Privacy Policy

Last Updated: November 7, 2026

Round Table Shuffle is run by IT Giant, LLC, a Nevada limited liability company ("we," "our," or "us"). This Privacy Policy explains what information we collect when you visit rtshuffle.com and play Round Table Shuffle, how we use it, who we share it with, and the choices you have. IT Giant, LLC is the controller of your personal information.

1. Information We Collect

1.1 Information You Give Us

• Account information: your username, email address and password. We store your password only as a bcrypt hash, never as plain text.
• Two-factor sign-in: the secret for your authenticator app and your backup codes, if you turn on two-factor sign-in.
• Profile and game choices: your avatar, border, card mat, room settings and other cosmetic choices.
• Friends, reports and blocks: the players you add as friends, the players you block, and any report you send us about another player, including the reason you give.
• Messages to us: anything you send us by email.

1.2 Information Created While You Play

• Game data: games played, scores, wins and losses, Adventure Mode progress, quests, achievements, Shards (with a history of what you gained and spent, and why) and the items you own.
• Purchases: what you bought, when, the price and the payment status. Card details go straight to Stripe (see section 4); we never see or store your card number.
• Security records: your IP address and browser type (user agent) when you register, sign in, change account settings or make a purchase, a random identifier the app keeps in your browser (sent when you register or sign in), and records of actions our staff take on accounts.
• Error reports: if the game hits an error in your browser, it sends us the error message, the page address and, if you are signed in, your account. This helps us fix bugs.

1.3 Demo Mode

You can try the game without an account through a demo link. To stop the demo reward being claimed over and over, we record the IP address and a random device identifier for each demo, and the IP address used when the reward is claimed.

1.4 Information from Others

• Stripe tells us whether a payment succeeded, was refunded or was disputed.
• Advertising partners such as Google AdSense may collect information when ads are shown (see section 3.3).

2. How We Use Your Information

• To run the game: your account, matches, friends, rooms, progress and the items you own. (Legal basis in the EU/UK: performing our contract with you.)
• To process purchases: to deliver what you buy, and to handle duplicate payments, refunds and chargebacks. (Contract; legal obligations such as tax records.)
• To send emails: account emails such as email verification and password resets, and, unless you opt out, news about the game. (Contract; legitimate interests for news, or consent where the law requires it.)
• To send notifications: browser push notifications, such as a friend inviting you to a game, only if you allow them. (Consent.)
• To keep the game safe and fair: preventing fraud, cheating and abuse (for example, finding many accounts made from one address or device to collect rewards), handling reports, and protecting accounts. (Legitimate interests.)
• To fix and improve the game: error reports and server logs. (Legitimate interests.)
• To show ads: see section 3.3. (Consent where the law requires it, otherwise legitimate interests.)
• To meet legal obligations and to respond to lawful requests.

We do not use your information to make decisions about you that have legal or similarly significant effects based solely on automated processing.

3. Cookies and Browser Storage

3.1 What We Store in Your Browser

• Sign-in: a sign-in token and, if you choose "keep me signed in," a device token, so you stay signed in. Staff accounts also get an admin portal cookie.
• Settings: small preferences such as whether music is on and whether the profile menu is collapsed.

These are needed for the game to work. We do not use analytics cookies.

3.2 Security Check

Sign-up, sign-in and password reset forms use Cloudflare Turnstile to tell people from bots. Turnstile may read information about your browser and device to do this.

3.3 Advertising

We use, or may use, Google AdSense to show ads. Google and its partners may use cookies to show ads based on your visits to this and other websites. You can opt out of personalized ads at Google's Ads Settings or www.aboutads.info. Where the law requires it, for example in the EU and UK, we will ask for your consent before personalized ads are shown.

4. Service Providers

We use these companies to run the game. They process information for us under their own privacy and security terms:

• Google Cloud (United States): hosts our servers, database, backups and logs.
• Stripe: takes card payments and handles refunds and disputes. Stripe's privacy policy: stripe.com/privacy.
• SMTP2GO: sends our emails.
• Cloudflare: Turnstile security checks.
• Google AdSense: ads, as described in section 3.3.
• Google Fonts and the Socket.IO library server: our pages load fonts and code from these, so they receive your IP address and browser type.
• Your browser's push service (for example Google, Mozilla or Apple) delivers push notifications you allowed.

5. Who Can See Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising except through ads as described in section 3.3.

• Other players can see your username, avatar, border and other cosmetics, your game results and rankings, and whether you are online or at a table.
• Our staff can see account details to give support, handle reports and keep the game safe.
• Authorities: we may disclose information if the law requires it, or to protect the safety, rights or property of our players, the public or us.
• Business transfers: if IT Giant, LLC or the game is sold or merged, your information may pass to the new owner, who must respect this policy.

6. How We Protect Your Information

• All traffic to our site is encrypted with HTTPS.
• Passwords are hashed with bcrypt.
• Our database is on a private network, is encrypted at rest by Google Cloud, and is backed up every night.
• Staff need two-factor sign-in to use our admin tools, and their actions on accounts are recorded.

7. How Long We Keep Information

• Your account is kept while it exists.
• When you delete your account, it is closed for 14 days in case you change your mind, then your username, email address, password, profile, friends and sign-in details are deleted or anonymized, and your Stripe customer record is deleted.
• We keep, without your name or email: purchase records (needed for tax, accounting and chargebacks), game results that other players' history depends on, and records of moderation and staff actions.
• Backups are kept for 14 days and then overwritten.
• Server logs and error reports are kept for a limited time and then deleted.

8. Your Choices and Rights

• Download your data: you can download a copy of your account data from your profile settings.
• Correct it: you can change your profile in the game, or email us to correct your email address or anything else.
• Delete your account: from your profile settings, or by emailing us. See section 7 for what is kept.
• Marketing emails: every one has an unsubscribe link. Account emails such as password resets are always sent.
• Push notifications: turn them off in the game or in your browser at any time.
• Personalized ads: see section 3.3.

We do not currently respond to browser "Do Not Track" signals.

8.1 Users in the EU, EEA and UK

You have the right to access, correct, delete, restrict or object to our use of your personal information, to receive it in a portable format, and to withdraw consent at any time (this does not affect what we did before). You can also complain to your local data protection authority. Your information is processed in the United States. Where we transfer it there, we rely on the safeguards our providers offer, such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.

8.2 California and Other U.S. States

Residents of California and several other states have the right to know what personal information we collect and how we use it, to get a copy, to correct it, to delete it, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information. The categories we collect are listed in section 1, our purposes in section 2, and who receives it in sections 4 and 5. We will not treat you differently for using your rights. An authorized agent may make a request for you; we may ask for proof that they can act for you.

8.3 How to Make a Request

Email privacy@theitgiant.com from the email address on your account, or tell us your username. We may need to confirm that the account is yours. We reply within 30 days, or sooner where the law requires.

9. Children

Round Table Shuffle is not meant for children under 13, and you must be 13 or older to create an account. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us information, please email privacy@theitgiant.com.

10. Changes to This Policy

We may update this policy. We will change the "Last Updated" date above, and if the changes are significant we will tell you by email or in the game before they take effect.

11. Contact Us

← Back to Home