1. What we process

Agreement evidence. A random receipt identifier, one-way token hash, policy version and digest, three affirmative confirmations, platform, app version, server times, and expiry. A linked random player identifier records room and game identifiers and participation timestamps.

Temporary rooms. A server-generated Player 1–6 label, selected bundled avatar, temporary credentials, membership, presence, commands, game state, scores, and results. The long-lived agreement record excludes the label, avatar, credentials, cards, dice, actions, scores, and results.

Operations and support. Allowlisted error categories and counts may be processed for reliability and security. Email contains whatever you choose to send. Network providers necessarily process addresses to route and protect requests; Pocket Table uses only a short-lived one-way network hash for application rate limits.

TestFlight. Apple controls beta installation, device, crash, usage, and optional feedback information under TestFlight & Privacy.

2. Why we use it

• Record and later demonstrate the required entry confirmations.
• Create, authenticate, synchronize, restore, and close temporary rooms.
• Prevent duplicate actions, enforce room controls, limit abuse, and diagnose failures.
• Respond to support, privacy, security, and legal matters.

We do not sell information or use it for advertising, profiling, data brokerage, cross-app tracking, or automated decisions with legal effects.

3. What players and devices see

People in a room see generated player labels, bundled avatars, public game actions, status, scores, and results. Private cards or dice go only to the permitted player until revealed by the rules.

Optional camera access decodes Pocket Table invitations on-device. Frames are not uploaded or retained, and the code can always be entered manually. Preferences remain on the device. The raw agreement token remains in local app/browser data; only its one-way hash is stored by the server.

4. Providers and locations

OpenAI Sites hosts the published service. Cloudflare infrastructure provides delivery, compute, database storage, security, rate limiting, and logs. Apple distributes the iOS beta. Google processes support email.

Providers may process information outside British Columbia or Canada. We do not promise Canada-only storage. We otherwise disclose information only to operate the service, at your direction, for a protected business reorganization, or as permitted or required by law.

5. Retention

• Rooms close after two idle hours and all room data is deleted within 24 hours of creation.
• An agreement receipt is kept for one year after acceptance or latest use; each participation record is kept for one year from that room entry.
• Session-lineage and room-block records expire no later than the room. Rate-limit buckets expire after their short configured window.
• Application diagnostics are kept for no more than seven days.
• Resolved support correspondence is normally removed from the active mailbox within 30 days. Historical in-product safety reports submitted before this version continue their existing 30-day expiry and accept no new submissions.

Deleted records may remain in restricted provider recovery systems until those recovery windows expire. Apple controls its TestFlight copy.

6. Choices, security, and contact

You may decline camera access, leave a room, clear local data, remove the app, or ask about correction or deletion where applicable. Without accounts, we may need a receipt reference, room code, and approximate time and still may be unable to connect a pseudonymous record to you.

We use encrypted transport, one-way hashing, private-state filtering, secure credential handling, temporary rooms, limited diagnostics, and access controls. No security measure is perfect.

Email alanwork223@gmail.com with “Pocket Table privacy request.”