Privacy Policy

This policy covers Speed by Tom C on speedcards.xyz and in the iPhone app. Playing does not require an account, email address, or password, and there are no tracking cookies. Multiplayer game state is held in the game server's memory rather than a persistent game database and is deleted after the applicable game or reconnection period.

Website analytics

Some pages on speedcards.xyz use Plausible Analytics to understand aggregate traffic, such as page views, referral sources, approximate location, browser, operating system, and device type. Plausible does not use cookies or create persistent identifiers. As part of each analytics request, Plausible receives an IP address and user agent, uses them transiently to create a daily identifier and derive aggregate fields, and then discards the raw values. See Plausible's data policy for details.

The iPhone app does not include Plausible or another third-party analytics service. Links opened from the app load website pages in your browser. The Full Rules page uses Plausible; the Support, Privacy, and Terms pages do not.

Data stored on your device

Speed by Tom C stores your selected preset name and game preferences in local storage in your browser or the app. These values stay on your device until you change them, clear the site's stored data, or delete the app. Your preset name is sent to the server only when you start or join a multiplayer game so your opponent can see who they are playing. The game server holds it in memory for the game and the short retention periods described below; it is not written to application logs or disk.

During multiplayer, a game identifier and reconnection token are kept in session storage for the current browser or app session. They allow you to rejoin after a brief interruption. The iPhone app also keeps the last delivered invitation URL in session storage so a WebView reload does not handle the same invitation twice. These values stay on your device. A private invitation URL includes the game identifier, so the URL may also remain in browser history or in the service used to share it.

Game connections

Multiplayer uses a real-time connection to the game server. The server processes game actions, including card plays, stalemates, and pauses, and sends game-state updates to both players. On the server, the cards, preset names, game identifiers, and reconnection tokens are kept in process memory rather than in a persistent game database. A finished game is kept for at most fifteen minutes for reconnection or a rematch, then deleted. An open waiting room remains while its host is connected and may be retained for up to five minutes after a disconnect so the host can return. Capacity protections may remove it sooner, and a server restart clears all games.

The game server and its hosting infrastructure process your connection's network address for routing, connection admission, rate limiting, capacity protection, security, and troubleshooting. Network addresses are not shown to other players. Address-based admission state is kept in memory only as long as needed for those controls or until the server restarts. Restricted system logs may record a network address and connection-error details for up to 30 days. Application logs record anonymous operational events but not complete game identifiers, preset names, client network addresses, or reconnection tokens. These records are not used for advertising or tracking.

The server also keeps anonymous aggregate counts to monitor service health, capacity, compatibility, and errors. These include active connections and games, connection protocol categories, rounds started and completed, reconnects, forfeits, rematches, and denied game-creation attempts. Fifteen-minute rolling counts cover in-game disconnects, forfeits, and denied game-creation attempts.

The rolling counts expire after fifteen minutes; the other aggregate counts reset when the server process restarts. The counts do not contain preset names, network addresses, game identifiers, reconnection tokens, card state, or individual action histories. They are not used for advertising, tracking, or player profiles.

Third parties

Speed by Tom C has no ads and does not use advertising or cross-site behavioral trackers. Plausible processes the limited website analytics information described above. Hetzner Cloud provides the server infrastructure and processes connection and diagnostic information as needed to operate multiplayer. The Cinzel font is self-hosted and loads from speedcards.xyz rather than a third-party font service.

These providers may use subprocessors as described in their policies and agreements. They publish privacy, security, and data-protection commitments for the limited information they process. Those commitments provide protections consistent with this policy and applicable law. Thomas Coffman uses these providers only for the services described here and does not authorize them to use the information for advertising or unrelated profiling. Speed by Tom C does not sell information.

Support email

If you email support, Thomas Coffman receives the email address, message, and attachments you choose to send. He uses them to respond, troubleshoot, protect the service, or meet legal obligations. Porkbun forwards the message to a HEY mailbox provided by 37signals, so those providers process the message as needed to deliver and store it.

Support messages are kept while a request is open. After it is resolved, Thomas deletes the conversation within 90 days unless it is still reasonably needed for security or a legal obligation. Thomas does not use support messages for advertising or unrelated marketing.

Your choices and deletion requests

You can remove data stored on your device by clearing speedcards.xyz site data in your browser or deleting the iPhone app. Opening the game on speedcards.xyz or in the iPhone app creates the temporary server connection described above. While a bot game is active, play runs on your device and that connection is closed; returning to the menu reconnects. You can avoid multiplayer game-state processing by not starting or joining a multiplayer game.

Speed by Tom C is operated by Thomas Coffman. For privacy questions or to request deletion of a support message or other retained information that can reasonably be identified as yours, email support@speedcards.xyz. Thomas may need enough detail to locate and verify the relevant information. Aggregated Plausible statistics generally cannot be tied back to an individual visitor.

Last updated: August 27, 2026.