Privacy

This page says, in plain words, what we collect, why, where we keep it, how long for, and how to get it deleted. There is no small print. It is in two halves: the website you are reading now, and the game. If you have only ever read these pages, the second half does not apply to you.

The website

If you type your email into the “Notify me” box

We keep the address and the date you gave it, and nothing else. We do not ask for your name, your phone number or your age. It is used for one thing: to tell you when Pilotta opens. No newsletter, no advertising, and we never sell or pass it to anyone.

The box is protected by Cloudflare Turnstile, which decides whether you are a person rather than a script. Cloudflare sees your IP address when it makes that decision. It is not a cookie and it does not follow you around.

Counting visitors

We set no advertising cookies and use no outside analytics service — no Google Analytics, no Facebook pixel, none of it.

We do count how many people open our pages, and we count it ourselves. When a page opens, our own server records the time, which page it was, which language it is written in, the site that sent you here (the site’s name only, never what you searched for) and your country. It does not record your IP address, and it writes nothing into your browser. To tell ten pages opened by one person apart from ten different visitors, it keeps an anonymous code of the day — a one-way scramble that cannot be turned back into you, dissolves at midnight, and cannot recognise you tomorrow. So the count can tell us that ten different people read the rules yesterday, and can never tell us who they were.

Your browser remembers only which language you picked, and that stays on your own device.

Fonts

The page’s fonts load from Google Fonts, which means Google sees your IP address when you open the page — as on any site that uses Google Fonts.

The game

Playing on your own against the computer

Nothing leaves your device. Your name, level, coins, unlocked decks and phrases, and the last fifteen games you played are stored on the device itself — in the browser, or in the app. We cannot see any of it, and clearing your browser data or deleting the app deletes it.

Playing online

The first time you play against other people, the game makes an account for you without asking. It is anonymous: a long random number, and the name you are showing at the table. Nothing else — no email, no password. It exists because four people at one table have to be told apart, and because your progress has to survive a new phone.

From then on we hold, against that number: the name you show, and a backup copy of your progress — level, coins, which decks and phrases you have unlocked, and your settings. It is the same information the game already keeps on your device; the copy is what lets you sign in on a second device and find your things there.

When an online match finishes we store the result: the date, the score, who won, and the four names at the table. That is what your match history is made of. We do not store the cards of an online match against your name — the server keeps a record of how the hands were played, with every seat reduced to “a person” or “the computer”, and that record carries no name and no account number. We use it to make the computer players less stupid.

While you are actually at a table, our server holds the table in its memory and forgets it when the table closes. Its technical log notes the name and account number of who connected and when, so that we can work out what went wrong when something does.

If you make a real account

You can turn the anonymous account into a permanent one. With an email and password we hold the address and the password — scrambled, so nobody here can read it. If you use the Google or Discord button instead, they tell us your email address and the name on that account, and we keep those. You keep the same account number, so nothing you earned is lost.

Talking at the table

There is no free chat in Pilotta. You can only say the fixed phrases the game gives you, so there is nothing to store, nothing to moderate, and nothing anyone can write to you.

The test version

A separate test version of the game runs at a different address, for people who agreed to try it before launch. There, and only there, games against the computer are uploaded so we can see how the bots played, along with anything a tester reports through the report button. Testers are told this on the screen the first time they open it. That material is kept in its own database, apart from everything else, and deleted after 90 days. None of it happens on pilotta.io.

How long we keep it

Why we are allowed to hold it

Your email for the launch message: because you agreed. You can take that back at any time and we will delete it.

Your account, your progress and your match results: because you cannot play the game without them — it is the service you asked for.

The page count, the technical log and the anonymous record of hands: because we have a genuine need to know whether anyone is reading the site, why the server fell over, and whether the computer players are any good. None of it identifies you, and you can object to it.

Where it is kept

The accounts, the progress backups, the match results, the launch list and the page count sit in a Supabase database on servers in Ireland, inside the European Union. The site itself is served by Cloudflare.

The server that runs the live tables is a Google Cloud machine in the United States. While you are playing, the names at your table pass through it, and its technical log sits there. It holds no account and no progress — those stay in Ireland — and its record of how the hands were played carries no names.

Cloudflare and Google Fonts are worldwide services, so a request from your browser can be answered by a machine outside the EU. We do not send them anything about you beyond what any website request carries.

Children

Pilotta is a card game and anyone can read these pages. But in Cyprus, a person under 14 cannot agree on their own to a service like this — a parent has to agree for them. So we do not want accounts or online play for under-14s, and we do not knowingly keep anything about a child under 14.

If you are a parent and think your child has an account here, write to us and we will delete it. You do not need to prove anything or explain yourself.

Your rights

At any time you can ask us to show you what we hold about you, to correct it, to delete it entirely, or to hand it to you in a file you can take elsewhere. Write to us and we will do it — you do not need to give a reason, and it costs nothing.

One thing to know about deletion: the results of matches you already played stay, because they are three other people’s history as much as yours. Your name comes off them, and everything else — your account, your progress, your backup — goes.

You also have the right to complain to the Office of the Commissioner for Personal Data Protection of Cyprus.

What we do not do

We do not sell anything about you. We show no advertising. We run no analytics service, no advertising cookies and no tracking pixels. We do not build a profile of you, and we let nobody else do it on our pages.

Contact

For anything on this page — a question, a correction, or to have everything deleted — write to pilottos.io@gmail.com. We answer within a month, and usually a lot sooner.