Privacy Policy

Effective date: July 26, 2026

This Privacy Policy explains how EvDev Studios, LLC (“we,” “us,” “our”), an Ohio limited liability company, handles personal information in House Rules Cards (the “Service”) — the website, this wiki, and the mobile apps.

Information we collect

Information you give us

Account details — email address and password (the password is handled by our authentication provider and stored only as a hash we never see), username, display name, and, if you upload one, a profile picture.
Profile and social content — favorite game, equipped cosmetics, friends, clubs you belong to, club names and descriptions, and club chat messages.
Content you create — custom rulesets you build or publish, and rule requests you submit.
Reports and support messages — when you report a player or contact us, we keep what you send, including the reason and any details.

Information created by playing

Gameplay records — completed matches (game type, participants, scores, results, timestamps), per-game statistics and streaks, Elo ratings, and tournament results.
Integrity signals — automated flags we generate when a result pattern looks like cheating (for example, an implausible win rate), used to review accounts.

Information collected automatically

Device and connection data — IP address, browser or device type, and app version, used to operate the Service, apply rate limits, and diagnose problems.
Local storage — we store settings and game preferences on your device.
Error diagnostics — if something crashes or errors, our error-monitoring provider receives a technical report, which may include your IP address.
Push tokens — if you enable notifications, we store the push token needed to send them.
Advertising identifiers — ad networks in the app and on the web may access device or cookie identifiers, as described under “Advertising” below.

Purchase information

When you buy gems, our payment providers process the transaction and send us a confirmation. We record what was purchased, when, and the resulting gem balance. We never receive or store your full payment card number.

How we use information

We use the information above to:

create and operate your account and let you play games online;
keep statistics, ratings, match history, clubs, and tournaments working;
deliver purchases and maintain gem balances and entitlements;
send transactional and gameplay notifications you have opted into;
detect, investigate, and prevent cheating, abuse, and fraud, and enforce our Terms of Use;
diagnose problems, monitor reliability, and improve the Service;
show advertising, and measure it in aggregate;
comply with legal obligations.

Where the GDPR or similar law applies, our legal bases are: performance of a contract (operating your account and games), legitimate interests (security, abuse prevention, improving the Service, non-personalized advertising), consent (push notifications and personalized advertising where consent is required), and legal obligation.

What other players can see

Some of your information is public within the Service by design: your username, display name, profile picture, equipped cosmetics, per-game statistics, Elo rating and leaderboard position, club membership, match history involving you, and any custom rulesets you choose to publish. Your email address is never shown to other players.

Club chat messages are visible to other members of that club. They are stored unencrypted and are subject to automated profanity filtering — do not use club chat for sensitive information.

We do not sell your personal information. We share it only with service providers who process it on our behalf, and only as needed to run the Service:

Supabase — database, authentication, and file storage.
Railway — hosting for the realtime game server.
Vercel — hosting for the website and wiki.
Stripe — web payments.
RevenueCat, Apple, and Google — mobile in-app purchases.
Google AdSense and Google AdMob — advertising.
Expo — push notification delivery.
Sentry — error monitoring.

We may also disclose information if required by law or valid legal process, to enforce our Terms, or to protect the rights, safety, and property of our users or of EvDev Studios, LLC. If the business is sold or merged, account information may transfer as part of that transaction.

Advertising

Advertising in the Service is served by Google. Ad networks may use cookies or device identifiers to limit repetition, measure performance, and — where allowed — personalize what you see. On mobile, we ask for your consent before any personalized advertising where that is required by law or platform rules (including Apple’s App Tracking Transparency prompt), and you can decline.

You can review Google’s practices and your options at policies.google.com/technologies/ads. Purchasing the ad-free upgrade removes banner advertising from the app.

Cookies and similar technologies

The Service uses local storage and cookies to keep you signed in, remember your settings, and support advertising and error monitoring. Blocking them may keep parts of the Service from working.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us at the address below and we will delete the account and its data.

How long we keep information

We keep account information for as long as your account exists. Gameplay records and moderation records may be kept after an account is closed where we need them to keep statistics, leaderboards, and abuse prevention accurate, and to meet legal and accounting obligations. Purchase records are kept as long as required by tax and financial rules.

Your rights and choices

Whatever your location, you can:

view and change your profile information in the app;
turn push notifications off in your device settings;
request a copy of your personal information;
request deletion of your account and personal information.

To request access or deletion, email us at support@houserulescards.com from the address on your account. We will respond within the time required by applicable law. Note that deleting your account removes your gems, entitlements, and cosmetics with no refund, and does not remove content already shared publicly (such as published rulesets) unless you ask us to remove that too.

Depending on where you live, you may have additional rights — for example, under the GDPR (access, correction, deletion, restriction, portability, objection, and the right to complain to a supervisory authority) or under California law (to know, delete, correct, and not be discriminated against for exercising those rights). We do not sell or share personal information for cross-context behavioral advertising as those terms are defined by California law.

Security

We use industry-standard measures to protect your information, including encrypted connections, hashed passwords, server-side authority over game state, and database-level access controls. No system is perfectly secure, so we cannot guarantee absolute security.

International transfers

We operate in the United States, and our providers may process information in the United States and elsewhere. If you use the Service from outside the United States, you understand that your information will be processed there.

Changes to this policy

We may update this Privacy Policy as the Service changes. We will revise the effective date above and, for material changes, give notice in the app or by email.

Contact

To reach out with any questions, email support@houserulescards.com