Pegwood Cribbage

Privacy Policy

Last updated: September 27, 2026. This policy covers the Pegwood Cribbage app for iPhone (“Pegwood”, “the app”) and the Pegwood pages at https://fairhearth.com/pegwood.

The short version

  • No account. You never give us an email address, a phone number or a password.
  • Games against the computer stay on your iPhone. They are played on the device, work offline and are not sent to us.
  • Games with a friend use our game server. It keeps a random ID, the name you choose to show your friend, a token for “your turn” notifications, and your games together. It deals the cards, so neither of you can see the other’s hand.
  • Usage statistics and crash reports are tied to random IDs, never to your name, and one switch in the app turns both off.
  • No ads. This version of Pegwood shows no ads and has no advertising software built in. If that changes, this policy will be updated first. We never ask to track you, and we never sell your data.
  • You can delete your data from inside the app at any time: Settings → Privacy → Delete my data removes it from our game server.

1. Who we are

Pegwood is made by Arman Malkhasyan, Armenia (“we”, “us”). We decide how the data described here is used, which makes us the data controller. Contact: [email protected].

2. What stays on your iPhone

When you play against the computer, the deals, your moves, the scores, your settings and your statistics are stored in the app on your device. They are not sent to us. The seed that seals each deal is created on your iPhone and revealed to you after the game so you can check it.

When you share an invite, you choose who gets it in the iOS share sheet. Pegwood does not read your contacts.

3. Games with a friend

Playing a friend needs a server, because someone has to deal the cards fairly and pass turns between two phones. We use Supabase (servers in the United States).

What the server keeps:

What Why
A random user ID Created by anonymous sign-in the first time you start or join a friend game. It is not linked to your Apple Account, email or phone number
The name you choose to show your friend So your friend knows who they are playing. It can be any name you like; you can change it at any time
Your games The sealed seed and its commitment, every cut, discard, card played and count, the scores, whose turn it is and when moves were made. The server checks each move against the rules
Invite codes The random code inside each invite link, so the person who taps it joins the right game
A notification token Only if you allow notifications: a device token that lets us send “your turn” notifications

Who can see it. Your friend sees your chosen name, the cards you play and the scores – the same as across a real table. Neither player can see the other’s hand before it is shown: the server deals and sends each player only their own cards. After a game the server reveals the seed, and both of you can verify every deal. We can technically read the stored games to keep the service running and to answer your support requests; we do not look at them for any other reason.

Invite links. Anyone who has an invite link can use it to take the empty seat in that game, until someone joins or the invite expires. Send it only to the person you want to play.

Notifications. “Your turn” notifications are delivered through Expo’s push service and the Apple Push Notification service. A notification says only what happened and the score – for example, “Your move – Cribbage to 121. You 45, your friend 38.” It never contains your name, your friend’s name or any cards. You can turn notifications off in iOS Settings at any time; friend games still work, you just need to open the app to see your turn.

Technical records. Like any online service, Supabase records the IP address and a technical description of the app (user agent) when your app signs in and sends moves. These records are used for security and to fix problems, not to find out where you are, and they are kept for a short time (see Retention).

4. Usage statistics (PostHog)

To learn which parts of the game people use and where they get stuck, the app sends short event records to PostHog, our analytics provider. Examples: the app was opened, a game was started or finished, at which computer level and to 121 or 61, whether you won, roughly how long it took, whether a hint or undo was used, whether a friend game was created or joined, whether a deal was checked, whether the table was changed, whether the Pro screen was viewed or Pro was bought or restored. Each record also carries the app version, iOS version, device model and language.

These records are tied to a random ID created when you install the app. They never contain your name, your friend’s name, invite codes, your cards or anything you type. PostHog is set up not to work out your location from your IP address and to discard IP addresses.

Usage statistics are on when you install Pegwood. To switch them off, turn off Settings → Privacy → Share anonymous usage data. The same switch also turns off crash reports (section 5). When it is off, nothing more is sent, and while it stays off the app does not connect to PostHog at all.

5. Crash reports (Sentry)

When the app crashes or something fails, a report goes to Sentry so we can fix it. A report contains technical information: what failed and where in the code, the app and iOS version, the device model, memory and storage state, and a random installation ID that Sentry creates. Sentry also receives a short session record each time the app is opened – when the session started and ended and whether it crashed, with the app version and the same installation ID – so we can measure how often Pegwood runs without crashing. Reports are filtered before they leave your phone so that names and free text cannot ride along, screenshots are never attached, and Sentry is set not to store IP addresses.

Crash reports are on when you install Pegwood. Turning off Settings → Privacy → Share anonymous usage data stops crash reports and usage statistics together.

6. Purchases (Apple and RevenueCat)

Pegwood Pro is sold by Apple. Apple handles payment; we never see your card or Apple Account details. RevenueCat checks the purchase for us and remembers that it was made, so Pro can be restored on your other devices. RevenueCat receives the purchase record from Apple (product, price, currency, country, date) and a random app user ID. We do not give RevenueCat your name or anything else about you. Family Sharing works through Apple.

7. Ads

Pegwood shows no ads, and no advertising software is built into the app. If a later version adds ads to the free game, they will appear only between games – never during a game, never in your first session and never right after a loss – Pegwood will still never ask to track you, and we will update this policy before that version is released.

8. What we never do

  • Sell or rent your data, or share it with data brokers.
  • Ask to track you across other companies’ apps and websites, or use your advertising identifier.
  • Show personalized ads, or build an advertising profile of you.
  • Require an account, email address or phone number.
  • Put your name or your friend’s name into usage statistics or crash reports.
  • Let the computer opponent see your cards or influence the deal.
  • To provide friend games and purchases: it is necessary to perform our agreement with you (you asked to play or to buy).
  • Usage statistics, crash reports and security records: our legitimate interests in keeping the game working and improving it. They are proportionate because the data is tied to random IDs and excludes names and free text. Statistics and crash reports are on by default, and you can object at any time with the switch in Settings → Privacy, which stops them at once.

10. Your choices

  • Usage statistics and crash reports: Settings → Privacy → Share anonymous usage data (one switch for both).
  • Notifications: iOS Settings → Notifications → Pegwood.
  • Your name in friend games: change it at any time in the app.
  • Delete my data: Settings → Privacy → Delete my data, in any version of Pegwood that offers games with friends. After you confirm, our game server deletes your random user ID, your name and your notification token. Invites nobody has accepted are cancelled. A game in progress ends as a resignation, and your friend is told that you left. Finished games stay in your friend’s history, with your name replaced by “Former player”. The app then forgets its friend-game sign-in and your name on this iPhone. Deletion cannot be undone. Your games against the computer and your statistics stay on your iPhone.
  • Without the app: if you no longer have Pegwood, write to [email protected] with the name you used in friend games and, if you have one, an invite code from one of your games – Pegwood has no accounts, so this is how we find your records. We delete them as above and confirm when it is done.
  • Usage statistics and crash reports are tied only to random IDs that the app does not show, so we cannot tell which records are yours. Turning the switch off stops any more from being sent; what was sent earlier is deleted on the schedule in Retention.

Deleting the app from your iPhone removes everything stored in it, including your games against the computer and your statistics, but not your friend-game data on our server – use Delete my data first. Purchases stay with your Apple Account, so you can restore Pro later.

11. Your rights

Depending on where you live (for example the UK, the EEA, California and other US states, Canada or Australia), you have the right to ask what personal data we hold about you, to get a copy, to correct it, to delete it, to object to or restrict its use, and to complain to your data protection authority (for example the ICO in the UK, the Office of the Privacy Commissioner of Canada, or the OAIC in Australia). Write to [email protected]; we answer within 30 days and will never treat you differently for using your rights.

US state privacy laws. Pegwood collects these categories of personal information: identifiers (random IDs, a notification token), the name you choose for friend games, your game records, purchase records, app usage events, and crash and diagnostic data. We use them for the purposes in this policy. We do not sell personal information and do not share it for cross-context behavioral advertising.

12. Retention

Data Kept for
Games against the computer, settings, statistics On your iPhone until you delete them or the app
Invites nobody accepted Deleted automatically 14 days after the last activity
Friend games Kept so both players can see their game history, until you use Delete my data (see Your choices for what happens then)
Your random user ID, name and notification token Until you use Delete my data
Security and technical records (Supabase) A few days, as set by our Supabase plan
Usage statistics (PostHog) 12 months
Crash reports (Sentry) 90 days
Purchase records (RevenueCat) As long as Pegwood is offered, so Pro can be restored; deleted earlier on request
Support emails Until your question is resolved, then up to 12 months

13. Service providers

We use these companies to run Pegwood. They process data on our behalf and under their own privacy policies:

Provider What for Policy
Supabase Friend-game server and database (United States) supabase.com/privacy
Expo (650 Industries) Delivering “your turn” notifications expo.dev/privacy
Apple App Store, payments, notifications apple.com/legal/privacy
PostHog Usage statistics posthog.com/privacy
Sentry Crash reports sentry.io/privacy
RevenueCat Checking and restoring purchases revenuecat.com/privacy
Cloudflare Hosting this website and invite pages, and forwarding email sent to [email protected] cloudflare.com/privacypolicy

These providers may process data in the United States and other countries. Where UK or EEA law requires it, transfers are covered by the providers’ standard contractual clauses or equivalent safeguards.

14. Children

Pegwood is a card game for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. The friend-game name is the only thing a player types, and it is seen only by the people they invite. If you believe a child under 13 has given us personal information, write to [email protected] and we will delete it.

15. Security

Connections to our server and providers are encrypted. Access rules on the server let each player read only their own games and only their own cards, and the server’s secret key never ships inside the app. No system is perfectly secure, but we keep what we hold to the minimum so there is little to lose.

16. This website

The Pegwood pages at https://fairhearth.com/pegwood are hosted by Cloudflare (Cloudflare Pages), which records IP addresses in server logs for security. The site uses no cookies and no analytics. Invite pages read the invite code in the link only to show it to you and to open the game; the page itself sends nothing anywhere.

17. Changes

If we change what Pegwood collects, we will update this page and the date at the top before the change takes effect, and the app will tell you about any change that matters. Earlier versions are available on request.

18. Contact

Questions, requests or complaints: [email protected]. A person reads every message.

Arman Malkhasyan, Armenia