Privacy Policy

Analytics & Performance

We use Vercel Analytics and Vercel Speed Insights to understand website traffic and monitor performance. They collect anonymous data such as:

• Page views and navigation patterns
• Core Web Vitals (load times, responsiveness)
• Device type (Desktop/Mobile)
• Country of origin

This data is aggregated and does not identify you personally. Both services are privacy-friendly and do not use cookies.

Error Monitoring (Sentry)

We use Sentry to track and monitor application errors and prevent crashes. Our Sentry configuration is strictly configured for privacy:

• No cookies or session replays are used
• All Personally Identifiable Information (PII) such as IP addresses, emails, and session tokens is stripped before data is sent
• Error data is routed through our own server rather than directly to Sentry, preventing third-party network requests from your browser

This ensures that error logs contain only technical diagnostic data and no personal details.

Rate Limiting

To protect against abuse, certain API routes use rate-limiting powered by Upstash Redis. We ensure your privacy by applying a one-way cryptographic hash to your IP address before it is used.

• Your actual IP address is never sent to or stored in the rate-limiting database
• The anonymized hash (which cannot be reversed back to your IP) is retained for a maximum of 10 seconds and then automatically flushed

Feedback (Tally)

We embed a Tally.so widget to optionally collect user feedback. Any information you choose to provide in the feedback form is processed and stored by Tally's servers securely.

When you open the feedback form, the current page URL (containing only game state data, such as the cards in your deck) is automatically included as context. This URL does not contain any personal identifiers. No other personal data is sent.