Connected by Cards

Privacy

Last updated 27 September 2026

Connected by Cards is a free card table you open in a browser. There is nothing to sign up for, so there is not much about you to hold. This page says what little there is, where it sits, and how long it stays.

The short version

• No account, no sign-up, no password. We never ask for your name or your email.
• A table you open with someone lives on our server until 48 hours after the last move, then it goes. It holds the hand in progress and whatever name you typed, and nothing that says who you are. A Tarot for Two reading shared between two devices also holds the question and notes the reader typed, for those same 48 hours.
• Voice is off until you switch it on. It usually goes straight between the browsers at the table, which shows your IP address to everyone else at it, and when it cannot, Cloudflare relays it.
• Our analytics set no cookies and build no profile of you.
• There is no advertising on the site today, and nothing from an ad network runs here.

No account, nothing to sign up for

You open a page and play. There is no registration anywhere on this site, so we hold no profile, no login and no contact details for you unless you choose to write to us. A display name, if you type one, is a label on a seat for the length of one table, not an identity we keep.

Opening a table, and the link you send

A table is a room on our server, made when you press the button and given a random id. You get a link for every seat you did not take, and you send those links to the people you want to play with. Anyone holding one of those links can take that seat, so send them to people you actually mean to play with.

Making a table runs a Cloudflare Turnstile check first, a quiet test that you are a person and not a bot. It loads a small script from Cloudflare. It is not advertising and it does not follow you to other sites.

Talking while you play

Voice is off unless you turn it on, and everyone at the table is asked for the microphone before anything is sent. It works at any size of table, two seats or eight: your browser connects to each of the other browsers at the table, and nothing is recorded, by us or for you.

Usually those connections are direct, from one browser to another. A direct connection means everyone at the table can see your IP address, and you can see theirs, so switch voice on only at a table of people you know. To find that direct path, your browser asks public STUN servers run by Google and by Cloudflare how it can be reached, which means those servers see your IP address too.

When a direct path cannot be made, the audio is relayed through a Cloudflare TURN server instead. Relayed audio passes through Cloudflare on its way to the other browsers. It is not recorded there or anywhere else.

What our server keeps

The table itself is kept so anyone at it can close the tab and come back to the same hand: the cards as they lie, who is in which seat, and the display name you typed if you typed one. It is deleted 48 hours after the last move, and nothing of it is attached to an account, because there are none.

A Tarot for Two reading shared between two devices keeps one thing more: the question the reader typed, up to 500 characters, and the reader’s notes, up to 4,000. Both are sent to the reader’s seat only, never to the person being read for, and they are deleted with the rest of the room, 48 hours after the last move. That keeps them between the reader and the table, but it is not encryption: our server holds them in a form it can read. A reading on your own keeps its question and notes in the tab and sends neither to us.

Chat is not part of that. A message passes through the server to the other seats and is never stored. The server keeps a count of how many were sent, never a word of what they said.

Separately, so one person cannot open a hundred tables at once, your IP address is hashed with a secret value the moment it arrives. The hash is what counts your open tables, and it is held with the table so the slot can be released when the table goes. The address itself is never written down, and the hash cannot be turned back into it.

We also keep a row per table for what it cost to run: the random table id, which game it was, how many seats, how long it lasted, how many messages and moves went through, and when it started and ended. There is no name, no address and no IP in any of it.

What your browser keeps

A few small things are saved on your own device, not on our server, some of them so you can come back to a table you already have:

• a token for each table you opened or joined, which is what the "still in progress" list on a game page is made of,
• a random id for this browser and the display name you last typed,
• at the tables that offer them, how many computer opponents you chose last time,
• at the tables with a high contrast switch, whether you left it on,
• whether you left the chat at a table open or closed, so the next table opens it the same way,
• the volume you gave the other seats' voices, so they come through at that level at the next table too,
• what you last typed into the library search, for the length of the browser tab,
• at a table with voice, whether you muted yourself, again only until the tab closes,
• the page you just came from, held for a few seconds so the next page knows which way to slide.

A solitaire is not saved

The games you play on your own keep nothing. Close the tab and that hand is gone, which is the honest description of what the code does rather than a promise about privacy. Nothing about a solitaire reaches our server either.

Analytics

To see roughly how many people visit and which pages they reach, we use Umami, a privacy-friendly analytics tool. It sets no cookies and collects no personal data. It records aggregate, anonymous figures such as page views, the country a visit came from, the site that sent you and the kind of browser used. None of that identifies you, none of it is built into a profile, and none of it is shared for advertising.

It is served from this site's own address rather than the vendor's, so ad blockers do not have to guess at it. The request that forwards it drops your cookies before it goes, and anything that is not the live site, a preview build or a local run, is answered with a tracker that does nothing at all.

Advertising

There is no advertising on this site today. No ad script loads, no ad network is contacted, and nothing here sets an advertising cookie or reads a device identifier. We are not promising it stays that way, because the site has to pay for itself eventually. You might see an ad now and then, and we will try to keep them discreet. If that day comes, this page will name the network and say what it stores before the first ad appears.

Hosting

The site and the server that keeps a table in sync both run on Cloudflare. Like any web host, Cloudflare handles basic technical information such as your IP address in order to serve the pages and to protect the service from abuse, under its own terms and privacy policy.

Children

This is a general-audience card table and it is not directed at young children. We do not knowingly collect personal information from anyone, of any age.

Your choices and your rights

Because we hold essentially nothing personal about you, there is very little to ask for, correct or delete. What is on your device is yours to clear whenever you like, and a table clears itself. If you have a question about any of it, write to us and we will answer.

Changes to this page

If we change how the site handles data, we will change this page and the date at the top of it. The version you are reading is the current one.

Contact

Questions about privacy? Write to hello@connectedbypuzzles.com.