Who this covers
Cardflix is a party game app for iPhone, iPad and Android. This policy covers the Cardflix apps, the browser page that guests use to join a game, and this website. “We” and “us” means the developer of Cardflix.
What we collect
Nothing. Cardflix has no accounts and no sign-up. The apps contain no analytics, advertising or tracking code, and they don't send your information to us or to anyone else. We never see who you are, who you play with, or what happens in your games.
How a game works
When you host a game, your phone runs the room. The other players' phones connect to it directly over your local Wi-Fi network (or the host's phone hotspot). Names, avatars, guesses, drawings, votes and scores travel only between the phones in that room. They aren't uploaded to the internet or sent to us, and they're gone when the host closes the room.
Guests who join from a browser
Friends without the app join by scanning the QR code on the host's screen. That opens a page served by the host's phone over your Wi-Fi, not by a website on the internet. The guest's browser saves the name and avatar they picked, plus a code that lets them rejoin the same room if the page reloads, in that browser's local storage on their own phone. Clearing the browser's website data removes it.
Your name and avatar
The name and avatar you choose are saved on your device so you don't have to pick them every time. While you play, they're shared with the other players in your room so everyone knows who's who. They're never sent to us. You can change them any time in the app's Settings.
Decks you make
Decks you make, and decks friends share with you, are saved on your device. They're never uploaded to us.
When you share a deck, the whole deck (its name, its cards and the name you play under) travels inside the link or QR code itself. Anyone who has the link can open it and pass it on, so only share decks you're happy for others to see. Opening a deck link on this website shows the deck by reading it in your browser; the part of the link that holds the deck is never sent to our server.
Sharing drawings and awards
You can share a Doodles drawing from the end-of-game gallery, and the host can share tonight's awards card, using your phone's share sheet. They go only where you choose to send them.
On iPhone and iPad, if you choose Save Image, iOS asks whether Cardflix may add photos to your library. That permission only lets Cardflix add the picture you're saving. It can't see, read or change your photos, and you can turn it off in Settings › Privacy & Security › Photos.
On Android, the picture is kept briefly in the app's cache so Android's share sheet can send it. The app doesn't ask for access to your photos or files.
Ratings
Now and then, after a fun game, the app may ask the host to rate Cardflix using the standard rating prompt from Apple or Google Play. Ratings and reviews go to the App Store or Google Play; we don't see who left them.
Purchases
Unlock All is an in-app purchase. On iPhone and iPad, Apple handles it through the App Store; on Android, Google Play handles it through Google Play Billing. We don't receive your name, your Apple Account or Google Account, or your payment details. The app only checks with the store whether the purchase is active on your account so it can unlock the decks, and you can restore it from the app's Settings. Apple's privacy policy and Google's privacy policy cover the purchase itself.
Local Network permission (iPhone and iPad)
The first time you host or join a game, iOS asks whether Cardflix may find and connect to devices on your local network. The app explains why: “Cardflix connects the phones at your game night over your Wi-Fi so everyone can play together.” Cardflix uses this access to:
- open a room on the host's phone that other phones can find,
- show rooms nearby when you tap Join a room, and
- let guests' browsers connect to the host's phone.
It's used only to connect the phones in your game. Cardflix doesn't scan for, collect or store information about other devices on your network. Without it you can't host or join a game. If you said no, you can turn it on in Settings › Privacy & Security › Local Network.
On Android
The Android app works the same way and collects nothing. A few details are specific to Android:
- What stays on your phone. Your name, avatar, settings and the codes that let you rejoin a room are kept in the app's private storage. Decks you make or receive are kept in the app's private files. While you host, the room is saved there too, so you can reopen it if the app closes unexpectedly; that file is never included in backups.
- Backups. If Android backup is on, Android may include your name, avatar and decks in your phone's backup to your Google Account. Google runs that backup, not us, and we can't see it.
- Finding and hosting rooms. The app uses Android's Network Service Discovery to find rooms on your Wi-Fi, and the host's phone runs the room on your local network (port 48484). Nothing goes to us.
- Permissions. Cardflix uses internet and network access to run and join rooms on your Wi-Fi, Wi-Fi state and multicast access to find rooms nearby, and Google Play's billing permission for Unlock All. None of these show a prompt, and the app doesn't ask for your location, camera, microphone, contacts or photos.
What Cardflix doesn't ask for
Cardflix doesn't ask for your contacts, location, camera or microphone, and it can't see your photo library. Guests use their own camera app to scan the QR code.
Crash reports from Apple and Google
If you've chosen to share analytics with app developers in iOS, Apple may send us anonymous crash reports and usage statistics. They don't identify you, and you can turn them off in Settings › Privacy & Security › Analytics & Improvements. On Android, if you've chosen to share usage and diagnostics data with Google, Google Play may show us anonymous crash reports in the same way.
Children
Cardflix is for everyone and doesn't collect personal information from anyone, including children under 13.
This website
This website uses Cloudflare Web Analytics to count visits. It doesn't use cookies or store anything on your device, and it doesn't follow you around other sites. We only see totals, such as page views, which pages were visited, the site that linked here, and broad details like country, browser and device type.
The shared deck page (playcardflix.com/d) doesn't run the analytics script, and the deck inside a shared link never reaches us.
The iPhone, iPad and Android apps show this Privacy Policy, the Terms of Use and the Support page inside the app. Those are pages of this website, but when you open them in the app, the app blocks the analytics script, so they aren't counted.
The site is hosted on Cloudflare, which may also process basic technical information such as IP addresses to deliver the site and keep it secure. See Cloudflare's privacy policy.
If you email us
When you write to support, we receive your email address and whatever you include in your message. We use them only to reply and help you, and we don't share them. Mail to our address is delivered through Cloudflare's email forwarding.
Changes
If this policy changes, we'll update this page and the date at the top.
Contact
Questions about privacy? Email [email protected].