Privacy Policy

Information we collect

When you sign in, we collect your email address. When you create or use a game, we store the room code, game format, player names you enter, round scores, running totals, game status, optional table notes, and timestamps. If you use the Contact form, we collect the email address, topic, message, and any optional name or room code you provide.

Our hosting and email-delivery providers may process routine technical information such as IP address, browser type, request time, and delivery status to operate and protect the service.

How we use information

We use this information to authenticate you, create and display game rooms, calculate and preserve scores, provide game history, deliver sign-in codes, respond to Contact form messages, prevent abuse, troubleshoot problems, and maintain service security.

• We do not process payments or wagers.
• We do not sell personal information.
• We do not use player names or scores for advertising.

Privacy-friendly usage analytics

We keep aggregate counts of visits and page views so we can understand whether RummyPoints is being used and which pages are useful. These aggregate records may include the page category, referring website domain, general device category, country code supplied by our hosting provider, and date. Room codes are removed from analytics paths.

RummyPoints does not store raw IP addresses, full browser user-agent strings, or a visitor identifier in its analytics database. A temporary browser-session flag prevents every page view from being counted as a new visit; the flag is not sent to the server and disappears when the browser session ends.

Cookies and sign-in

RummyPoints uses a secure, HTTP-only session cookie after successful email-code verification. It keeps you signed in for up to 30 days and is not available to page scripts. Signing out removes the active session from your browser and invalidates it on the service.

Sharing and service providers

We share information only as needed with infrastructure providers that host the website and database or deliver transactional email, when required by law, or to protect the rights and safety of the service and its users. A person with a valid room link can view that room’s player names, scores, and standings, so share room links only with people you trust.

Retention and your choices

Game history remains associated with the account that created it so it can be reopened later. Email verification codes expire after 10 minutes and are removed during later code requests. Session records expire after 30 days. To limit repeated Contact form submissions, we keep a one-way hash of the sender email and a timestamp for up to 24 hours; the message itself is delivered by email and is not stored in the game database. You may contact us to request access, correction, or deletion of account-related information; we may need to verify ownership before acting.

Children and changes

RummyPoints is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We may update this policy as the service changes. Material revisions will be identified by a new effective date on this page.

Contact

Questions or privacy requests can be sent through the Contact page.