Privacy policy

Last updated 14 September 2026.

High Card Club is a card game (Batak, Spades, Tarneeb, Baloot) that runs as a Discord Activity. This policy explains what we keep about you, why, for how long, who helps us run the game, and how you can see, download or delete your data. It serves as the information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) and as the privacy notice under the EU General Data Protection Regulation (GDPR).

Who is responsible

The data controller is an individual developer based in Türkiye, whose name we give on request. Contact for anything in this policy: [email protected].

What we keep, and why

• Your Discord identity: your Discord user id, display name and avatar link, which Discord gives us when you open the Activity and allow it. We use them to seat you at a table, show you to the other players, and keep your match history. We do not ask Discord for your e-mail address, messages, friends or voice.
• Your Discord server: the id of the server you play in, checked with Discord, so the leaderboard can show your server's players.
• Matches: for each finished match, the game, when it ended, whether bots played, your seat, score, whether you won and your ranking points. They make your profile and the leaderboards. Other signed-in players can see your name, avatar and results on the leaderboard unless you hide your name (see Your choices).
• Tables in play: seats, spectators, moves and the owner's choices, held only while a table is open. A table closes a few minutes after everyone leaves, and then this is gone. Open tables show their host's name and avatar to other players for a few minutes.
• Trials and Club: when you start a free three-day trial of a Club scene or deck, we record which one and when it ends, so each can be tried once. Club is not on sale yet. When it is, our payment provider will tell us what you bought and for which Discord user; your e-mail, address and card stay with the payment provider.
• "Tell me" requests: if you ask to hear when Club brings a locked scene or deck back, we keep that request.
• Your settings: whether you hid your name on the leaderboard, and a deletion you asked for.
• Discord status: while you play, Discord shows "Playing High Card Club" and the game on your Discord profile. You can turn this off in Discord's activity privacy settings.
• Sign-in: a signed session that says who you are for 12 hours. It is kept in the game's memory on your device, not stored by us.
• Technical logs: errors and timings to keep the game running. Our hosting provider may also log requests, including IP addresses, for security.
• On your device only: the sound volume, whether a "New" mark or a trial's end note was shown, and whether you closed the terms note. These stay in your browser's storage and never reach us. We use no cookies, no advertising and no third-party analytics in the game.
• Website visits: highcard.club counts page visits with Cloudflare Web Analytics, which sets no cookies and does not identify you or follow you across sites.

Legal grounds

We process this data because it is needed to provide the game you chose to play (performance of a contract; KVKK Article 5(2)(c), GDPR Article 6(1)(b)), and to keep the service secure and fair and to show leaderboards (our legitimate interest; KVKK Article 5(2)(f), GDPR Article 6(1)(f)), which you can object to by hiding your name. We do not use your data for advertising or sell it.

How long we keep it

• Matches: until you delete your data, or until you have not played for twelve months. Then they are anonymised: they stay for your opponents' records as "Deleted player", with no id, name or avatar.
• Trial records: until you delete your data, so a trial is not repeated.
• "Tell me" requests: until Club opens and we have told you, or until you delete your data.
• Tables in play: until the table closes, usually minutes.
• Sign-in session: 12 hours.
• Technical logs: 7 days.
• Backups: deleted data can remain in database backups for up to 30 days, which we do not restore for other purposes.

Who helps us

• Cloudflare hosts the game, its database and logs.
• Discord runs the platform the game lives in and tells us who you are.
• Lemon Squeezy will sell Club as merchant of record when it opens.

These providers work on servers in several countries, including outside Türkiye and the European Economic Area. Transfers rely on the safeguards the providers offer, such as standard contractual clauses.

Your choices and rights

Inside the game, tap your profile on the lobby screen and open My data:

• Hide my name on the leaderboard: your matches still count; others see "Hidden player".
• Download my data: a JSON file with everything above that we keep about you. The link works once, for ten minutes.
• Delete my data: we wait 30 days so you can change your mind, then anonymise your matches and delete everything else. You can cancel until then.

Under KVKK Article 11 and GDPR Articles 15 to 22 you also have the right to learn whether and how your data is processed, to have it corrected, to object, and to complain. Write to [email protected]; we answer within 30 days, free of charge. We can only act on requests we can tie to your Discord account, so the in-game way is the fastest. You may complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority where you live.

Children

The game follows Discord's minimum age, 13 or higher where local law says so. We do not knowingly keep data about younger children. Paid purchases, when they open, need an adult or a parent's permission.

Changes

We post changes here with a new date. For important changes we may also show a note in the game.