1. The short version
You can play every game here without telling us anything about yourself. No account, no email, no sign-up.
We collect as little as we can get away with, we do not sell anything about you, and we do not run advertising. This page explains the rest.
2. Playing without an account
If you never sign in, your scores and preferences are stored by your own browser on your own device. They are not sent to us and we cannot read them.
Clearing your browser data removes them. They do not follow you to another device.
3. What we collect
Depending on how you use the site, some or none of the following:
- Account details — if you create an account: your email address, a display name, and which plan you are on. Sign-in is handled by our authentication provider.
- Content you add — text, word lists, images, and saved setups you create using the tools on the site.
- Leaderboard entries — if you post a score to a public board, the three letters you choose and the score itself. Choose letters that do not identify you if you would rather stay anonymous.
- Technical and security data — to keep active sign-ins manageable and to limit abuse, we record your browser's user-agent string and a one-way hashed form of your IP address. The hash cannot be turned back into your IP address.
- Error reports — when something breaks, our error-monitoring provider receives a technical report about the failure so we can fix it.
4. Content sent to AI providers
Certain tools on the site work by sending the content you enter to a third-party artificial-intelligence provider, which returns a response. When you use one of those tools, whatever you typed into it travels to that provider.
Only enter what you are comfortable sending. If you are entering something about another person, it is on you to have their agreement first.
Some plans let you supply your own provider key instead of using ours. A key you give us is stored encrypted with AES-256-GCM and is used only to make calls on your behalf. You can remove it from your settings at any time.
5. Email we send on your behalf
Some tools can email content you have composed to an address you type in. We pass that address and that content to our email provider so the message can be delivered. We do not add those addresses to a mailing list and we do not market to them.
Only send to people who are expecting it.
6. Files you upload
Where a tool lets you upload an image, that file is stored so the tool can use it. You can delete it, and deleting removes it from our storage.
7. Payments
Payments are processed by our payment provider. Your card details go to them and never to us — we never see or store a full card number.
We keep a record of which plan you are on and when it was purchased or renewed, because we need that to give you what you paid for.
8. Cookies and local storage
We do not use advertising or cross-site tracking cookies.
The site stores a small amount of data in your browser to work properly: your sign-in session if you are signed in, and your preferences such as theme, sound, and layout. Blocking it will break parts of the site.
10. How long we keep things
Account details and saved content are kept while your account exists. Close the account and they are deleted.
Technical and security data is kept only as long as it is useful for managing sign-ins and limiting abuse, and is then discarded. Error reports age out on our provider's schedule.
Some records have to be kept longer where the law requires it, such as billing records for tax purposes.
11. Your choices
You can see and change your account details from your Account page, remove content you have added, and close your account whenever you want.
Depending on where you live you may also have the right to a copy of your data, to have it corrected, or to have it deleted. Write to support@canfieldmagic.com and we will do it. We do not charge for this and we will not make it difficult.
12. Children
The games are family-friendly and children are welcome to play them. Playing needs no account, so a child can use the whole site without giving us anything at all, and that is how we would prefer it.
Accounts and paid plans are for adults. We do not knowingly collect details from a child under 13. If you believe a child has given us something, write to support@canfieldmagic.com and we will remove it.
13. Security
Traffic to the site is encrypted in transit. Credentials you entrust to us are encrypted before they are stored, and access to the database is restricted by row-level policies so one account cannot read another's data.
No system is perfect. If you find a weakness, please tell us at support@canfieldmagic.com rather than making it public, and we will fix it.
14. Changes to this policy
We will update this page as the site changes, and the "Last updated" date at the top says when we last did. If a change is significant, we will make it obvious rather than quietly editing the page.
15. Contact
Questions, requests, or complaints about privacy go to support@canfieldmagic.com. A real person reads it.