Privacy Policy
Effective 3 November 2026
The short version
- You can play without an account. We only need a display name.
- We keep what's needed to run your table: your name, avatar, moves, chat and the play-chip ledger.
- If you sign in with Google, we also keep your name, email address and profile picture from Google.
- No ads, no tracking, no analytics, and we never sell your data.
This policy explains what information Club3P ("we", "us") collects when you use the website at club3p.com (the "Service"), why, and the choices you have. Club3P is run by [your legal name or company name], [registered address], India.
1. What we collect
Information you give us
- Display name and avatar you choose when you start or join a table.
- Chat messages and emotes you send at a table. Everyone at that table can see them.
- Game activity: your seat, moves, cards dealt to you, play-chip buy-ins and the table ledger. Cards are shown to other players only when the rules of the game reveal them.
- Fairness seeds: a random value your browser adds to each shuffle so anyone can check the deal afterwards.
If you sign in with Google
- Your Google account ID, name, email address and profile picture link, as shared by Google when you sign in.
- A sign-in session for each device. We store only a scrambled (hashed) version of the session key, not the key itself.
Collected automatically
- Technical logs kept by our hosting provider, such as IP address, browser type and the time of a request. These are used to keep the Service running and secure.
- Storage in your browser (local storage, not advertising cookies): a private player ID that keeps your seat if you reload, your sign-in session, your name and avatar, and your settings such as light or dark mode, table colour, sound and card squeeze.
We do not use advertising cookies, analytics tools or tracking pixels.
2. How we use it
- To run tables: seat players, deal cards, apply the rules, show the ledger and deliver chat.
- To let you check that every deal was fair.
- To keep your name, avatar and seat when you return or switch devices (signed-in players).
- To keep the Service safe: preventing abuse, cheating and attacks, and fixing problems.
- To reply when you contact us.
- If paid features are introduced, to manage your subscription.
Under India's Digital Personal Data Protection Act, 2023, we process your data on the basis of your consent (given when you choose to use the Service or sign in) and for legitimate uses permitted by law. You can withdraw consent at any time by deleting your account or stopping use of the Service.
3. Who can see it
- Other players at your table see your name, avatar, chips, moves, chat and any cards the game reveals.
- Service providers who help us run Club3P, only for that purpose:
| Provider | What for | What they receive |
|---|
| Render | Hosting the website and game server | All Service data, technical logs |
| Google (Sign-In) | Optional Google sign-in | Your sign-in request |
| Google Fonts | Loading the typeface | Your IP address and browser details |
| RANDOM.ORG or ANU Quantum Numbers, when switched on | Extra randomness for shuffling | No personal data |
| [payment provider] | Subscriptions, if introduced | Payment details (handled by them, not stored by us) |
- Authorities, if required by law or a valid legal request.
We never sell or rent your personal data. Some providers may process data outside India, with protections required by applicable law.
4. How long we keep it
- Tables, chat and ledgers are kept while the table is open. Today they're held in the server's memory and are erased when the server restarts. Once Clubs launch, a club's ledger is kept until the club is deleted.
- Accounts are kept until you ask us to delete them.
- Hosting logs are kept for the provider's standard retention period.
- Browser storage stays on your device until you clear it.
5. Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or update it (you can change your name and avatar yourself at any time);
- delete your account and personal data;
- name someone to act for you if you are unable to.
Email [contact email]. We'll reply within 30 days. If you're not satisfied, you may complain to the Data Protection Board of India.
6. Age
Club3P is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a child has used the Service, contact us and we'll delete their data.
7. Security
Connections to Club3P are encrypted (HTTPS). Session keys are stored only in hashed form, and each player sees only the cards the rules allow. No system is perfectly secure, but we take reasonable steps to protect your data.
8. Changes
We may update this policy. When we make a significant change, we'll post a notice on the site before it takes effect. The date at the top shows the latest version.
9. Contact and grievance officer
Grievance Officer: [name]
Email: [contact email]
Address: [registered address]
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.