Privacy Policy
Privacy Policy Last updated: 26 October 2026 · Effective immediately Spedes is a small site and collects very little. This page explains exactly what is stored, what is shared with third parties, and how to turn the optional parts off. 1. What we store on your device Everything Spedes stores lives in your own browser, under four keys. None of them is shared with advertisers, and the game itself is served as static files. Only two things send anything to a Spedes server: signing in (section 1a), which is optional, and the game statistics in section 2. Both are described below. Your cookie choice (local storage, key spedes.cookie-consent ) — whether you accepted or declined analytics and advertising, stored locally so the banner does not reappear on every page. Table preferences (local storage, key spedes:prefs ) — seven settings from the Play page: animation speed, the sound switch, the confirm plays setting, the table-talk switch (whether the other seats chat), which card face and card back were in use last time, and whether you have already dismissed the first-visit introduction (so it is not shown again). They are remembered so the table opens the way you left it. The card style is the one preference you do not set: a new face and a new back are drawn at the start of every match, so the card values are simply a record of the last one you played. The same key also holds a random visit number used by the game statistics in section 2 — it identifies a browser profile, contains nothing about you, and is cleared if you clear site data. Match progress (session storage, key spedes:match ) — while a match is in progress, the Play page keeps the mode you were playing, the running score, bag count, hand number and whose deal it is, so an accidental refresh or a closed tab does not throw the whole game away. It is discarded when you close the tab or start a new game; a hand in progress is never saved, only the score between hands. Anonymous game record (local storage, key spedes:guest ) — a random identifier generated on your device. It lets the games you play without an account be added to your record if you later sign in. It contains no name or email, and it is deleted from your device the moment it has been claimed. Only these four. The Play page writes nothing else to your browser. Apart from the optional account in section 1a and the visit number described in section 2, none of them is ever transmitted anywhere — they are read back by the same page that wrote them. Outside the consented services described in sections 3 and 4, there is no analytics cookie and no advertising cookie. 1a. If you choose to sign in (optional) Playing Spedes never requires an account. If you do sign in, we hold: your email address, a nickname you choose, an avatar picked from our preset library, a record of the games you have played, and a session cookie ( spedes_session , HTTP-only and Secure) so you stay signed in. There is no password. Signing in means entering a six-digit code emailed to you, which expires in ten minutes and can be used once. We never hold a password, so we cannot lose one. Nicknames are public — a nickname appears on the leaderboard, so please do not use your real name or anything you would not want displayed. You can delete everything from the Sign in page, which removes your account, your session and every game recorded against it. We keep no backups once that is done. Clearing your browser data, or using private browsing, removes all of the above; the site then simply falls back to its defaults. If storage is blocked entirely (some private-browsing modes block writes), Spedes just forgets these settings and keeps working. 2. Game statistics (first-party) We keep a short list of numbers about how the game itself is used: which mode was played, how many hands it ran, how long it took, whether it reached a result or was left part-way, and what kind of device it was played on (touch or desktop, plus a coarse screen-size bucket). These are the things the pages cannot tell us — whether a mode ever gets finished, whether a hand stalls — and we collect them to keep the game playable. This is first-party: it goes into our own database, it is never sent to Google, it is never used for advertising, and it is never combined with the data in section 4. It is switched on for everyone, because it is part of running the game rather than an extra — so it is also deliberately limited: A random visit number, not an account. Alongside the numbers we store one random identifier generated on your device (section 1), so that two visits can be told apart. It is not derived from anything about you, and it is not connected to your email unless you sign in. We never store your IP address. It is combined with a secret value that changes every day and the result is hashed; the address itself is discarded immediately. That is enough to count how many distinct people played on a given day, and not enough to follow one person from one day to the next — no matter who is reading the table. For visitors in the EEA, the UK and Switzerland we do not store even that hash. No user agent, no fingerprint. We do not read or keep your browser s user-agent string, your screen size in pixels, your fonts or anything else that could single you out. Location stops at the country. Cloudflare tells us the two-letter country of a request and we store that, and nothing more precise. Deleted after 90 days. Per-game records are pruned after 90 days. Daily totals, and the day a visit was first seen, are kept longer because by then they cannot be tied back to any individual. If you have signed in, these game records are attached to your account and are deleted with it (section 6). If you have not, there is nothing that identifies you in them. 3. Website analytics (optional) With your consent we load Google Analytics 4 to understand which pages players actually use — pages viewed, referring site, approximate region, device type. IP addresses are anonymised. If you decline, Google Analytics is never loaded at all. This is separate from the game statistics in section 2, which are not Google s and are not covered by this choice. 4. Advertising (optional) Spedes is free to play and shows ads to cover hosting. With your consent we load Google AdSense, which may set cookies and use them to serve personalised ads based on your interests. Google and its partners may combine this with information from other sites you visit. You can control this at any time: Decline in our cookie banner — ads and analytics then stay switched off entirely. Change Google s ad personalisation at adssettings.google.com . Opt out of third-party personalised advertising via aboutads.info (US) or youronlinechoices.eu (EU). 5. Legal basis (EEA / UK visitors) Essential storage, and the game statistics in section 2, are used on the basis of legitimate interest in delivering the game you asked for and keeping it playable — section 2 explains the limits that interest is held to. Website analytics and advertising are used only on the basis of your consent, which you may withdraw at any time with the same effect as declining. 6. Your rights Depending on where you live you may have the right to access, correct, delete or export personal data, and to object to or restrict processing (GDPR); or to know, delete and opt out of sale/sharing of personal information (CCPA/CPRA). We do not sell or share personal information with anyone, and we use it for no advertising purpose. In practice: If you have not signed in — there is nothing to look up. Clearing your browser storage erases everything, declining cookies stops optional processing, and the game statistics in section 2 hold nothing that points back to you. If you have signed in — open the Sign in page to delete your account, which removes your email, nickname, session and every game recorded against it. Emailing us also works and we will action it. The session cookie is strictly necessary: it keeps you signed in and is used for nothing else — not for analytics, and not for advertising. 7. Children Spedes is a general-audience card game and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will remove it. 8. Data retention Game statistics (section 2) are pruned after 90 days. Website analytics data is retained for the period configured in Google Analytics (currently 14 months). Ad-related data is retained according to Google s own policies. Local settings remain on your device until you clear them. 9. Third-party links Guides and mode pages may link to other sites. We are not responsible for their privacy practices. 10. Changes If this policy changes materially we will update the date at the top. Continuing to use the site after a change means the new policy applies. 11. Contact Questions or requests: contact@spedes.org Your current choice You have accepted cookies — Google Analytics and ads are active. You have declined cookies — Google Analytics and ads are off. You haven t decided yet — Google Analytics and ads are off until you do. Accept cookies Decline cookies Clearing site data in your browser resets this choice.
About · Contact · Privacy · Terms