Privacy Policy — Carcassonne

What We Collect

Guest and account information

When you first play, we create an anonymous guest account identified only by a random ID. It holds your progress (coins, statistics and settings) but no name or email. If you clear your browser's data before signing in, you lose access to it.

If you choose to sign in — with Google, or in some games with an email address and password — we also store:

• Username — shown publicly on leaderboards and in game invites. You choose it; it does not need to be your real name.
• Display name and avatar — optional, shown on your profile.
• Email address — used only to identify your account. Never shown to other players.
• Google account ID — if you sign in with Google, used only to recognise your account. We never see your Google password.

Your guest progress carries over when you sign in. One account works across every 2DGameClub game.

Game data

• Game moves and results — stored to run online matches and leaderboards
• Every tile you draw, where you place it and its rotation, and every follower you place (used to deliver turns and replay games)
• Which roads, cities, cloisters and fields were completed, by whom, and what they scored — including end-of-game field scoring
• Your rating and rank history (2-player ranked games only; casual, private and 3–5 player games do not affect it)
• Match history — matches played, wins, losses and player count (2 to 5)
• Bot game statistics — difficulty level played (1 of 10) and win rates per level
• Solo Challenge progress — challenges completed and stars earned
• Move timestamps and game duration

The one secret in Carcassonne is the order of the shuffled draw pile. Nobody can read it during a game — not your opponents, and not you. When the game ends, the shuffle seed is revealed to everyone who played, so any player can check the deal was fair.

Your username, rating and match results are visible to other players on leaderboards and your public profile. The rest of your game data is private to your account.

Usage data

To improve Carcassonne, we record simple events such as starting or finishing a game, completing a tutorial or challenge, or changing a theme, along with the game version. These events are stored in our own database, tied only to your account's internal ID, and are never sent to third-party analytics services.

Error reports

When something goes wrong, the game may send us an error report: the error message and technical trace, the game version, the platform, a random device and session ID and, if you are signed in, your account's internal ID. We use these only to fix bugs and delete them automatically after 30 days.

Browser storage and technical data

The game saves your sign-in session, settings and some progress in your browser's local storage so it works quickly and keeps you signed in across our games. Like every website, our servers and network provider receive technical details your browser sends — such as IP address and browser type — to deliver and protect the service. We do not use these to identify you.

Notifications

Some games may ask your browser for permission to show notifications, for example to remind you of a daily challenge. This is entirely optional and you can withdraw it at any time in your browser settings.

What We Don't Collect

• Payment details — there are no purchases in the browser version. Coins are earned by playing.
• Precise or background location.
• Your contacts, photos, microphone or camera.
• Passwords in readable form — they are handled by our authentication system or by Google.
• Any personal details beyond those listed above.

How We Use Your Data

• To run the game — deliver online moves, save progress and keep your account in sync.
• For ranked play and leaderboards — so players can compete fairly.
• For rewards and achievements — to track streaks, milestones and coins.
• To improve Carcassonne — usage events help us find bugs and decide what to build next.
• To keep play fair — to detect cheating, abuse and multiple-account manipulation.

Legal Basis

Where data-protection law asks us to name one, we process your data because it is needed to provide the game you asked to play (running matches, saving progress and your account), because of our legitimate interest in keeping play fair and improving the games (usage events and error reports), and on the basis of your consent for personalised advertising and browser notifications, which you can withdraw at any time.

Advertising

Carcassonne and the 2DGameClub website may show ads served by Google AdSense, which help keep the games free. In games, ads appear between games or as an optional ad you can choose to watch for coins — never in the middle of a move.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this and other sites.
• You can opt out of personalised advertising at Google Ads Settings or www.aboutads.info.
• In the European Economic Area, the UK and Switzerland, Google shows personalised ads only with your consent.

See how Google uses information from sites that use its services.

Who Processes Your Data

Service	Purpose
Our own server (self-hosted Supabase)	Accounts, sign-in, game data and online matches. We run the database ourselves; it is not a shared cloud service.
Google Sign-In	Optional sign-in with your Google account — Google Privacy Policy
Google AdSense	Showing ads — Google Privacy Policy
Cloudflare	Delivering and protecting the website — Cloudflare Privacy Policy

We share with each service only what it needs to do its job.

Your Rights

• Access and portability — ask for a copy of your data, including your game history as a file.
• Correction — change your username, display name or avatar from your profile.
• Deletion — request deletion of your account and its personal data by email, as explained on our account deletion page (the Delete Account button in each game leads there). We confirm and complete every request within 30 days.
• Objection — ask us to exclude your account from usage analytics.

We honour these rights for every player, wherever you live. If you are in the European Economic Area or the UK, you may also complain to your local data-protection authority. If you are in India, you may raise a grievance with us first and then with the Data Protection Board of India. We do not sell your personal information.

Data Retention

• Accounts — kept for as long as your account exists.
• Deleted accounts — personal data is permanently removed within 30 days of your request.
• Usage events — deleted automatically after 12 months.
• Error reports — deleted automatically after 30 days.

Where Your Data Is Stored

Accounts and game data are stored on our own server in India. If you play from another country, your data is transferred to and processed in India, protected by the safeguards described in this policy. Google and Cloudflare process data in their own global infrastructure under their own policies.

Children

Carcassonne is intended for players aged 13 and older. We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it within 30 days. If you believe a child has given us personal data, please contact us.

Security

All traffic is encrypted (HTTPS). Access to our database is restricted, and each player can read only their own private data.

Changes to This Policy

If we make a significant change, we will update this page and the date at the top. Minor wording fixes may be made without separate notice.

Contact and Grievances

Carcassonne is operated by 2DGameClub Studio, an independent developer based in India, which is responsible for your data. For privacy questions, data requests or grievances, email jaym6600@gmail.com or use our contact page. We respond within 30 days.