Cribbage! — Privacy Policy
This policy covers Cribbage! and its online services. It is written to be read, not to be survived. If anything here is unclear, ask.
The short version
- There is no advertising, no analytics and no tracking of any kind in this game.
- Nothing is ever sold or shared for marketing.
- What is stored is what is needed to run your account: your Steam ID, your display name, your currency balances, what you own, and your match results.
- You can ask for a copy of all of it, or ask for it to be deleted, at any time.
Who is responsible
Cribbage! is made by one person in the United States, working under the name Citradox. That makes Citradox the data controller — the one who decides what this game collects, why, and what becomes of it.
For any question about your data, or to exercise any of the rights below, email support@citradox.com. Every reply is written by hand, so please allow a few days.
What is collected, and why
| Information | Why | Legal basis (GDPR) |
|---|---|---|
| Your Steam ID and display name | To identify your account, show your name to opponents, and keep your progress | Performance of a contract |
| Pegs and Crowns balances, and the cosmetics you own | So the things you have earned or bought are still there next time | Performance of a contract |
| Match results and ranked rating | Matchmaking and the leaderboard | Performance of a contract |
| Records of Crown purchases, including refunds and chargebacks | To deliver what you paid for, handle refunds, and meet tax and accounting requirements | Legal obligation |
| A log of in-game spending, and a count of recent match rewards | To answer "where did my Crowns go", and to stop automated farming of rewards | Legitimate interests |
No payment details are ever seen or stored by this game. Buying Crowns happens entirely inside Steam's own payment window; all that comes back is confirmation that an order succeeded.
Cookies and tracking
None. The game is not a website, sets no cookies, and contains no analytics, telemetry, advertising or fingerprinting of any kind.
How long it is kept
- Your account — profile, balances, cosmetics and match records: for as long as you have an account, or until you ask for it to be deleted.
- In-game spending log: two years.
- Reward rate-limit counts: thirty days.
- Records of real-money purchases: seven years. These are financial records and must be kept even if you delete your account — this is a legal requirement, not a choice.
Who else is involved
- Cloudflare, Inc. hosts the game's servers and database, and processes this data on our behalf under a data processing agreement.
- Valve Corporation operates Steam. Valve handles your Steam account, your payments and your refund requests under its own privacy policy, as an independent controller rather than on our behalf.
Nobody else receives your data. It is never sold, rented or used for advertising.
Where it is stored
The servers are operated by Cloudflare and data may be processed in the United States. Where information is transferred out of the UK or the European Economic Area, that transfer relies on the Standard Contractual Clauses in Cloudflare's data processing agreement.
Your rights
Wherever you live, you can:
- See everything held about you — ask and you will be sent a full copy.
- Delete it — ask and your profile, balances, cosmetics and match records are erased. Please be sure before you do: it cannot be undone, and it includes any cosmetics you paid for. Records of real-money purchases are kept, for the reason given above.
- Correct your display name — from the Profile screen.
- Object, or complain. If you are in the UK or EEA you may complain to your data protection authority; in the UK that is the Information Commissioner's Office.
To exercise any of these, email support@citradox.com from the address you can be reached at, and say which Steam account it concerns. Requests are handled by one person, so please allow a few days.
Children
This game is not directed to children under 13, and information is not knowingly collected from them. A Steam account is required to play, and Steam requires its users to be 13 or older. If you believe a child under 13 has an account here, contact us and it will be deleted.
California
Personal information is not sold or shared for cross-context behavioural advertising, and never has been. California residents have the rights described above; exercising them will never result in worse treatment or a worse game.
Changes
If this policy changes in a way that matters, the date at the top changes and the new version appears here. This page is the current version.