profile information needed for that login. A provider photo is retrieved if you choose to use it.

The current playtest does not collect payment-card details, banking information, or government identification for wagering. Season points are free game points with no cash value or prizes.

3. How we use information

We use information to run and save games, save learning progress across devices, reconnect seats, authenticate accounts, display profiles and standings, deliver invitations and account emails, provide support, honor privacy choices, and maintain reliable services. We also use relevant records to prevent abuse, investigate reports and point manipulation, enforce our terms, resolve disputes, and meet applicable legal obligations.

Where a legal basis is required, we process information as necessary to provide the service you request, pursue legitimate interests in service reliability and community safety, comply with legal obligations, or act on consent when required. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

4. Visibility and sharing

Other players. Your display name, handle, selected photo, and season standings are public. Room participants see the game information and chat intended for their table. Your private hand is not included in another player’s game view. Friend lists, email addresses, login identities, and private point histories are not published on profiles. Online presence is shared only between confirmed friends who enable it. Reports are available to authorized moderators.

Service providers. We use hosting, database, storage, backup, and email services to operate Tileclack. These services process the information needed for their role. Linked sign-in providers also process your sign-in under their own terms and privacy policies.

Legal and safety needs. Information may be disclosed when necessary to comply with applicable law or valid legal process, investigate fraud or abuse, establish or defend legal claims, or protect the rights and safety of players and the service. If the service changes ownership, relevant information may be transferred as part of that transaction, subject to applicable law and this policy.

We do not sell personal information or share it for cross-context behavioral advertising. The current playtest does not use third-party advertising trackers.

5. Cookies and device storage

Account cookies keep you signed in and support authentication. Browser storage remembers your guest name, seat credentials, invitations, and appearance choices. Learning progress is cached on your device, including pending saves, and synced to your account. The solo game also saves preferences and an unfinished game on your device so you can resume. Downloaded game assets may be cached to reduce loading time.

You can clear cookies and site data through your browser. Doing so may sign you out and remove local preferences, saved solo games, and the credentials needed to reclaim a guest seat. It does not delete your server account or automatically remove its records. On shared devices, leave guest rooms and sign out before handing over the device.

6. How long information is kept

• Table chat: held in server memory, with messages expiring after five minutes. A player may independently copy or capture a message; we cannot remove their copy.
• Room and game records: eligible for cleanup after 24 hours without activity. Unfinished counted hands remain until settlement.
• Account and season records: retained separately from temporary rooms to maintain your account, social features, season history, and point records.
• Support, security, and moderation: retained as needed to handle requests, investigate issues, protect the service, resolve disputes, and meet applicable obligations.
• Backups: copies can remain after deletion from the live service until backup retention and replacement cycles complete. Local device data remains until it is replaced or cleared.

Account deletion removes login methods, sessions, profile photos, learning progress, and social connections, and replaces the stored name, email, and handle with deleted-player values. Pseudonymous point transfers remain to preserve the other players’ records; deletion does not rewrite settled game results. Security and moderation records may remain separately. An unfinished counted hand must settle before account deletion can complete.

7. Your choices and privacy rights

In your account settings, you can edit your profile and control friend requests and online visibility. In Your data, you can download your account information or request permanent account deletion after a recent sign-in.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or receive a portable copy of your personal information; object to or restrict particular processing; withdraw consent; or appeal a decision about a privacy request. These rights can be subject to exceptions, including records needed to protect other players or comply with law.

To exercise a right, ask about a retained record, or appeal a response, email support@tileclack.com. Tell us what you are requesting and the email or handle associated with your account. We may ask for proportionate information to verify your identity or an authorized representative’s authority. We will respond within the time required by applicable law and explain any limits on fulfilling the request. We will not penalize you for exercising applicable privacy rights.

You may also have the right to complain to the data-protection authority or privacy regulator where you live.

8. Security and processing locations

We use safeguards including HTTPS, hashed passwords, restricted access to account and moderation tools, and controls against abusive requests. Profile-photo uploads are cropped and stripped of image metadata. No internet service or storage system can guarantee complete security.

Our current infrastructure and configured storage and email services process data in the United States. A sign-in provider or another service provider may process information in other locations under its own arrangements. Where applicable law requires safeguards for an international transfer, we must use an appropriate lawful transfer mechanism.

9. Children’s privacy

Tileclack is a general-audience service and is not directed to children under 13. If you believe a child has provided personal information without any consent required by law, contact us at support@tileclack.com so we can investigate and take appropriate steps, including deletion where required.

10. Changes to this policy

We will update this page and its revision date when our practices change. Where required by law, we will provide additional notice or request consent before a material change takes effect. Please review this policy periodically.

11. Contact us

For questions about this policy, privacy requests, or help with your information, contact Tileclack at support@tileclack.com.