Privacy policy

Who is responsible?

Honeymoon Bridge at honeymoonbridge.net is operated by WaiverKing, Inc., 1990 N. California Blvd., 8th Floor, Suite 8, Walnut Creek, CA 94596, United States ("we", "us"). We are responsible for deciding how the personal information described here is used. Contact privacy@waiverking.com for privacy questions and requests.

Information we use and why

• Guest play: your chosen nickname, a random guest-session identifier, connection/activity times, matchmaking status, moves, private hands and game scores. These enable play, reconnection, fair move validation and match completion. Your opponent sees your nickname and public play, not your private hand or future cards.
• Private player roster: nicknames, recorded arrival times, completed deal results and match totals. We keep these for 90 days to understand game participation and investigate reported problems. A new arrival is recorded when a guest session is created; this is not a record of every anonymous page visit. Computer results are sent when connected and marked as device-reported. Roster access is restricted to the owner through authenticated reporting.
• Device storage: saved computer games, scores, coaching preferences, nickname, server choice and guest token. These support the features you use. Clearing browser storage removes these local records but does not immediately erase server records.
• Optional analytics: only after permission, we use a random browser identifier and page-view event identifiers to count daily unique browsers, new and returning browsers, page views, and unique browsers over 7 and 30 days. These identifiers are not linked to names, emails, nicknames, game results or IP-based fingerprints. A browser identifier is pseudonymous rather than a guarantee of complete anonymity. Reports contain aggregate counts.
• Delivery and security: Cloudflare processes normal connection information, including IP addresses, request information and security signals, to deliver and protect the website. This is separate from the optional visitor counter.
• Correspondence: if you contact us, we receive the information you provide so we can respond and handle your request. Do not send passwords, guest tokens or unnecessary sensitive information.

No email or password is required to play. Choose a nickname that does not reveal your real name or contact details. We do not use advertising trackers, sell personal information or share it for cross-context behavioural advertising. The app does not request your camera, microphone, contacts or precise location.

Google Analytics

With your permission, we also use Google Analytics 4 to measure visits, page views and returning users. Google processes browser cookie identifiers, page-use events, approximate location and technical device/browser information. Your IP address is necessarily transmitted to Google to deliver the request; Google states that GA4 does not log or store individual IP addresses. We do not send nicknames, guest tokens, game results, email addresses, query strings or full referring URLs to Google. We disable advertising personalisation and Google signals in this integration.

Google Analytics only loads after you allow analytics. There are no Google analytics requests before that choice. Earlier permission for our own counter does not carry over: we ask again when introducing Google Analytics. Declining removes this site’s Google Analytics cookies and disables further measurement. Google’s prior records remain subject to its configured retention and deletion processes. Cookie validity is limited to 180 days without refreshing on every visit. Google Analytics event-level and user-level data retention is set to two months, with reset on new user activity disabled. This setting does not shorten retention of standard aggregate reports.

Google may process information internationally, including in the United States. See Google’s privacy policy and how Google uses information from partner sites. Authorised analytics account users can access Google reports. Contact us about applicable access or deletion rights. Google Analytics counts may differ from our first-party counter because their definitions, processing and consent coverage differ.

Our reasons for processing

Where data protection law requires a legal basis, we process information necessary to provide the game you request to perform that service. Our legitimate interests support proportionate security, troubleshooting and the limited private roster. Optional browser analytics rely on your consent. We may also process information to meet legal obligations or handle legal claims. You can object to processing based on legitimate interests; we will consider your request and any overriding lawful reasons.

Automatic matchmaking pairs available players and the game validates moves and calculates scores. We do not use these systems to make decisions with legal or similarly significant effects on you.

Retention

• Local game and guest data remain until cleared, replaced or removed by your browser; there is no automatic local expiry for these settings. Inactive guest sessions and finished playable match state expire on the server after approximately 24 hours. An active match is retained while being played.
• Roster arrivals and results are scheduled for deletion after 90 days.
• Analytics choice and browser recognition have a 180-day lifetime. Expired local values are ignored and cleared or replaced when the site runs; browser storage does not erase them while the site is closed. Server recognition records expire after 180 days and are removed by scheduled cleanup.
• Browser-by-day analytics records cover 30 UTC calendar days. Event identifiers for duplicate prevention are short-lived (approximately 2–3 days). Scheduled cleanup may add a short delay. Aggregated counts, which no longer identify a browser, may remain indefinitely.
• Sampled Cloudflare Workers diagnostic logs are retained for up to seven days under the provider's current service limits. Cloudflare may retain other security or service data under its own applicable policies. Deleted application records may remain temporarily in the provider's protected recovery systems.
• Correspondence is retained for as long as needed to resolve the request and any related dispute or legal obligation; the relevant factors are the request's nature and applicable retention requirements.

Sharing, hosting and international processing

Cloudflare hosts and protects this service. Its infrastructure may process information outside your country, including in the United States. Applicable contractual safeguards and legal transfer mechanisms apply to international processing; contact us for information about the safeguards relevant to your data. See Cloudflare's privacy policy.

Authorised dashboard administrators can view aggregate analytics; the private roster is restricted to the owner. We may disclose information when legally required or reasonably necessary to protect the service or establish, exercise or defend legal claims. External rules references have their own privacy practices. A separately configured game server has its own operator; this policy describes honeymoonbridge.net.

Your choices and rights

Use Privacy choices on any website page to allow or decline analytics. Declining removes the local analytics identifier and stops future optional collection. Previously collected server records follow their retention periods; aggregate counts cannot be linked back to you for removal. Do Not Track and Global Privacy Control disable this optional analytics collection. Blocking storage also prevents it. You can play without analytics.

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to certain uses, and withdraw consent without affecting earlier lawful processing. Contact privacy@waiverking.com. Provide the relevant nickname and approximate dates if your request concerns play. Nicknames are not verified identities, so we may need proportionate information to locate records and protect other players; do not send your guest token. We do not collect additional identity data merely to identify otherwise unidentifiable analytics records.

You may complain to your local data protection authority, including the authority where you live or work in the EEA or the UK Information Commissioner's Office where applicable. Where applicable state privacy law gives you additional rights, you may also request information about categories of data, sources and recipients, use an authorised agent, and appeal a denied request by contacting us. We do not discriminate against you for exercising applicable privacy rights. These rights are subject to legal conditions and exceptions.

Children, security and updates

The service is not directed at children under 13. If you are under the age at which you can agree to the terms in your country, ask a parent or guardian to review them with you and obtain any permission required by law. Contact us if a child has supplied personal information that should be removed.

We use encrypted connections, server-side move validation and restricted reporting access. No online service can guarantee absolute security. We will update this policy when our practices change and show the revised date. Where a new optional purpose requires consent, we will ask before using information for that purpose.