Skip to content
Tavernly

Privacy notice

Last updated: 6 November 2026

We collect as little as we can. We have no advertising and no tracking cookies.

Who we are

Devdock LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Contact: use the contact form.

What we keep, and why

  • Your age band (13–17 or 18+), from the age screen. We never store your birth date. Why: to keep under-13s out and to turn chat off for minors (legal obligation, and our legitimate interest in keeping minors safe). In the app, the age band can also come from the age range that Apple or Google Play gives. We read it on your device and keep only the band and where it came from, never a birth date or any other store data.
  • A guest account: a random ID, the random device key your browser made, your name (generated, or the one you typed) and picture. Why: to run the game (contract).
  • A login, only if you sign in with Google, Apple or Discord: the ID that Google, Apple or Discord gives your account there. We keep no email, name or picture from them. Why: to bring back your player on another device (contract).
  • Ideas, only if you signed in: the ideas you send, your votes and your reports on the Ideas page. Other players never see who sent an idea. Why: to choose what we make next (legitimate interest).
  • Feedback, only if you send it after a game: your rating, the note you type, the game and the language of the page. We keep no account, IP address or email with it, so do not write personal details in the note. We delete notes after 12 months. Why: to improve the games (legitimate interest).
  • Game records: the seed of each deal, every move, the result, and hat tips. Why: fairness checks, replays and fixing bugs (legitimate interest).
  • Server logs: IP address and technical errors. Why: security (legitimate interest).

Page statistics

We count visits with Plausible Analytics, which runs on our own server. It sets no cookies and keeps no personal data. It does not store your IP address: it mixes it with a salt that changes every day, so a visit cannot be linked to you or to your visits on other days. We see only totals, such as how many people opened a page and from which country, and how many games were started and finished of each kind. Why: to learn which pages and games people use (legitimate interest). We also count completed tutorials by game and lesson number.

On your device

We keep these items in the local storage of your browser: your device key, your session, your age band, your sound setting, the table aids that you turned on, your language and your last choices on the game pages. We also keep four short lists: the games that showed you their first lesson, the games and tutorials that asked you for a rating, the last games that we counted, and the players that you muted at a table (their IDs, up to 200). The game needs some of these items. You asked for the others (the sound switch, the table aids, the language, the game choices, the muted players). The lists make sure that a first lesson and a rating question open one time for each game, and that we count a game one time. We set no cookies. In the app we also keep where your age band came from: the store or the age screen.

Who else sees it

Our hosting providers: Hetzner, Cloudflare. On the contact page and when you suggest an idea, Cloudflare Turnstile checks that a person sends the form. If you sign in with Google, Apple or Discord, they know that you signed in to Tavernly. If you tap “Remind me” on a reserved table, we keep the push address that your browser gives us. We delete it when we send that one reminder, or when the table is cancelled or ends. If you turn on notifications for games at your pace, we keep the push address of each device until the push service says that it is gone, or until you delete your account. Your browser’s push service (Google, Mozilla, Apple or Microsoft) carries each push, but it is encrypted, so that service cannot read it.

Your rights

You can ask to see, correct or delete your data, or object to how we use it. Write to us using the contact form. We answer within one month. You can also complain to your data protection authority.

You can delete your account yourself, also as a guest: Delete account, under “You play as” on your player page or in the app. It removes your player, name, picture, logins, ideas, votes and reminders, and it cancels your reserved tables. Games you played stay, with “Deleted player” in place of your name, so the other players keep their replays.

Players in Brazil (LGPD)

This section is for people in Brazil. Under the Brazilian General Data Protection Law (LGPD, Law 13,709/2018), Devdock LLC is the controller of your data. To reach us about your data, use the contact form.

The reasons that we give above are the legal bases of the LGPD, Art. 7: “contract” is the performance of a contract with you, “legitimate interest” is our legitimate interest, and “legal obligation” is compliance with a legal obligation.

Under the LGPD (Art. 18) you can ask us to: confirm that we keep your data; give you access to it; correct it; delete it, or anonymize or block data that we do not need; give you your data in a form that you can take to another service; and tell you who we share it with. You can also object to how we use your data. We answer within 15 days. You can also complain to the Brazilian data protection authority, the ANPD.

Players under 18 get minor mode, with chat turned off, as described above. We process the data of teenagers in their best interest (LGPD Art. 14).

Your data can leave Brazil. Devdock LLC is in the United States, and our hosting providers (Hetzner and Cloudflare) run servers in other countries. We use them only to run the game and keep it safe.