Your cards, your data

Last updated July 27, 2026

Pitch Online is a card game, not a data business. This page explains the little we collect, why, and how to erase it. It applies to the web app at pitch.ac and the Pitch Online desktop and mobile apps.

What we collect

Guest play: a display name you choose. Nothing else — no email, no password.
Registered accounts: your email address, a display name, and a password stored only as a salted scrypt hash. We never see or store your plain-text password.
Gameplay records: results of finished games (room code, player names at the table, final scores, and whether your team won), used to show your match history, stats, streaks, and badges.
Profile choices: the avatar you pick from our built-in set.

How we use it

To run the game: seating you at tables, syncing live play over our servers, and showing results.
To power your profile: match history, win/loss stats, streaks, and badges.
To keep you signed in: a signed session token stored on your device.
To improve the game: privacy-respecting product analytics (PostHog, Google Analytics) tell us which features get used; Sentry collects crash reports so we can fix bugs.
To keep the lights on: some web pages show ads served by Google AdSense. In Europe, the UK, and Switzerland a consent dialog controls whether ads may be personalized. Pitch Club members see no ads.
Purchases: web payments are processed by Stripe — we never see or store your card number, only what was bought and for which account.
We do not sell your data or send marketing email.

What's visible to others

Other players at your table see your display name and avatar during a game, and your name appears in their match history for games you played together.
Our servers and database are hosted on Render (render.com). Data is stored there solely to operate the game.
Service providers that help us run Pitch — Render (hosting), Stripe (payments), Google (analytics and ads), PostHog (analytics), and Sentry (crash reports) — process data only on our behalf.
Beyond those providers we share data with no one, except if required by law.

Deleting your data

You can delete your account at any time from your Profile page (Profile → Delete account). This permanently erases your account, profile, stats, and match history from our database and cannot be undone.
Guest sessions hold no server-side profile; clearing your browser or app storage removes them from your device.
You can also email us at the address below to request deletion or a copy of your data.

The fine print

Pitch Online is not directed at children under 13, and we do not knowingly collect personal information from them.
If we change this policy, we will update this page and the date above.
Questions or requests: laflechee@gmail.com

Back to the lobby