Privacy
tavlo.gg is a free, US-based site for classic card, board, puzzle and memory games. You can play without an account, and we try to keep as little about you as we can.
This policy explains what we collect, why we use it, who we share it with and the choices you have.
What stays on your device
Most of what the games remember is kept in your browser’s storage on this device. That includes your settings, such as theme, sound, motion, card size and language, your progress, such as level, XP, trophies, streaks and the items you’ve earned, games in progress, your setup choices and your daily results.
This data stays on your device unless you play online or your progress is saved to our server, as described below. Clearing your browser’s site data removes it.
Online play and reminders
When you play online, join a room, add a friend, send a gift, join a daily board or a league, or turn on reminders, our server keeps a guest profile for this device. We don’t ask for your name, email address or password. The profile can include the following.
- A random ID, the table name and avatar you pick, your language, and your leaderboard and league settings
- A session token in a cookie, so the server knows it’s the same device. We store only a one-way hash of it
- Your level, XP, quests, streaks, season track and trophies, and a copy of your device progress
- A record of each game the server checked, with the day, the game, the result and the XP it gave
- For online games and daily challenges, the game, its seed, the moves and the result, so the server can check that the game was played by the rules
- Your weekly league and standing, your friend code and friends, and gifts you sent or received
- If you turn on reminders, your browser’s push address, the hour you picked, your quiet hours and your time zone
Other players can see your table name, avatar and results where you appear on a daily board, a game leaderboard, a friends leaderboard or a league table. Quick chat in online games uses set phrases only.
We use this information to run the games, check results, keep your progress, run leagues and daily boards, deliver gifts and send the reminders you ask for.
Signing in with Google
Signing in is optional. If you choose Continue with Google, Google tells us your Google account ID and your email address. We don’t ask for your name, photo or contacts, and we never get your Google password.
We use the account ID to sign you in and to keep your progress on every device where you sign in. We keep the email address with your account so we can reach you about it or confirm a request from you. We don’t show either of them to other players, and other players see only the table name and avatar you pick.
We keep these details until you delete your account. You can do that in Profile with Delete account, or in Settings under Download or clear my data, and we remove your account, your Google details and your progress from our server right away. You can also remove tavlo.gg from your Google account at any time.
Reminders
Reminders are off until you turn them on and your browser asks for permission. We send them through your browser’s push service, which is run by your browser’s maker. You can turn reminders off in Settings, or block notifications for our site in your browser, and we stop sending.
Error reports and security
When something breaks in a game, your browser sends us a short error report so we can fix it. We remove personal details from these reports, don’t store your IP address with them and delete them after 14 days.
We also send these reports, and error reports from our servers, to Sentry, a service that helps us find and fix problems and see how quickly pages load. Before a report leaves, we remove names, email addresses, IP addresses, cookies and links that could identify you. Sentry processes these reports only for us and keeps them under its own retention rules.
Like most websites, our servers briefly process your IP address and browser details to deliver pages and to limit abuse, such as too many requests in a short time. Cloudflare delivers our pages and protects the site from attacks, so it handles this information for us too.
We also count page views and games played on our own server, without cookies, keeping only the page or game, the kind of device, the site that sent you and a code that changes every day, so these counts can’t be tied to you or followed from one day to the next. If your browser sends Do Not Track or Global Privacy Control, we skip the code. We keep these records for 30 days, then only the totals for each day.
Google Analytics
We use Google Analytics to understand how people use tavlo.gg, such as which games are popular and where people run into problems. It collects information such as the pages you visit, how long you stay, the kind of device and browser you use and your approximate location, which Google works out from your IP address. It uses cookies and similar technology to tell visits apart.
Google Analytics doesn’t tell us who you are. Where consent is required, it sets cookies only after you agree. You can also stop it in your browser with Google’s opt-out add-on.
Ads
Some pages may show ads served by Google. Google and its partners may use cookies and similar technology to show ads, limit how often you see the same ad, measure how ads perform and prevent fraud.
Where you allow it, ads can be personalized based on your activity on this and other sites. If you don’t allow it, you may still see ads, but they are chosen from things like the page you’re on and your general location. No ad ever changes a roll, a shuffle or a deal.
Your privacy choices
If you’re in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before Google Analytics or Google ads store cookies or similar data on your device. Until you choose, Google Analytics counts visits without cookies and ads are not personalized. While we don’t show ads, we ask with our own small message about Google Analytics only, and you can choose Allow analytics or No thanks. When ads run, the consent message comes from Google’s certified consent management platform instead, and you can accept, decline or choose by purpose. Outside those regions we don’t show a consent message.
We use Google Consent Mode in every region, so Google’s tags follow the choices you make. If you decline analytics or ad cookies, Google’s tags don’t set them.
You can change your choice at any time with the button below, the Privacy & ad choices option in Settings, or the Your privacy choices link at the bottom of the home page and, on larger screens, every page.
Privacy & ad choicesPrivacy rights in US states
Some US state privacy laws treat using personal information for targeted advertising as selling or sharing it. If you live in one of those states, you can opt out with the Do not sell or share my personal information option in Settings, the same link at the bottom of the home page and, on larger screens, every page, or the privacy link Google shows on the page. We don’t sell your personal information for money.
Our reasons for using your information
Where laws such as the GDPR apply, we use your information to provide the games you ask for, because we have a legitimate interest in keeping the site working, safe and fair, and with your consent for analytics, ad cookies and reminders. You can withdraw your consent at any time.
Your rights
Depending on where you live, you may have the right to ask for a copy of your personal information, to correct it, to delete it, and to limit or object to how we use it.
You can download or clear most of your data yourself in Settings, under Download or clear my data. For anything else, email [email protected]. We may need to confirm that a request comes from you, for example with your friend code, before we act on it.
If you’re in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your local data protection authority. We won’t treat you differently for using any of these rights.
How long we keep it
Data on your device stays until you clear it or your browser removes it. Your guest profile and its data stay on our server until you clear them in Settings or ask us to delete them. Online games you played stay in the other players’ history without your name or ID.
Sessions end after a year without use. Reminder subscriptions end when you turn reminders off or your browser’s push service tells us they no longer work. Error reports on our server are deleted after 14 days, and Sentry deletes its copies under its own rules. Our own page and game counts are kept for 30 days, then only as totals for each day. Google keeps analytics and ad data under its own retention rules.
Children
tavlo.gg is made for a general audience and isn’t directed at children under 13. Players must be 13 or older, or have a parent’s or guardian’s permission where the law allows it.
We don’t knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, email [email protected] and we’ll delete it.
In the European Economic Area, the age at which you can agree to cookies and similar data yourself is between 13 and 16, depending on your country. Below that age, a parent or guardian should make the choices in the consent message.
International transfers
Our servers and the service providers we use, including Google, may process information in countries other than the one where you live. Where the law requires it, these transfers are covered by safeguards such as standard contractual clauses.
Changes to this policy
We’ll update this page when our practices change, and the date at the top shows when it last changed. Where the law requires it, we’ll ask for your consent again.
Contact
For privacy questions or requests, email [email protected].