Privacy policy

Who is responsible

The controller is Lucas Magalhães, who runs OpenPuke at openpuke.com.

Questions, access requests and deletion requests: privacy@openpuke.com.

What we collect, and why

You can play without an account. We only keep what the game and the shop need.

• Sign-in with e-mail (for people who want to buy and keep extra decks): your e-mail address, used to send a one-time sign-in code through Amazon Cognito and Amazon SES and to recognise your account. We store the address, a random account id, a display name (the part before the @), your sober-mode setting and the sign-up date.
• Sign-in with Google: your Google account e-mail, name and account id, received through Amazon Cognito with the scopes openid, email and profile. We use them only to sign you in and to name your account. We read nothing else from your Google account.
• Players and rooms: the nickname you type to join a room, together with the room code and the game state (players, scores, cards drawn, chosen decks). Everyone in the room sees the nicknames, so do not use a name you want to keep private. A random device id, created in your browser, tells the server which phone is which player.
• Purchases: which deck you bought, the Stripe Checkout session id, the amount in euros and the date, linked to your account so the deck stays unlocked. Card details are entered on Stripe's page and handled by Stripe; we never see or store them.
• Technical data: like any web server, ours processes your IP address and request details to deliver the pages and to limit repeated sign-in attempts. Server logs are kept for 7 days.
• Anonymous counters: how many games start and finish and how many players they have, as plain numbers in Amazon CloudWatch. They contain no personal data.

Cookies and local storage

Everything below is needed to sign you in or to remember a choice you made, so there is no cookie banner.

• op-id and op-rt: your sign-in session, set only after you sign in. HttpOnly, Secure, SameSite=Lax. They last 1 hour and 30 days and are deleted when you sign out.
• op-otp and op-pkce: temporary cookies while you sign in with a code or with Google. HttpOnly, 10 minutes.
• locale: the language you picked, kept for one year.
• Your browser's local storage: the random device id (op:device) and your sober-mode setting (op:sober). They stay on your phone until you clear the site data.

No ads, no selling

OpenPuke shows no ads, does not sell or share your data for marketing, and uses no third-party analytics, advertising or tracking tools. Fonts are served from our own domain. We make no automated decisions about you.

Who handles data for us

These providers process data on our behalf. Some are based outside the EU and Brazil; where data leaves those areas they rely on safeguards such as standard contractual clauses.

• Amazon Web Services: hosting, database, sign-in (Cognito), e-mail (SES), logs and counters. Data is stored in Frankfurt (eu-central-1). The CloudFront network delivers pages from servers around the world.
• Cloudflare: DNS for openpuke.com, forwarding of mail sent to our contact address, and the redirect from our old domain.
• Stripe: card payments for deck purchases, under Stripe's own privacy policy.
• Google: sign-in, only if you choose Continue with Google.

Legal bases

Under the GDPR and the Brazilian LGPD we rely on:

• Contract: signing you in, keeping your account and your decks, running your room.
• Legitimate interest: keeping the service secure and working (rate limiting, error logs) and counting games anonymously.
• Legal obligation: keeping purchase and tax records where the law requires it.

How long we keep it

• Rooms, nicknames and game state: 12 hours after the room is created, then deleted automatically. The database can take up to 48 hours to remove them; the app treats an expired room as gone straight away.
• Account and purchases: until you ask us to delete them.
• Sign-in cookies: as listed above.
• Server logs: 7 days.
• Payment records at Stripe: as long as the law requires.

Your rights

You can ask for access to your data, correction, deletion, restriction or a portable copy, and you can object to processing. There is no delete button yet: write to privacy@openpuke.com from the e-mail address of your account and we will act within the legal deadlines. Deleting your account removes your profile, your purchase records and the sign-in account, so bought decks are lost.

You can also complain to your data protection authority (in Brazil, the ANPD).

18+ only

OpenPuke is for adults. By signing in or playing you confirm you are 18 or older. We do not check ID and do not knowingly collect data from anyone under 18; if you think that happened, write to us and we will delete it.

Changes

If this policy changes, we update this page and the date at the top.

Google user data

If you sign in with Google, we use your Google account e-mail, name and account id only to sign you in and to name your account. We do not use them for advertising, do not sell them and share them with nobody except Amazon Cognito, which handles the sign-in for us.

OpenPuke's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.