Privacy Policy
Effective October 19, 2026 · applies to the briscola.ai website and the Briscola.ai mobile apps
The short version
You can play without an account, we collect the minimum needed to run the game, everything lives in the EU, we don't sell or share personal data with advertisers, and you can delete your account yourself on this page.
Playing without an account
No account is needed to play against the AI or to join a friend's room. Guest identity (a random id and the display name you type) is stored only in your browser's local storage, along with your settings and lifetime stats. Your settings and stats stay on your device, and your display name is shown to other players while you're seated in a room.
The random id is also sent to us with two anonymous records: your Daily Deal score (so we can tell you what share of today's players you beat) and the days you opened the site, finished a game, or played the Daily Deal (so we can see whether people come back). Neither is tied to a name or an email address. Clearing your browser data creates a new id, so earlier records can no longer be connected to you.
What we collect when you sign in
Hosting a multiplayer room requires signing in, either with Google or with a sign-in link we email to you. From a Google account we store your name and email address; we deliberately do not store your profile picture. With an email link we store only the address. If you set a custom display name, we store that too. Sign-in emails are delivered by Resend; the address is shared with them solely to send that message.
When you're signed in, your settings (language, deck, table, sound and similar) and lifetime stats are saved to your account so they follow you to other devices. Your Daily Deal results are saved to your account too (score, the opponent's score, and which tricks you won), and your friends can see them once they've played the same deal.
We set two small cookies ourselves: a session cookie that keeps you signed in, and a language cookie that remembers the language you picked so the site opens in it next time.
Game and room data
Multiplayer rooms, seats, and in-room chat messages are stored while a room is active. Rooms are ephemeral: they dissolve when the host leaves or after about 30 minutes of inactivity, and a dissolved room's chat messages are deleted automatically. Chat messages store the display name you had when you sent them.
When a game in a friend room finishes, we keep a short record of it (who sat where, display names, scores and the winner) so you can see your record against friends. If you're signed in, we also store your personal friend-link code, the list of people you've added as friends, friend requests until they're answered, and the game invites you send or receive (kept with the room they were for).
Notifications
If you turn on daily reminders or notifications for friend invites, we store what your browser gives us to deliver them: a push address and its encryption keys, issued by your browser maker's push service (for example Google, Apple or Mozilla). Alongside it we keep your time zone and language (so a reminder arrives in the daytime, in your language) and the last day you played the Daily Deal (so you aren't reminded after you've already played). If you're signed in, the subscription is linked to your account so friend invites reach your devices.
You can turn reminders off on the Daily Deal result card, or block notifications for this site in your browser at any time. Subscriptions that stop working are deleted automatically.
Feedback
If you send us feedback from the Settings menu, we store your message, the page you sent it from, your language and your browser's user-agent string, plus your account if you're signed in. To stop spam we also keep a one-way hash of your IP address, never the address itself. We read feedback to improve the site and delete it once it has been reviewed.
Analytics
We use Vercel Web Analytics and Speed Insights for aggregate, privacy-friendly usage and performance metrics. They do not use cookies and do not track you across sites. We do not run third-party advertising trackers.
Where your data lives
Game data is stored with Supabase in Frankfurt, Germany (EU). The site is served by Vercel. Google handles sign-in under its own privacy policy.
Delete your account
Deleting your account permanently removes your sign-in record, OAuth tokens, sessions, display name, and any rooms you host (including their chat), your synced settings and stats, your Daily Deal results, your friend link, friends list, friend requests and game invites. Notification subscriptions on your devices are unlinked from the account. Chat you sent in other players' rooms keeps its display-name snapshot but is no longer linked to you, and your name and account are removed from the records of friend games you played. Feedback you sent is kept until it is reviewed, no longer linked to you. This is immediate and cannot be undone.
Checking sign-in status…
You can also request deletion by emailing fknazrael@gmail.com from the address you signed in with.
Children
briscola.ai is a general-audience card game and is not directed at children under 13. We do not knowingly collect personal data from children.
Changes and contact
If this policy changes in a meaningful way (for example, if ads are introduced), we'll update this page and its effective date. Questions: fknazrael@gmail.com.