Privacy Policy

Whist ("we", "us") is an online card game available on the web, iOS, and Android. This policy explains what we collect, why, how we use it, and the choices you have. We don't sell your data, we don't show ads, and we don't use third-party advertising or analytics SDKs.

• Account. Your email address and username. If you sign in with Google or Apple, we receive a verified identifier and email from that provider instead of a password; if you register with email, we store a securely hashed password.
• Profile (optional). A country/flag and a profile picture if you choose to add them.
• Gameplay. Your games, bids, calls, scores, rating, and tournament participation — the data needed to run matches and standings.
• Device & notifications. A push-notification token and device identifier so we can send game and tournament alerts.
• Technical & diagnostic. IP address, app version, and app logs/diagnostics used to operate the service and fix problems.

We do not collect precise location, contacts, or financial information.

• Provide the game: accounts, matchmaking, real-time multiplayer, and tournaments.
• Send notifications you've enabled (e.g. when a tournament match is ready).
• Keep your account secure (sign-in, optional two-factor, password reset).
• Operate, troubleshoot, and improve the service.
• Respond to your support requests.

We share data only with service providers who process it on our behalf to run the app — not for their own purposes, and never sold:

• Google and Apple — to verify "Sign in with Google/Apple" tokens.
• Resend — to deliver transactional email (verification, password reset, notices).
• Firebase Cloud Messaging (Android) and the Apple Push Notification service (iOS) — to deliver push notifications.

Other players can see your public profile — username, avatar, and country — and your results in shared games and tournaments.

We keep your information while your account is active. You can permanently delete your account at any time, directly in the app: Account → Delete Account. Deletion is immediate and irreversible — it removes your account and associated data (profile, games, ratings, tournament history, sessions, and push tokens) from our systems. You can also email us to request deletion.

All data is encrypted in transit (HTTPS/WSS). Passwords are stored hashed, and optional two-factor authentication is available. No system is perfectly secure, but we take reasonable measures to protect your information.

Whist is a general-audience game and is not directed to children under 13. We do not knowingly collect data from children under 13; if you believe a child has provided us data, contact us and we will remove it.

We may update this policy from time to time. We'll revise the effective date above and, for material changes, provide notice in the app.

Questions or requests? Email support@whist-dot.com.