Privacy policy
Last updated October 4, 2026
This policy explains what CardCount collects, why it is used, and the choices available to you.
On this page
- Who this policy covers
- Account and support information
- Practice, preferences, and public scores
- Payments
- Cookies, browser storage, and usage information
- Site performance
- How we use information
- Who receives information
- Retention, location, and security
- Your choices and privacy requests
- Age requirements
- Changes and contact
Who this policy covers
This policy applies to CardCount at cardcount.app, including its learning, practice, simulation, account, and membership features. References to “we” and “us” mean the operator of CardCount. Contact support@cardcount.app with questions about your information.
Account and support information
When you sign up or sign in, Clerk processes your login credentials and authentication information. CardCount receives an account identifier and available profile details, such as your name, email address, and profile image. If you choose Google sign-in, we use the basic profile information Google shares for authentication; the sign-in connection does not request access to your Gmail messages. We also receive information you choose to send in support requests.
Practice, preferences, and public scores
We store training preferences and practice records, which can include answers, accuracy, response times, streaks, skill mastery, missed hands, and daily-challenge results. Some progress, course completion, table settings, and guest-use limits are stored in your browser. Signed-in practice can also be saved to your account. Not every local setting or course record is synchronized across devices.
If you submit a daily challenge, your display name, score, accuracy, best streak, and completion timestamp may appear on a public leaderboard. Choose a display name you are comfortable sharing publicly.
Payments
Stripe processes payment details when you start a subscription or manage billing. CardCount stores customer and subscription identifiers, subscription status, trial and billing-period dates, and cancellation status. We do not receive or store your full payment-card number or card security code. Stripe may retain transaction and billing information for its own legal and fraud-prevention obligations.
Cookies, browser storage, and usage information
Clerk uses cookies and related technology to keep you signed in and secure your account. CardCount uses browser storage to remember practice progress, preferences, and free-use limits. Clearing site data can erase local progress and sign you out; it does not delete account records held on our servers or cancel a subscription.
We record daily totals for product events, such as starting practice or opening sign-in, to understand how features are used. The event-count table stores the event name, date, and count, rather than a user identifier. Our hosting and authentication providers may process IP addresses, browser and device information, request timestamps, and diagnostic or security logs when delivering and protecting the service.
Site performance
The production site also uses Cloudflare Web Analytics to measure page views and performance, such as page load times. Its browser beacon sends those measurements to Cloudflare to help us understand site traffic and reliability.
How we use information
We use information to authenticate accounts, provide and personalize training, save progress, administer daily limits and leaderboards, manage subscriptions, respond to support requests, investigate errors, and prevent fraud or abuse. We also use aggregate usage information to improve the product. We do not sell personal information or share it for cross-context behavioral advertising.
Who receives information
Clerk provides account authentication; Cloudflare hosts the site, backend, and database; Stripe provides checkout and subscription billing; and Google provides optional sign-in. App pages also load fonts from Google Fonts, which involves a request from your browser to Google. These providers receive information needed for their services and may have separate privacy obligations for processing they carry out for their own purposes. Provider privacy information is linked below.
We may disclose information when required by law, to respond to valid legal requests, or to protect people, accounts, and the service from fraud or abuse. If CardCount is transferred as part of a business transaction, relevant information may be transferred with it, subject to applicable privacy obligations and any required notice.
Retention, location, and security
We retain account and training records for as long as needed to provide your account and the purposes described here. Some records may be retained after a deletion request when needed for tax, accounting, security, dispute resolution, or other legal obligations. Local browser records remain until cleared by you or your browser.
Our providers may process information in the United States and other countries. Applicable data-protection rules may differ from those where you live. We use safeguards intended to protect your information, but no online service can guarantee absolute security.
Your choices and privacy requests
Email support@cardcount.app to request access, correction, a copy, or deletion of your personal information, including removal of a public leaderboard entry. Use your account email where possible; we may need to verify your identity before acting. Depending on where you live, you may also have rights to object to or restrict certain processing, withdraw consent where processing relies on it, or complain to your local data-protection authority. We handle requests as required by applicable law.
You can clear cookies and local storage in your browser, although this may affect sign-in and saved practice. Manage subscription cancellation through Account & membership. Deleting local data or signing out does not stop billing; if you request account deletion while subscribed, tell us so we can address the subscription too.
Age requirements
CardCount is intended for adults aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact support@cardcount.app so we can investigate and take appropriate action.
Changes and contact
We may update this policy when the service or its information practices change. The date above identifies the current version. We will provide additional notice of material changes where required by law. Send privacy questions and requests to support@cardcount.app.