Privacy Policy

Last updated: May 22, 2026

Overview

detroit.games is a browser-based multiplayer card game platform. This policy explains what information we collect, why we collect it, and how you can control it. We keep things simple: we collect what we need to run the site and nothing more.

Information we collect

Account information

When you sign in with Google or Facebook, we receive your name, email address, and profile picture from the provider. We store these to identify your account. We do not access your contacts, posts, or any other data from these services.

If you sign in as a guest, no personal information is collected. Guest sessions are ephemeral and are not stored in our database.

Information you provide

During sign-up, you may optionally provide your birth year, region, and city. You may also add social handles (Facebook, Bluesky, Google) to your profile. All of these are voluntary.

Game data

We store game history, results, and statistics (games played, games won, hands played, etc.) to provide your stats page and leaderboards.

Technical data

We use Sentry for error and crash reporting. When an error occurs, Sentry may collect technical details such as browser type, operating system, and a stack trace. This data is used solely to diagnose and fix bugs. No personal information is intentionally included in error reports.

Cookies & local storage

We use a single HTTP-only session cookie (detroit_jwt) to keep you signed in. It is marked Secure and SameSite=Strict. It expires after 30 days.

We also use your browser's local storage to remember your display preferences (such as your last sign-in provider). detroit.games does not set tracking cookies of its own.

During sign-up, we ask for your consent preferences across three categories:

  • Functional cookies — preferences, theme, and in-game settings.
  • Analytics — anonymous usage and crash reports (Sentry).
  • Advertising cookies — if you opt in, Google and other third-party vendors may set cookies on your device (including Google’s DoubleClick DART cookie) to measure ad performance, limit how often you see the same ad (frequency capping), and serve ads relevant to your interests. These cookies are governed by Google’s advertising privacy notice and the privacy policies of any other vendors involved. If you do not opt in, only contextual (non-personalized) ads are shown and no advertising cookies are set.

You can change these preferences at any time from your account settings. You can also clear advertising cookies through your browser settings, opt out of personalized ads from Google at Google Ads Settings, or opt out of third-party vendor cookies through the industry opt-out page at aboutads.info/choices.

Advertising

detroit.games is ad-supported. Ads do not interrupt active gameplay. During a deal between hands an ad may be displayed, but it is not a full-screen ad.

Ads on detroit.games are served by Google AdSense. Google, as a third-party vendor, uses cookies and similar identifiers to serve ads on this site. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to detroit.games and other sites on the internet. Other third-party vendors and ad networks may also serve ads on detroit.games through Google’s ad systems.

When an ad is requested, Google and its ad partners may receive your IP address, browser user-agent string, and the advertising cookies described above. If you have opted into advertising cookies, this information may be used to serve interest-based ads, measure conversions, and cap frequency. If you have not opted in, only contextual ads are shown and no personal data is sent beyond the technical data inherent in the HTTP request (IP address and user-agent).

If you have opted into ad personalization separately, your age range and region (not your name, email, or other identifying information) may also be shared with Google for use in ad targeting. No personal data is sold.

Managing your ad preferences

You have several ways to control how ads are served to you:

Consent in the EEA, UK, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, we use Google’s Funding Choices consent management platform (a registered IAB Transparency & Consent Framework CMP) to obtain and record your consent for advertising cookies and personalized advertising before any ads are served. Your choices are stored in the IAB TCF consent string and shared with Google and its advertising partners. You can review or change your consent at any time using the “Manage privacy settings” link presented by the consent banner, or by clearing your browser storage to re-trigger the banner.

Outside these regions, advertising consent is collected through detroit.games’s own consent dialog and stored with your account preferences.

How we use your information

  • To authenticate you and maintain your session.
  • To display your profile, game stats, and match history.
  • To enable social features like friend invites and private games.
  • To diagnose errors and improve the platform (via Sentry).
  • To serve ads that support the platform.

We do not sell your personal information. We do not use your data for purposes beyond operating detroit.games.

Data sharing

We share data with third parties only as described below:

  • Google & Facebook — authentication only. We send nothing back to these providers.
  • Sentry — error reports containing technical (non-personal) data.
  • Google (AdSense) — ad requests, advertising cookies, and (if you opt in) age range and region. Google may share this data with its ad partners. See the Advertising and Cookies sections above for details, and Google’s how Google uses data page.
  • Google (Funding Choices) — in the EEA, UK, and Switzerland, your TCF consent string is shared with Google and its registered advertising partners.

We do not share your data with data brokers, analytics companies, or any other third parties.

Data retention & deletion

Your account data is retained for as long as your account exists. You can delete your account at any time from your account settings. When you delete your account:

  • Your profile, email, name, and picture are permanently deleted.
  • Your friendships and invite codes are removed.
  • Game history records are retained for leaderboard integrity but are anonymized — only your player ID remains, with no link back to your identity.

Your rights

European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data (the “right to erasure”).
  • Export your data in a portable format.
  • Object to or restrict processing based on legitimate interests.
  • Withdraw consent for advertising cookies and personalized ads at any time through the Funding Choices consent banner or your account settings.
  • Lodge a complaint with your local data protection authority.

The legal bases we rely on are: consent (for advertising cookies and personalized ads), contract (to provide the game and your account), and legitimate interests (for security, error reporting, and anonymized leaderboards).

California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising. detroit.games does not sell personal information for money. However, sharing data with Google for personalized advertising may qualify as “sharing” under the CPRA. You can opt out by:

  • Declining advertising cookies in your account settings.
  • Sending a Global Privacy Control (GPC) signal from your browser, which we honor as an opt-out of sharing.
  • Visiting Google Ads Settings to opt out of personalized ads from Google.

You will not be discriminated against for exercising any of these rights.

How to exercise your rights

Most rights can be exercised directly from your profile page (export, correct, delete). For anything else, contact us using the methods listed in the Contact section below.

Children’s privacy

detroit.games is not directed at children under 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). Our sign-up flow includes a birth year gate; users who indicate they are under 13 are not permitted to create an account.

Users aged 13–17. Minors who pass the age gate may create an account. For these users:

  • Advertising cookies and ad personalization are disabled by default and cannot be opted into.
  • Only contextual (non-personalized) ads are shown.
  • No age range, region, or other profile data is shared with the ad network beyond the technical data inherent in the HTTP request.
  • Social features (friend invites, profile handles) remain available.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us and we will promptly delete it.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

How to delete your data

You can permanently delete your account and all associated data at any time:

  1. Sign in to your account at detroit.games.
  2. Open your profile page.
  3. Scroll to the bottom and click the Delete Account button.

This will immediately and permanently remove your profile, email, name, picture, friendships, and invite codes. Game history records are anonymized so they can no longer be linked back to you.

Contact

Questions or concerns about this policy? File an issue on our GitHub issue tracker or use the in-game feedback button.