Privacy Policy

This policy covers the Pegwood Cribbage app for iPhone (“Pegwood”, “the app”) and the Pegwood pages at https://fairhearth.com/pegwood.

The short version

#

• No account. You never give us an email address, a phone number or a password.
• Games against the computer stay on your iPhone. They are played on the device, work offline and are not sent to us.
• Games with a friend use our game server. It keeps a random ID, the name you choose to show your friend, a token for “your turn” notifications, and your games together. It deals the cards, so neither of you can see the other’s hand. Friends: you get a friend code – your name and four numbers, like Joan#4821. Someone who types your exact code can send you a friend request; no one can browse or search for players, and you can block or report anyone.
• Trophies stay on your iPhone, with a copy in your own iCloud that we cannot read. If you use Game Center, Apple shows them in its Games app; nothing about your Game Center account comes to us.
• Usage statistics and crash reports are tied to random IDs, never to your name, and one switch in the app turns both off.
• App updates come through Expo. When the app checks for one, Expo sees a random installation ID and your IP address – never your name or your games.
• Ads. This version of Pegwood shows none and has no advertising software built in. If that changes, this policy will be updated first. We never ask to track you, and we never sell your data.
• You can delete your data from inside the app at any time: Settings → Privacy → Delete my data removes it from our game server.

Pegwood is made by Arman Malkhasyan, Armenia (“we”, “us”). We decide how the data described here is used, which makes us the data controller. Contact: [email protected].

When you play against the computer, the deals, your moves, the scores, your settings, your statistics and your trophies are stored in the app on your device. They are not sent to us. The seed that seals each deal is created on your iPhone and revealed to you after the game so you can check it. The Tutor, the teaching opponent, works the same way: its notes are made on your iPhone from your own cards, and your progress through them stays there.

When you share an invite, you choose who gets it in the iOS share sheet. Pegwood does not read your contacts.

Playing a friend needs a server, because someone has to deal the cards fairly and pass turns between two phones. We use Supabase (servers in the United States).

What the server keeps:

What	Why
A random user ID	Created by anonymous sign-in the first time you start or join a friend game, get a friend code or add a friend. It is not linked to your Apple Account, email or phone number
The name you choose to show your friends	So your friends know who they are playing. It can be any name you like; you can change it at any time
Your friend code	Your chosen name plus four numbers our server picks, like Joan#4821. Anyone who types your exact code can send you a friend request; there is no list of players and no partial search. You can get new numbers at any time
Your friends, requests and blocks	Who you are friends with, the requests you sent or received and the players you blocked, so friends can challenge each other and blocked players can’t reach you
Reports	If you report a player: the reason you picked from a fixed list, that player’s name and code at the time, and the date. There is no free text
Your games	The sealed seed and its commitment, every cut, discard, card played and count, the scores, whose turn it is and when moves were made, and challenges you sent or received. The server checks each move against the rules
Invite codes	The random code inside each invite link, so the person who taps it joins the right game
A notification token	Only if you allow notifications: a device token that lets us send notifications about your turns, friend requests and challenges

Who can see it. Your friend sees your chosen name, the cards you play and the scores – the same as across a real table. Neither player can see the other’s hand before it is shown: the server deals and sends each player only their own cards. After a game the server reveals the seed, and both of you can check every deal. We can technically read the stored games to keep the service running and to answer your support requests; we do not look at them for any other reason.

Friends. Your friends see your name, your friend code, your record against them and when you last played. Someone who types your exact code sees your name and code, and can send you a friend request; you choose whether to accept. Joining a game from someone’s invite link makes the two of you friends. Players you block can’t find you, send you requests or challenge you, and they are not told that you blocked them. If you report a player, they are blocked too; we read reports to keep friend games safe, and we may turn off requests and challenges for a player several people have reported.

Invite links. Anyone who has an invite link can use it to take the empty seat in that game, until someone joins or the invite expires. Send it only to the person you want to play.

Notifications. Notifications are delivered through Expo’s push service and the Apple Push Notification service. A “your turn” notification says only what happened and the score – for example, “Your move – Cribbage to 121. You 45, your friend 38.” – and never contains names or cards. Friend requests and challenges name the sender – for example, “Joan#4821 wants to add you” or “Joan challenges you – game to 121”. You can turn notifications off in iOS Settings at any time; friend games still work, you just need to open the app to see your turn, requests and challenges.

Moving to a new phone. The app keeps a random restore key for your friend games, and you can ask for a one-time transfer code (valid for 24 hours). Our server keeps only a fingerprint (hash) of each. When you use a transfer code or your restore key on another phone, our server moves your name, code, friends, blocks and games to that phone’s new random ID and deletes the old one. The old phone becomes a new, empty player. Games against the computer and your statistics stay on the old phone.

iCloud Keychain. On iPhone, the app saves the restore key in your iCloud Keychain, labeled with your name and code, so a new iPhone signed in to the same Apple Account can bring your friend games back. Apple encrypts iCloud Keychain end to end; we never see your Apple Account or your keychain. Delete my data removes the key.

Technical records. Like any online service, Supabase records the IP address and a technical description of the app (user agent) when your app signs in and sends moves. These records are used for security and to fix problems, not to find out where you are, and they are kept for a short time (see Retention).

To learn which parts of the game people use and where they get stuck, the app sends short event records to PostHog, our analytics provider. Examples: the app was opened, a game was started or finished, at which computer level and to 121 or 61, whether you won, roughly how long it took, whether a hint or undo was used, whether a friend game was created or joined, whether a deal was checked, whether the table was changed, whether the Pro screen was viewed or Pro was bought or restored, which trophy was earned, whether the Trophies screen or Game Center was opened, how a Game Center sign-in ended (never who signed in), and that the app asked for a rating. Each record also carries the app version, iOS version, device model and language.

These records are tied to a random ID created when you install the app. They never contain your name, your friend’s name, invite codes, your cards or anything you type. PostHog is set up not to work out your location from your IP address and to discard IP addresses.

Usage statistics are on when you install Pegwood. To switch them off, turn off Settings → Privacy → Share anonymous usage data. The same switch also turns off crash reports (section 5). When it is off, nothing more is sent, and while it stays off the app does not connect to PostHog at all.

When the app crashes or something fails, a report goes to Sentry so we can fix it. A report contains technical information: what failed and where in the code, the app and iOS version, the device model, memory and storage state, and a random installation ID that Sentry creates. Sentry also receives a short session record each time the app is opened – when the session started and ended and whether it crashed, with the app version and the same installation ID – so we can measure how often Pegwood runs without crashing. Reports are filtered before they leave your phone so that names and free text cannot ride along, screenshots are never attached, and Sentry is set not to store IP addresses.

Crash reports are on when you install Pegwood. Turning off Settings → Privacy → Share anonymous usage data stops crash reports and usage statistics together.

Pegwood Pro is sold by Apple. Apple handles payment; we never see your card or Apple Account details. RevenueCat checks the purchase for us and remembers that it was made, so Pro can be restored on your other devices. RevenueCat receives the purchase record from Apple (product, price, currency, country, date) and a random app user ID. We do not give RevenueCat your name or anything else about you. Family Sharing works through Apple.

Trophies. Pegwood has 22 trophies to earn. They are free, and they are worked out and kept in the app on your iPhone, like your statistics.

The copy in your iCloud. If your iPhone is signed in to iCloud, Pegwood keeps a small copy of your trophies in your own iCloud account, in the space Apple gives each app for its settings (iCloud key-value storage). That is how your trophies come back after you reinstall Pegwood or move to a new iPhone with the same Apple Account. The copy holds only which trophies you earned and when, and how many games you have played against the computer and finished with friends – no cards, games, names or friend codes. Apple stores it in your iCloud account; we cannot read it, and it never reaches our server. Deleting the app does not delete the copy. This version of Pegwood has no button to erase it, and iOS does not offer one either, so it stays with your Apple Account. If your iPhone is not signed in to iCloud, nothing is copied.

Game Center. If you are signed in to Game Center, Pegwood also reports your trophies to Apple as Game Center achievements, so they show in Apple’s Games app and come back on a new device signed in to the same Game Center account. Game Center is Apple’s service: Apple runs it under its own privacy policy and your Game Center settings, and it is Apple that decides what other players can see there. Pegwood sends Game Center only how far along each trophy is. It never passes your Game Center name or player ID on – not to our server, not into usage statistics or crash reports – and nothing about your Game Center account comes to us. Pegwood never asks you to sign in during your first session. In a later session, once you have finished a game, Apple’s sign-in may appear on the home screen; if you cancel it, Pegwood does not offer it again by itself, and you can sign in or open Game Center at any time from Settings → Game Center in the app.

Ratings. Now and then, after a game you won, Pegwood asks iOS to show Apple’s rating request – never in your first session and never after a loss. Apple decides whether it appears and limits how often. Your rating and any review go to Apple; the app learns nothing about them. To turn these requests off for all apps, use iOS Settings → App Store → In-App Ratings & Reviews.

Fixes and small improvements can reach Pegwood between App Store versions through EAS Update, a service of Expo (650 Industries). Each time Pegwood starts from scratch, and when you come back to it 12 hours or more after its last check, the app asks Expo’s update server whether a newer version of its code is available. The request carries:

• a random installation ID that Expo’s update software creates on your iPhone and keeps with the app’s settings. Expo uses it to deliver updates and to count how many devices receive them;
• which version of the app’s code is running, its update channel (for example “production”) and the platform (iOS);
• if Pegwood failed while starting the last time, a short technical description of that error, so a faulty update can be found and replaced;
• like any request on the internet, your IP address and a technical description of the app and of iOS (user agent).

It does not include your name, your friend code, your cards or your games. An update downloads in the background and is used the next time Pegwood starts from scratch – never in the middle of a game. Update checks keep the app working, so the Share anonymous usage data switch does not turn them off. Without a connection, Pegwood simply starts with the version it has.

Pegwood shows no ads, and no advertising software is built into the app. If a later version adds ads to the free game, they will appear only between games – never during a game, never in your first session and never right after a loss – Pegwood will still never ask to track you, and we will update this policy before that version is released.

• Sell or rent your data, or share it with data brokers.
• Ask to track you across other companies’ apps and websites, or use your advertising identifier.
• Show personalized ads, or build an advertising profile of you.
• Require an account, email address or phone number.
• Put your name or your friend’s name into usage statistics or crash reports.
• Let the computer opponent see your cards or influence the deal.

• To provide friend games, purchases and app updates: it is necessary to perform our agreement with you (you asked to play or to buy, and update checks keep the app you use working).
• Usage statistics, crash reports and security records: our legitimate interests in keeping the game working and improving it. They are proportionate because the data is tied to random IDs and excludes names and free text. Statistics and crash reports are on by default, and you can object at any time with the switch in Settings → Privacy, which stops them at once.

• Usage statistics and crash reports: Settings → Privacy → Share anonymous usage data (one switch for both).
• Notifications: iOS Settings → Notifications → Pegwood.
• Game Center: sign in or open it from Settings → Game Center in the app; sign out on the Game Center page of iOS Settings. While you are signed out, Pegwood reports nothing to Game Center.
• Rating requests: iOS Settings → App Store → In-App Ratings & Reviews turns them off for all apps.
• Your name in friend games: change it at any time in the app. Your friend code follows your name; for new numbers, tap Get New Numbers on the Friends screen. To unblock someone, open Settings → Blocked players.
• Delete my data: Settings → Privacy → Delete my data, in any version of Pegwood that offers games with friends. After you confirm, our game server deletes your random user ID, your name and your notification token. Invites nobody has accepted are cancelled. A game in progress ends as a resignation, and your friend is told that you left. Finished games stay in your friend’s history, with your name replaced by “Former player”. Your friend code, friends, friend requests and blocks are deleted too; reports you made stay, without your ID. Your restore key and transfer codes are deleted as well. The app then forgets its friend-game sign-in and your name on this iPhone. Deletion cannot be undone. Your games against the computer, your statistics and your trophies stay on your iPhone.
• Without the app: if you no longer have Pegwood, write to [email protected] with the name you used in friend games (and your friend code) and, if you have one, an invite code from one of your games – Pegwood has no accounts, so this is how we find your records. We delete them as above and confirm when it is done.
• Usage statistics and crash reports are tied only to random IDs that the app does not show, so we cannot tell which records are yours. Turning the switch off stops any more from being sent; what was sent earlier is deleted on the schedule in Retention.

Deleting the app from your iPhone removes everything stored in it, including your games against the computer, your statistics and your trophies, but not your friend-game data on our server – use Delete my data first. Your trophies come back if you install Pegwood again, from the copy in your iCloud or from Game Center. Purchases stay with your Apple Account, so you can restore Pro later.

Depending on where you live (for example the UK, the EEA, California and other US states, Canada or Australia), you have the right to ask what personal data we hold about you, to get a copy, to correct it, to delete it, to object to or restrict its use, and to complain to your data protection authority (for example the ICO in the UK, the Office of the Privacy Commissioner of Canada, or the OAIC in Australia). Write to [email protected]; we answer within 30 days and will never treat you differently for using your rights.

US state privacy laws. Pegwood collects these categories of personal information: identifiers (random IDs, a notification token), the name you choose for friend games, your friend code, friends, requests, blocks and reports, your game records, purchase records, app usage events, and crash and diagnostic data. We use them for the purposes in this policy. We do not sell personal information and do not share it for cross-context behavioral advertising.

Data	Kept for
Games against the computer, settings, statistics, trophies	On your iPhone until you delete them or the app
The copy of your trophies in your iCloud	Stays with your Apple Account (see Trophies, Game Center and ratings)
Invites nobody accepted	Deleted automatically 14 days after the last activity
Friend games	Kept so both players can see their game history, until you use Delete my data (see Your choices for what happens then)
Your random user ID, name and notification token	Until you use Delete my data
Your friend code, friends and blocks	Until you remove a friend, unblock someone or use Delete my data
Friend requests	Until answered, or 30 days; declined ones 7 days
Challenges nobody answered or accepted	Closed after 7 days, deleted 30 days later
Reports	12 months
Security and technical records (Supabase)	A few days, as set by our Supabase plan
Usage statistics (PostHog)	12 months
Crash reports (Sentry)	90 days
Update checks (Expo)	Kept by Expo under its own policy; we see only totals, such as how many devices received an update
Purchase records (RevenueCat)	As long as Pegwood is offered, so Pro can be restored; deleted earlier on request
Support emails	Until your question is resolved, then up to 12 months

Transfer codes last 24 hours, or until used; the restore key’s fingerprint is kept until you move again or use Delete my data.

We use these companies to run Pegwood. They process data on our behalf and under their own privacy policies:

Provider	What for	Policy
Supabase	Friend-game server and database (United States)	supabase.com/privacy
Expo (650 Industries)	Delivering “your turn” notifications and app updates (EAS Update)	expo.dev/privacy
Apple	App Store, payments, notifications, Game Center, iCloud	apple.com/legal/privacy
PostHog	Usage statistics	posthog.com/privacy
Sentry	Crash reports	sentry.io/privacy
RevenueCat	Checking and restoring purchases	revenuecat.com/privacy
Cloudflare	Hosting this website and invite pages, and forwarding email sent to [email protected]	cloudflare.com/privacypolicy

These providers may process data in the United States and other countries. Where UK or EEA law requires it, transfers are covered by the providers’ standard contractual clauses or equivalent safeguards.

Pegwood is a card game for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. The friend-game name is the only thing a player types, and it is seen only by the people they play or are friends with, and by someone who types their exact friend code. If you believe a child under 13 has given us personal information, write to [email protected] and we will delete it.

Connections to our server and providers are encrypted. Access rules on the server let each player read only their own games and only their own cards, and the server’s secret key never ships inside the app. No system is perfectly secure, but we keep what we hold to the minimum so there is little to lose.

The Pegwood pages at https://fairhearth.com/pegwood are hosted by Cloudflare (Cloudflare Pages), which records IP addresses in server logs for security. The site uses no cookies and no analytics. Invite pages read the invite code in the link only to show it to you and to open the game; the page itself sends nothing anywhere.

If we change what Pegwood collects, we will update this page and the date at the top before the change takes effect, and the app will tell you about any change that matters. Earlier versions are available on request.

Questions, requests or complaints: [email protected]. A person reads every message.

Arman Malkhasyan, Armenia