Privacy Policy

Effective date: July 1, 2026. This policy applies to canasta.now and sits alongside our terms of use.

The short version: You can play every Canasta variant without an account, and your gameplay statistics live in your own browser's local storage. The only account system is optional Google Sign-In, and when you sign in your best scores sync to the leaderboard. We collect only what we need to run the service, we never sell your data, and you can request deletion of your account at any time.

1. Information We Collect

Gameplay Statistics (Local Storage)

Your Canasta results, best scores, streaks, and in-progress games are saved in your browser's local storage on your own device. This data stays in your browser by default and is under your control. Clearing your browser data erases it.

Account Data (Optional, Google Sign-In only)

Accounts are entirely optional, and the only way to create one is with Google Sign-In. There are no email-and-password accounts on Canasta.now, so we never create, store, or ask you to choose a password. When you sign in with Google, we receive a basic profile from Google (your name or display name, email address, and account identifier) and use it to identify your account. Signing in lets your best scores sync to the leaderboard across your devices.

Leaderboard and Score Data

For signed-in players, we record the scores you submit from finished games, daily deals, and multiplayer matches so your results can sync to and appear on the leaderboard. If you play as a guest, these results stay in your local storage and are not sent to us.

Contact Form Data

If you message us through the contact form we store the name, email address, subject, and message you provide, solely so we can read and respond to your enquiry.

Technical Data

Standard server logs capture IP addresses, browser user agents, and request timestamps for security and performance monitoring. Logs are retained for a limited period and are not used to profile individual players.

2. How We Use Your Information

  • To run the Canasta games and manage optional Google-based accounts
  • To sync signed-in players' scores to the leaderboard and display rankings
  • To run fair daily deals and multiplayer matches
  • To respond to messages sent through the contact form
  • To detect abuse and keep leaderboard scores legitimate
  • To improve site performance and fix bugs

We do not use your data for profiling, and we never sell it to anyone.

3. Cookies

We use essential cookies to keep you signed in with Google and to protect forms against cross-site request forgery. We may use privacy-respecting analytics to understand aggregate site usage (page views, popular variants); this data is aggregated and not used to identify individual visitors. See the cookie policy for more.

4. Data Sharing

We do not sell, rent, or trade personal data. We may share data only in the following circumstances:

  • Google Sign-In: Authentication is handled by Google when you choose to sign in; Google's own privacy policy governs the data they process
  • Service providers: Hosting and email delivery providers operating on our behalf
  • Legal requirements: If required by applicable law or valid legal process

5. Data Retention

Account data is retained for as long as your Google-linked account is active. Leaderboard scores associated with a deleted account are anonymized rather than deleted, to preserve leaderboard integrity. Contact form messages are kept only as long as needed to handle your enquiry. Local-storage statistics stay on your device and never expire on our side.

6. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete your personal data, or to object to or restrict its processing. To exercise any of these rights, reach us through the contact form.

7. Children

Canasta.now is suitable for all ages, but Google-based accounts are intended for users aged 13 and over. We do not knowingly collect personal data from children under 13; playing without an account requires no personal data at all.

8. Security

We use HTTPS for all connections, rely on Google for authentication, and apply CSRF protection on all form submissions. We take reasonable steps to protect your data, but no internet service can guarantee absolute security.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated effective date on this page. Continued use of the service after the effective date constitutes acceptance of the revised policy.

10. Contact

For privacy questions or data requests, please use the contact form.