Privacy at CleanSpades

This is the privacy notice for our invite-only friends-and-family playtest. It has not been reviewed by a lawyer. It explains what we collect and how we use it during closed beta; it does not attempt to map every consumer-privacy law. We will replace it before access opens more broadly.

Information we collect

• Invite codes, whether they can be used, and redemption history.
• Waitlist email and records needed to send access news.
• Cell number, table name, account identifiers, and sign-in records.
• Game records: tables, seats, bids, card plays, scores, and connection events.
• Support messages and the account or technical context needed to answer them.
• IP address, browser and device signals, and Cloudflare Turnstile results used to reduce automated sign-up and waitlist abuse.
• Logs and error details needed to operate and protect the service.

How we use it

We use this information to check invite eligibility; create, sign in, and recover players; run tables; send waitlist access news; prevent automated abuse; answer support; investigate bugs and fair-play concerns; and comply with law.

Who helps us run it

• Cloudflare for DNS, TLS, proxying, and Turnstile bot checks.
• Twilio Verify for one-time text codes. This closed beta uses Twilio’s shared sender; we do not have our own incoming SMS number yet. If texting is down, someone on the CleanSpades team may give you a code directly. We do not put that code in email.
• Resend on mail.cleanspades.com for waitlist mail. If mail is not sending, we still store your waitlist email.
• Fastmail for human replies at [email protected].
• The host that runs the CleanSpades app and its database.

These providers process information for the services they supply to us.

Waitlist email is not a login

The email you leave on the waitlist is used for CleanSpades access news. It does not create a player and cannot sign you in. An invite is not a password, a text code, or a referral link.

Cookies and sessions

We set a signed cs_account cookie and keep a matching server session we can revoke when you log out. We may set cs_phone_hint so this browser can show the last national number and cs_invite after an invite is accepted. When Turnstile is active, Cloudflare may process browser, device, network, and challenge data on the cell-code and waitlist forms. Recruit cookies are not used for admission while the playtest is invite-only. We do not run a separate analytics suite on these pages.

What we do not do

We do not sell personal information. We do not use a one-time text code as a password. Support will never ask you to send one by email.

How long we keep it

We keep playtest account, game, invite, waitlist, session, and support records for the life of this closed beta so tables, sign-in, and bug hunts still work. We may delete a record sooner if you ask and we can do so without breaking an active review or a legal hold. We will publish shorter periods if the product leaves closed beta.

Your requests

Email [email protected] to ask what we hold, to correct a table name, to leave the waitlist, or to ask us to delete a player. We will do that when we can. We may need to confirm the cell or invite that matches the request.

Who this playtest is for

This playtest is intended for invited adults. The app does not verify age today.

Changes

We will post changes here and update the effective date.