Privacy Policy
Last updated: 7 July 2026
This Privacy Policy explains how RummyDen ("RummyDen", "we", "us") collects, uses, and protects your information when you use rummyden.com, privatefelt.com, and our related apps (the "Service"). RummyDen is a free, social card-game service for private play between friends. There is no real-money play, deposit, wager, or cash settlement of any kind.
Who we are
RummyDen is the data controller for the personal data described here. If you have any questions or requests, contact us at [email protected].
Information we collect
- Account information: a display name, and — if you sign in with Google — your email address and profile photo. Guest accounts store only a display name and a device token.
- Gameplay data: the rooms you create or join, rounds, scores, chat messages, and in-game preferences.
- Technical & usage data: IP address, browser/user-agent, device type, approximate region, and interaction events used for analytics, security, and abuse prevention.
- Support & feedback: messages, contact details, and any screenshots you choose to send us through the feedback form.
- Subscription data: if you buy RummyDen Plus, our payment processor (Stripe) handles your card details — we only receive a customer ID and subscription status. We never see or store your card number.
How we use your information
- To operate the games, host rooms, keep scores, and sync play between friends.
- To create and secure your account and prevent cheating, spam, and abuse.
- To understand product usage and improve the Service (analytics).
- To respond to your feedback and support requests.
- To show advertising on the free tier (see "Advertising and cookies" below).
Cookies and similar technologies
We use cookies and local storage to keep you signed in, remember your preferences, and measure usage. You can clear or block cookies in your browser settings, though some features (like staying signed in) may stop working.
Advertising and cookies (Google AdSense)
On the free tier we may display ads served by Google AdSense. To do this, third-party vendors — including Google — use cookies and similar identifiers to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to you based on your visits to our sites and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings (google.com/settings/ads).
- You can opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info/choices and youronlinechoices.eu.
- For visitors in the EEA, the UK, and Switzerland, we use a Google-certified consent mechanism to obtain consent for the use of advertising cookies where required.
See Google's Privacy & Terms (policies.google.com/technologies/partner-sites) for how Google uses information from sites that use its services.
How we share information
We do not sell your personal data. We share data only with service providers that help us run the Service, under contract and only as needed:
- Google — sign-in and, on the free tier, advertising.
- Stripe — subscription payments.
- Hosting & infrastructure — Cloudflare, Fly.io, Neon, and similar providers that host the app and database.
- Analytics — usage analytics to improve the product.
We may also disclose information if required by law or to protect our rights and users' safety.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent.
- EEA/UK (GDPR): our legal bases are performance of our service to you, our legitimate interests (security, analytics, product improvement), your consent (e.g. for advertising cookies), and legal obligations.
- California (CCPA/CPRA): we do not sell personal information; you may request access to or deletion of your data.
To exercise any right, email [email protected]. We'll respond within the time your law requires.
Data retention
We keep account and gameplay data while your account is active and for a reasonable period afterwards for security and legal purposes, then delete or anonymize it. You can request deletion at any time.
Children
RummyDen is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.
International transfers
We operate globally, so your data may be processed in countries other than your own, including the United States, with appropriate safeguards in place.
Changes to this policy
We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, provide a more prominent notice.