Privacy

The short version

We keep only what the games need. Your browser gets a random player id instead of an account, so the game knows which answers are yours. Your answers are shown only to the people in your round and are deleted on a schedule. The site sets no cookies, and we never sell data.

Ready to play? Pick one of the six free games.

What we store when you play

• A random player id, made in your browser and kept in its local storage (or in the app’s secure storage). It is not linked to your name, email or phone number. It works like a key: we never show it to anyone else.
• The first name you type, shown to the people who open your link and on the result.
• Your answers for each round, kept with the round so both of you can see the result.
• The round: the game, the deck, the language, which questions were dealt, whether it was made on the web or in the app, and when it was made, opened and answered.
• In the app only: your pairing (which two player ids are a couple, and how spicy each partner lets the decks get), a recovery code stored as a one-way hash, and a push token if you allow notifications, with the hour and time zone you chose for the daily question, and, when one partner buys the Couple Pass, a record that we shared it with the other partner and when it ends. If you start the yearly plan’s free trial, we also keep its end date and the price your store showed you, to send one reminder the day before it ends if you’re paired and notifications are on.
• If you buy a full report: the round you asked to buy it for, then the round it unlocked, your random player id, and the purchase id from RevenueCat with the date it was used, so the report opens for both of you and a refund can take it back. The purchase record stays after the round is deleted, without the round, so one purchase can’t unlock a second report.
• Daily counts of rounds made, opened and finished, and links and cards shared, per game, and launch-list sign-ups per page. They contain no ids, names or addresses.
• If you ask to be told when the app is out: your email address, whether you have an iPhone or Android, which page you asked on, when you asked and confirmed, and a random code for the links in our emails. It is kept apart from your player id. We send one email with a link to confirm, and only if you confirm, one email when the app is out, both through Resend, our email provider. Every email has a link to leave the list. If you join, this browser also keeps the time you did, never your address, so the form doesn’t ask again.

How long we keep it

• A round nobody opens is deleted after 30 days.
• Once a round is opened, it is deleted 90 days after the first person plays it, or 90 days after it was opened if nobody finishes.
• When either partner unpairs in the app, the couple’s answers and both recovery codes are deleted after 7 days, or at once if you choose "Delete our data", which also deletes both partners’ trial reminders. If you’ve already paired again, your current code is kept.
• A push token is deleted when either partner unpairs, or when it stops working. A free-trial reminder record is deleted a week after the trial ends.
• "Delete my data" in the app deletes everything tied to your player id straight away: your invites, recovery code, push token, trial reminder and the rounds you started. It also unpairs you, and your partner’s answers then follow the 7-day deletion above. In rounds someone else started, your answers are deleted too, and a round where you were the only partner is closed for good, so no one else can answer it.
• Unused invite codes expire after 30 days.
• A launch-list address is deleted once its launch email is sent, when you unsubscribe, or 14 days after its confirmation email if it isn’t confirmed. The whole list is deleted by 30 November 2026 at the latest.
• A report purchase record (purchase id, player id and date) is kept after its round is deleted, so a purchase can’t be used twice.

Who else sees anything

• Cloudflare hosts the site and the database. Like any web host it handles your IP address and country to deliver pages; we use the IP only for a per-minute rate limit and the country only to show the EU and UK checkout box, and store neither.
• Umami, a cookieless analytics tool we run ourselves, counts page views and a few events (a round sent, played or shared, and which game) without identifying you. It never receives names, answers or round links, and it respects Do Not Track.
• Full report purchases on the web: RevenueCat Web Billing and Stripe run the checkout and process your payment and email address, linked to your random player id. We never see your card details.
• Resend sends the confirmation and launch emails if you asked to be told when the app is out, and gets your address only for that.
• In the app: RevenueCat and Apple or Google process purchases, linked to your random player id. Firebase Cloud Messaging delivers notifications if you turn them on.
• Usage analytics in the app: the app sends anonymous usage events to our own analytics service, hosted on Cloudflare: which screens are opened, how long the app is in use, steps such as onboarding, notification and purchase screens, errors, and the app version, OS version, device model and language. Your country and location are never stored. It uses a random install id, separate from your player id, that resets if you reinstall. The service never receives your name, your answers or anything you type, or advertising identifiers, and we don’t store IP addresses. Raw events are deleted after 90 days, and the install record after 13 months without use. You can turn this off at any time in Us with "Share anonymous usage data", which also deletes what your phone already sent.
• Apple Ads: if you installed the app from an Apple Search Ads ad, Apple tells us which ad campaign and keyword it came from; we use this only to measure our own ads. That answer is kept with the install record and deleted with it. Nothing is kept for installs in the EU, EEA, UK or Switzerland.

The result card you can share shows first names, the game and the score. It never shows your answers.

Your choices

In the app, "Delete my data" (or "Delete our data" once you’re paired) deletes your data at once, and "Share anonymous usage data" in Us turns usage analytics off. To leave the launch list, use the "Leave the list" link in our emails, or email us. Clear this site’s data in your browser to drop your player id. To have a round deleted early, or for any privacy question, email hello@coupledeck.com with the round link.