Privacy Policy

1. Who we are and what this covers

This Privacy Policy applies to the Hand & Foot web app and progressive web app at handandfoot.club (the “Service”). The Service is operated by Buffalo Integration LLC, a New York limited liability company doing business as Hand & Foot. In this policy, “Hand & Foot,” “Company,” “we,” “us,” and “our” refer to Buffalo Integration LLC.

Questions and privacy requests may be sent to support@handandfoot.club or Buffalo Integration LLC, PO Box 181, East Amherst, NY 14051.

2. Information we collect

Information you provide

• Account information: your email address, display name, account identifier, and authentication information. Our authentication provider processes passwords; we do not receive your plain-text password.
• Profile and preferences: your avatar choice, display settings, card and table preferences, and similar selections.
• Game information: tables you create or join, game actions and state, scores, statistics, opponents, timestamps, and saved online games.
• Communications: information you send when you contact us.

Information collected automatically

When you use the Service, we and our hosting, security, database, and advertising providers may process technical information such as IP address, browser and device type, operating system, referring pages, pages or features used, approximate location derived from IP address, timestamps, cookie or device identifiers, and diagnostic or security events.

Information stored only on your device

Offline game saves, hand-order choices, cached app files, and some preferences may be stored in browser storage on your device. Offline saves are not sent to us merely because you create them. Clearing browser storage or uninstalling the progressive web app may erase them.

3. How we use information

We use information to provide accounts and multiplayer play; save progress, preferences, and statistics; operate public or invitation-only tables; maintain, secure, troubleshoot, and improve the Service; communicate with you; prevent fraud, abuse, and cheating; comply with law; and, if enabled, display, measure, and manage advertising.

Where a law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and protecting the Service, consent where requested, and compliance with legal obligations.

4. Google AdSense and advertising

If we introduce Google AdSense, third-party vendors, including Google, may use cookies or similar technologies to serve and measure ads based on your prior visits to this Service or other websites. Google’s use of advertising cookies enables Google and its partners to serve ads based on visits to this Service and other sites on the Internet.

You can learn how Google uses information for advertising and opt out of personalized advertising through Google Ads Settings. You may also opt out of some participating vendors through AboutAds. Browser or device controls may also let you block or delete cookies.

If additional ad vendors or networks are used, we will identify them or provide access to the applicable vendor list and choices. Where required, we will request consent before using advertising cookies or personal data for personalized advertising.

5. When information is disclosed

• Other players and the public: your display name, avatar, table presence, and gameplay information may be visible to opponents. If you join or create a public table, limited table and host information is visible to people browsing public tables.
• Service providers: vendors that provide hosting, authentication, database, security, email, support, and similar operational services, including Supabase.
• Advertising providers: Google and other vendors if advertising is enabled, as described above and in any consent interface.
• Legal and safety reasons: when reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or enforce our terms.
• Business changes: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

6. Selling and sharing

We do not sell personal information for money. We also do not use personal information to build profiles that we sell to others.

Some privacy laws define “sale” or “sharing” broadly enough to include disclosure of cookie, device, or activity information for personalized or cross-context behavioral advertising. If we enable that kind of advertising, those disclosures may be considered a sale or sharing under those laws even though we are not paid for your personal information itself. Where applicable, we will provide required opt-out controls and honor legally recognized opt-out preference signals.

7. Retention and deletion

We keep account and online game information for as long as reasonably needed to provide the Service, maintain accurate records, resolve disputes, protect the Service, and meet legal obligations. Retention varies by the type of record and why it is needed. Security logs, backups, and records required for legal purposes may remain for a limited period after account deletion.

Registered users can delete their account from Profile settings. This deletes the account and associated profile, statistics, and online game sessions from active systems, subject to limited backup, security, fraud-prevention, or legal retention. Local offline data remains on the device until you delete the save or clear the app’s browser storage.

8. Your choices and rights

Depending on where you live, you may have rights to access, know, correct, delete, or receive a copy of personal information; opt out of certain targeted advertising, sale, sharing, or profiling; withdraw consent; restrict or object to processing; and appeal a decision about a request. You will not be discriminated against for exercising a privacy right.

Use Profile settings for common account changes and deletion, or email support@handandfoot.club. We may need to verify your identity and may retain a record of the request. Authorized agents may submit requests where permitted by law.

9. Security and data incidents

We use reasonable administrative, technical, and organizational safeguards designed for the nature of the information we process. No system, transmission, or storage method is completely secure, so we cannot guarantee that unauthorized access, loss, or misuse will never occur.

If a security incident affects your personal information, we will investigate, take appropriate containment and remediation steps, and notify affected people and authorities when required by applicable law. You are responsible for keeping your password confidential and using a unique password for this Service.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information, contact us so we can review and delete it. Users under the age of legal majority where they live should use the Service only with permission from a parent or legal guardian.

11. International use

The Service and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, we use recognized safeguards for international transfers.

12. Changes to this policy

We may update this policy as the Service, advertising practices, or laws change. We will post the revised policy, update the date above, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.