Last updated 23 September 2026
Guandan is a card game you can play without an account. This page says what the game stores, why, and for how long.
The server gives your browser or phone a random identifier so it can find your seat at a table again. It is kept in a cookie on the web and in the app's own storage on a phone, and stays there until you clear it (clearing the browser's cookies, or the app's data, or uninstalling the app). The display name you type is kept with the seats you take. Nothing here identifies you as a person.
An account is a username, a password and, if you add one, an email address (see below). The password is stored only as a bcrypt hash. Signing in creates a session record with the time, your IP address and your browser or app version (user agent), used to keep you signed in and to let you sign out other devices. A session record is deleted a month after it was last used; signing out, signing out everywhere else, changing your password or resetting it by email ends sessions at once, and deleting the account deletes them all.
You can add an email address to your account, when you sign up or later on the account page. It is used for two things only: to confirm that the address is yours, and to send you a link to reset a forgotten password. It is never shown to other players or on your profile, and we never use it for newsletters or advertising. The mails are delivered by Resend, which processes the address and the mail on our behalf only to deliver it. Our logs record only a masked form of the address (like a***@example.com). A confirmation link expires after 24 hours and a reset link after one hour; unused links are deleted when they expire, and all of them when the address changes or the account is deleted. You can change or remove the address at any time on the account page, and it is deleted with the account.
A table keeps who sat where (a username or a display name), the settings, the cards played, the result and, for rated games from the lobby queues, the rating change. The card-by-card record of a finished game is deleted 30 days after it ends; the table itself (its seats, result and rating changes) stays as the game's record and on the players' profiles. A table that never started is deleted after a day, and a game nobody touched for three days is deleted. Ratings, a per-day rating history, win and loss counts, and the pair ratings of two accounts that queue together are kept per account.
When you report a player we store who reported whom (the account or anonymous identifier of both), both display names, the table, the reason you chose and the time. A report is kept until a moderator has reviewed it and for 90 days after that, or until the account of either player is deleted. When you block a player we store that you blocked them, the name they had and when; a block lasts until you unblock them (under Blocked players) or delete your account. When a moderator resets a name or suspends a player, that decision is stored for as long as it applies.
The contact form stores what you write, the name and email address you choose to give (both optional; the email is used only to answer you), the time, your IP address and your game identifier. A message is kept until we have dealt with it and for 90 days after that.
To stop scripts from flooding sign-in, sign-up, table creation, invite links, reports and the contact form, the server counts recent requests per IP address (per game identity for reports). These counters live only in the server's memory, are never written to disk, and are cleared as they run out. The web server in front of the game keeps an access log (time, IP address, the page asked for, browser) for a short time, then it is rotated away.
The Android and iOS apps send a crash report when they crash, through Sentry (a crash-reporting service that processes the reports for us): the stack trace, the app version, and the device model and operating system version. No account data, names or game content are attached.
The database is backed up every night. A backup is kept for 14 days and then deleted, so anything deleted from the game is gone from the backups within 14 days as well.
No email address unless you add one to your account or give one on the contact form, no phone number, no contacts, no location, no advertising identifiers, no analytics or tracking of how you use the game, and nothing is sold or shared with anyone for advertising or any other purpose.
You can delete your account at any time at /account/delete or from the account screen in the app. That removes the account, its email address, its sessions, pending email links, ratings and rating history; finished games stay on record without your name. Without an account, clearing the browser's cookies or the app's data leaves nothing on the server that points back to you; to have anything else removed, write to us.
The game is for players aged 13 and over (see the Terms of Use).
Questions about this policy or your data: Use the form at /contact or write to piffycoding@gmail.com.