Privacy policy

Keeping score in Cardzo needs no account and sends nothing anywhere. Playing ranked with friends is optional, and this page says exactly what that stores, where, why and for how long. The website counts page views without cookies, and that is all. There is no advertising anywhere.

Who is responsible

Cardzo, the iPhone app and this website, is made and run by Jonas Egeskov Nielsen, a private individual in Denmark. For everything described on this page he is the data controller in the sense of the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act. Write to jonsegeskov29@gmail.com with any question or request.

In short

• The scorepad keeps everything on your phone. Signed out, the app makes no network requests at all.
• If you choose to sign in, the server stores your display name, the circles you are in, the game nights you host or join, and the match records your table shares. We ask Apple only for your name, never for your email address.
• There is no advertising, no analytics and no tracking in the app. The website uses Vercel Web Analytics, which sets no cookies and cannot follow you to other sites.
• Delete account, inside the app, removes your account from the server. Match records shared with a circle stay with that circle, because they are also the other players’ data; your name can be removed from them on request.

The scorepad: on your phone only

Player names, matches, scores, house-rule settings and preferences live in a database on your device and nowhere else. Cardzo contains no advertising, no analytics, no crash reporting, no attribution or install-tracking software, and no third-party software development kit that reports anywhere. Deleting the app deletes all of it. The dice roller reads the phone’s accelerometer only to notice a shake; nothing is recorded.

You will usually type other people’s names into a scoresheet. While the app is signed out that information never leaves your phone, and a scoresheet kept among friends is the kind of personal or household use that data-protection law leaves alone.

The optional account

To play with friends you can sign in in one of two ways: with a name alone, which creates a guest account on that phone, or with Apple. A guest account can later be tied to Apple, which keeps the same account. Nothing in the scorepad requires either. Signing out returns the app to exactly the offline product with your local history intact, and you can delete the account from inside the app at any time.

If you sign in, this is what is stored on the server, and why:

• An account identifier. A random identifier created by our authentication provider when you continue with a name, or the random identifier Apple issues for Cardzo when you sign in with Apple, with a matching account record at our authentication provider. Needed to know which account is yours. Kept until you delete the account.
• Your display name. The name you type when you continue with a name, or your first and last name as Apple passes them the first time you sign in with Apple. You can change it at any time in the app. It is shown to the members of your circles and to everyone at a game night you host or join. Kept until you delete the account.
• Guest accounts stay until deleted. A guest account can only be reached from the phone that created it. Signing out of it, or deleting the app, does not delete it from our server; use Delete account in the app first, or write to us and we remove it.
• No email address. A guest account has none. From Apple we request only your name, never your email address. Should Apple nonetheless include an address in its sign-in token, our authentication provider stores it with the account record; we never use it to contact you, and it is deleted with the account.
• Circles. The circles you create or join: their names, their invite codes, whether ranked matches count and whether results need confirmation, and when you joined. Visible to the other members. Your membership is deleted when you leave the circle or delete the account. A circle that everyone has left keeps only its name and code; write to us and it is removed.
• Game nights. Which game nights you host or join, the night’s code and when it ends (a night expires by itself after at most 18 hours). Kept with the circle’s history, because finished matches refer to the night they were played on.
• The live sheet. During a game night, the phone that keeps score uploads the running scoresheet of every match started at the night, rated or not, after each score: the game, the players’ names as typed, the entries and the settings, so the people at the night can follow it on their own phones. Only that phone writes the sheet; only the circle and the people at the night can read it. The row is deleted when the host leaves the finished match or ends it early; a sheet simply left open stops being shown after six hours and is removed when the host’s account is deleted.
• Scores typed by players at the night. A player at a game night can type a score into their own column of the live sheet on their own phone. That score is stored, with their account identifier, only until the host’s phone has applied it to the sheet (normally within a second or two) and is then deleted; it is also deleted when the sheet is. Only the player who sent it and the host can read it.
• Rated match records. When your table plays a ranked match, the phone that keeps score uploads the finished record: the game, the players (with their names as entered, including guests who have no account), every entry, the settings in force, who recorded it, and the previous version if it is later edited. Each member’s confirmation or dispute is stored with their account identifier. These records exist so your circle can have the league table and ratings it asked for; the undo history is stripped before upload. They are shared records: they belong to everyone who played, so they stay with the circle when one player leaves or deletes their account. The deleted account is unlinked from them, and on request we replace the name inside them with a neutral placeholder.

Ratings and league tables are computed on your own phone from those records. The server stores what phones send and computes nothing; there is no profiling and no automated decision about you.

Legal basis. Storing the account, circles, game nights, live sheets and match records is necessary to provide the features you signed in for (GDPR Article 6(1)(b)). Keeping a shared match record after one of its players leaves rests on the legitimate interest of the other players in their own history (Article 6(1)(f)); you can object by asking to have your name removed, as described above. The short technical logs our providers keep rest on the same legitimate-interest basis, for security.

Guests. If you host, you are typing other people’s names into a sheet that is uploaded. Use names the people at your table are happy to see on the circle’s boards; a first name or a nickname is enough.

Where the data is and who handles it

• Supabase (Supabase, Inc.) hosts the database and the sign-in service. The project runs in Amazon Web Services’ Stockholm region (eu-north-1), so the data is stored inside the European Union. Supabase processes it only on our instructions under its data processing addendum, which includes the EU Standard Contractual Clauses for any support access from outside the EU.
• Apple operates Sign in with Apple as an independent controller under its own privacy policy. Apple gives us your identifier and, on the first sign-in, your name (see above regarding email); we do not tell Apple what you do in the app.
• Vercel (Vercel Inc., USA) hosts this website; see the next section.

We do not sell personal data, share it with advertisers, or pass it to anyone for their own purposes.

This website (cardzo.app)

The rules pages, score sheets and tools are static files served by Vercel. The fonts are served from cardzo.app itself; nothing is loaded from advertising networks, social platforms or font services.

Server logs. Like any host, Vercel records an IP address, a timestamp, the page requested and the browser’s user-agent string when a page is served. The logs exist to run and secure the site, are kept for a short time, and are processed by Vercel as our processor under its data processing agreement, which includes the EU Standard Contractual Clauses.

Page-view counts. The site uses Vercel Web Analytics to see which pages are read. For each page view it records the page, the referring page, your browser and device type, and the country your IP address resolves to. It sets no cookies and stores nothing on your device; visits are tied together by a hash of the request that Vercel discards after 24 hours, and the IP address itself is not stored. It cannot recognise you on other sites. Legal basis: our legitimate interest in knowing how the site is used (GDPR Article 6(1)(f)). The counts are aggregated and retained for the period of our Vercel plan. If your browser blocks scripts, nothing is counted.

The browser scorepad. What you type into the score sheet on a game page stays in your browser’s local storage so that a reload does not lose the sheet. It is never sent to us. Clearing the site’s data in your browser removes it.

There is no email form on this site. The earlier launch sign-up form was removed on 9 September 2026; the addresses typed into it were validated and discarded, never stored, and no mailing list exists.

Children

Cardzo is rated 4+ and the scorepad collects nothing from anyone, children included. Signing in requires an Apple ID and, under our Terms of use, you must be at least 13 to do so, or older where your country sets a higher age for online services. We do not knowingly keep accounts for younger children; a parent or guardian who believes a child has one can write to us and it will be deleted.

Your rights

Under the GDPR (and the UK GDPR if you are in the United Kingdom) you can ask to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive a copy of it in a portable form. In practice:

• Erasure is built in: Delete account inside the app, which removes the account, profile and memberships immediately. Removing your name from shared match records is done on request by email.
• Correction of your display name is built in: edit it in the app.
• Access and portability: email us and you receive a readable export of your account, circles and the match records you appear in, within one month.
• Objection: email us; where a legitimate interest is the basis we stop unless there is a compelling reason not to.

You also have the right to complain to a supervisory authority. Ours is Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark (datatilsynet.dk). You may instead complain to the authority in the country where you live; in the United Kingdom that is the Information Commissioner’s Office (ico.org.uk).

Security

Data travels encrypted (TLS). Access rules on the database mean a circle’s data can only be read by its members, a live sheet only by the people at the table, and a live sheet or match record can only be written by the phone that keeps score. Our providers encrypt stored data at rest. No system is perfect; if a breach ever affects you, we will tell you and Datatilsynet as the law requires.

Changes

When this page changes, the date below changes with it. A change that alters what is collected is announced in the app’s release notes, never edited in quietly.

Contact

Questions, requests and complaints: jonsegeskov29@gmail.com. The Terms of use and the refund policy are separate pages.

Last updated 28 September 2026.