Privacy policy

1. What we collect

Account: your email address, nickname, chosen language and a password hash (never the password itself), or the ID of your Google or Discord account if you sign in with it. Guests get an account without an email.

Play: the games you played and their results, the nicknames you used, and the chat messages you sent at the table.

Stake games: the buy-ins and fees you paid, the payouts you received, the room and the time of each game, and the time you confirmed that you are 18 or older. Staff can stop an account from joining stake games, and that mark is stored too. These records are part of the token ledger and are kept as long as it is.

Shop: your token balance and every change to it, your unlocks, your purchases (amount, date and the payment provider's reference) and the promo codes you used. We do not see or store your card number.

Technical: when you sign in we keep your session with its IP address and browser description for security. Server logs and the audit log of moderator actions can contain IP addresses.

2. Why we use it, and on what basis

To provide the game and your account, including matches, history and the shop (performance of a contract). To keep the service safe, prevent cheating and abuse and moderate chat (our legitimate interest). To keep accounting records of purchases (legal obligation). We do not use your data for advertising and we do not sell it.

3. Cookies and local storage

We set only what the site needs to work: a sign-in cookie that keeps you signed in, and a language cookie that remembers your language. Your device settings (light or dark mode, sound, motion, last nickname) are kept in your browser's local storage and never sent to us.

We use no analytics, advertising or tracking cookies. Because of this you are not asked to accept cookies; a short notice tells you about them. If we ever add optional cookies, we will ask for your consent first.

4. Who receives it

Other players see your nickname, your moves and your chat messages in the game you share. Our providers process data for us: the hosting provider of our server, the email service that sends sign-in and password messages, the payment provider Stripe for purchases, and Google or Discord if you choose to sign in with them. We give data to authorities only when the law requires it.

Where a provider is outside the European Economic Area, transfers rely on the safeguards the law provides, such as standard contractual clauses.

5. How long we keep it

Account data and game history are kept until you delete your account. Records of purchases and the token ledger are kept as long as accounting law requires; after you delete your account they stay without your name or email. Sessions end when they expire or you sign out.

6. AI-generated boards

New boards are generated by our team from a description a team member writes; players do not type such descriptions. The description is sent to our AI provider, OpenAI, to create the board and to check it for harmful content, and our team is told to leave personal data out of it. The provider processes it for us under a data processing agreement; it may be processed outside the European Economic Area under the safeguards the law provides. If you add a picture to a board you generated earlier, it is painted from the board's own generated names only, never from your text; a picture you upload yourself is sent to the same provider for a content check, and is saved again without its metadata. Only upload images you have the right to use.

We keep the description with the board and in a log of generation requests, so we can limit abuse. For a board you generated yourself before this change, it is deleted when you delete your account and is part of your data export, and that board stays private to you. Boards made by our team are published by us. We cannot promise that generated content is free of third-party rights: boards are built to be original and screened for known names, and you may use them only in the game.

If you order a board with the request form, everything you write in it (the title, currency, theme, mood, group themes and tile names) is read by our team and its theme and names are sent to the same AI provider to create the board and to check it for harmful content. Do not write personal data or names of private people in it. We keep the form until the board is delivered or the order is rejected, and until you delete your account; if you cancel an order before we start, the form is erased at once. It is erased with your account and is part of your data export. A board we deliver is private to you.

7. Your rights

You can ask us for access to your data, a copy in a portable format, correction, deletion, restriction of processing, and you can object to processing based on our legitimate interest. On your profile page you can download your data as a file, change your nickname, and delete your account yourself. For anything else write to notifications@landlords-table.com.

If you think we handle your data unlawfully you may complain to your data protection authority.

8. What deleting your account does

Deleting removes your sign-in methods, sessions, unlocks and the chat messages you sent. Your nickname in game history is replaced with “Deleted player”. The match itself stays for the other players, and its replay may still show the nickname you played under, without any link to you. Tokens left on the balance are lost. If you made purchases, an empty record without your name or email is kept for accounting.

9. Children

The game is for people aged 16 and over. If you believe a child has given us data, write to us and we will delete it.

10. Changes

We will update this policy when what we do with data changes. The date at the top shows the latest version.