Skip to content
Spades After Dark home

Privacy Policy

Effective date: October 30, 2026 ยท Updated: November 10, 2026

Who we are

Spades After Dark is a mobile Spades game made by Shauni B Media & Productions LLC (“we”, “us”). This policy explains what information we collect through the Spades After Dark app and this website, how we use it, and the choices you have.

Questions? Email support@spadesafterdark.net.

Information we collect in the app

Your account

  • Email address, if you sign up with email. We use it for sign-in, account emails and sign-in codes.
  • Password, if you sign up with email. The app never sees or stores it; Supabase keeps it in protected form.
  • Apple or Google sign-in details, if you choose one: your sign-in email (the Apple private relay address if you hide your email), which provider you used, your Apple or Google user ID, and your first name only. No last name.
  • Display name, shown to other players. Display names are unique and filtered.
  • Avatar choice, shown at tables.

Your age

Spades After Dark is for adults 18 and older. When you create an account, we ask for your birthday to confirm your age. We keep only your birthday month and day, for your yearly birthday gift, and never the year. We also keep the time you confirmed you are an adult.

At sign-up we also check your app store’s age signal (Apple Declared Age Range or Google Play Age Signals) to block under-18 accounts. This signal is not stored.

Playing the game

  • Game stats from online play: games, wins, win %, bids made, Nils, bags, Bostons, best streak, level and trophies. Only our server writes them.
  • Dark Coin history: one record for every coin change, with the amount, the reason, and the table or purchase. Dark Coins have no cash value. After you delete your account, these records stay under an account number with no personal details, and are kept as required for tax and legal purposes.
  • Game records: our game server keeps deal records so you can use “Verify deal” (fair-shuffle proof).
  • Table chat: messages at a table are not saved to a database. The game server holds the last few minutes in memory only. When a player reports someone, the last 5 minutes of that table’s chat are saved with the report.
  • Reports and blocks: reports go to a moderator queue. Your block list hides a player from you.
  • Purchases: the product, the date and the store receipt status. Card details never reach us.
  • Push token: used to send notifications only if you say yes. The app asks after your first finished game.
  • Leaderboard score: the weekly board in Game Center on iPhone.
  • Ad data: see Advertising below.

Google’s ads SDK collects the ad data listed under Advertising. The app does not collect your precise location, your contacts or payment card numbers.

To group nearby players, we keep a one-way hash of your network address in our game server’s memory only, for at most 2 hours.

Playing as a guest

You can play Practice and Learn to Play as a guest. No account is created and nothing is sent to our servers. Saved on your phone only: sound and music settings, look, table options, hints, lessons completed, Practice stats, computer levels beaten, and ad history.

Information we collect on this website

  • Emails you send us: your email address and whatever you include in your message.
  • Server logs: our web host records standard technical information (such as IP address, browser type and pages requested) to run and protect the site. Our website host may keep standard access logs for a short time for security.

This website does not use advertising or analytics cookies, and it loads its fonts from our own server rather than from third parties. The Join page also loads images from Supabase and asks our game server and our Supabase server for data; see “The Join page” below.

Website forms

When you apply through a form on our website, we collect what you enter. The Featured Artist application collects your artist name, email, a link to the clean (radio edit) version of your song, your streaming links and the package you choose. The Featured Creator application collects your name, creator or brand name, email, optional phone number, content links, package, preferred start date and description. We use it only to review your application and reply to you. It is sent by email to support@spadesafterdark.net. We use Resend to send you a confirmation email; Resend receives your email address and the content of that email so it can deliver it. We don’t keep your application on the website itself. Our email provider, Resend, delivers these messages for us; if Resend isn’t set up or can’t be reached, our web host’s mail server sends your application to support instead. To limit spam, our website keeps a one-way hash of your network address for up to one hour and, after we send you a confirmation email, a one-way hash of your email address for up to 24 hours. After that they expire and are removed in the site’s routine cleanup. If you upload a song file with the Featured Artist application, we keep it in a private folder on our website’s server that only our site administrators can download from, and we delete it automatically 90 days after you upload it.

The Join page

When a friend invites you to a table, the Join page reads the invite code in the link and asks our game server for the host’s display name so it can show who invited you. If you fill in the Join page’s “Join the beta” form, we send your name, your email address, your phone type and, for Android, your Google Play Gmail address to our server (Supabase, function “beta-join”). We use them to send your beta email through Resend and, for Android, to add your Gmail to our Google Play testing list, which shares it with Google Play. To limit spam, we keep a one-way hash of your network address (never the address itself) to count sign-ups from one network. We do not sell this information or use it for advertising.

Beta testing

Beta emails (Resend)

If you join our beta, we email you your invitation and test instructions from hello@spadesafterdark.net. We use Resend, an email delivery service, to send these emails. Resend receives your email address and the content of the email so it can deliver it. We send beta emails only to people who signed up for the beta. To stop them, email support@spadesafterdark.net.

Beta sign-up form and feedback form (Google Forms)

Our beta sign-up form and our feedback form are Google Forms. The sign-up form collects your name, your email address, your phone type (iPhone or Android), for Android the Gmail address you use for Google Play, your city and state, how often you play spades, and your confirmation that you are 18 or older. We use this to invite you to the beta and, for Android, to add your Gmail to our Google Play testing list. The feedback form collects your name and email and the answers you choose to give about the app. We use them only to fix and improve Spades After Dark. Google stores the form answers for us under Google’s own privacy policy. Android testers’ Gmail addresses are also shared with Google Play so you can install the test version.

How we use information

  • To create and run your account and let you play.
  • To confirm you are 18 or older, and to send your birthday gift.
  • To send push notifications, only if you say yes.
  • To understand how the Android app is used so we can improve it (usage analytics).
  • To answer support requests and account deletion requests.
  • To keep games fair and the community safe.

Outside services we use

  • Supabase (Supabase Inc.): accounts, sign-in, database and Dark Coin records.
  • Colyseus Cloud (Dallas, USA): hosts our game server, which runs online tables, shuffles and deals.
  • Resend: sends sign-in code emails from spades@shaunibmedia.com and beta emails from hello@spadesafterdark.net.
  • Apple: Sign in with Apple and Game Center (sign-in on iPhone, weekly leaderboard).
  • Google Sign-In (Google): sign-in.
  • Apple App Store and Google Play billing (Apple, Google): take all payments.
  • RevenueCat: confirms purchases and subscriptions.
  • Google Analytics for Firebase (Google): usage analytics, Android only.
  • Google AdMob (Google LLC): rewarded ads. See Advertising.
  • YouTube (Google): the app links out to our show channel only; nothing is shared.
  • Our website host, which runs this website.

Usage analytics (Google Analytics for Firebase). On Android, the app uses Google Analytics for Firebase to understand how the app is used so we can improve it. It records app events such as opening the app, starting and finishing the tutorial, signing up or signing in (the method only, for example Google or email), finishing a game (mode, game type, and whether you won), and joining a friend’s table. It also collects a device identifier (the app instance ID and, where allowed, the advertising ID) and general device information. We do not send your name, email address or phone number to analytics, and we do not link analytics to your account. In the European Economic Area and the UK, advertising-related analytics stay off unless you agree in the consent message shown when the app starts. Google’s privacy policy. The iPhone app does not use analytics yet; we will update this page before it does.

Push notifications (Firebase Cloud Messaging). We use Firebase Cloud Messaging to send notifications you allow, such as table invites and daily gift reminders.

We may also share information if the law requires it, or to protect players, the game and our rights.

Advertising

Spades After Dark shows rewarded video ads only. You choose to watch an ad to earn Dark Coins. Ads never play during a hand. After Dark VIP members collect these rewards without watching ads.

Ads are provided by Google AdMob (Google LLC). When an ad is requested, Google’s Mobile Ads SDK collects:

  • Your device’s IP address, which can be used to estimate your general location
  • Ad interactions, such as app launches, taps and video views
  • Diagnostic information, such as crash and performance data, app and ad performance, launch time and energy use. This diagnostic data is not linked to your identity and is not used for tracking.
  • Device identifiers: on Android, the advertising ID and app set ID; on iPhone, the advertising identifier (IDFA) only if you allow tracking

Google uses this data for advertising, analytics and fraud prevention, and encrypts it in transit. Google’s use of this data is covered by Google’s Privacy Policy and “How Google uses information from sites or apps that use our services”. We confirm each finished ad with Google before adding Dark Coins to your account.

Your choices

  • In the European Economic Area, the UK and Switzerland, Google’s consent form asks for your choice when the app starts, before any ad is shown.
  • U.S. states with privacy laws: you can opt out of the sale or sharing of your data for ads.
  • You can change either choice at any time in the app: Settings > Legal > Privacy choices. This row appears where the law requires it.
  • On iPhone, the first time you choose to watch an ad, the app asks your permission before it can use your device’s advertising identifier to show personalized ads (Apple’s App Tracking Transparency prompt). If you choose “Ask App Not to Track”, you still see ads, but they are not personalized using that identifier.
  • Android: you can reset or delete your advertising ID in your device’s settings (usually Settings > Privacy > Ads; the path varies by device).
  • You never have to watch an ad. Ads are optional.

How long we keep your data

  • Account data (email, sign-in details, birthday month and day, display name, avatar, stats, items, push token and block lists) is kept while your account is open, and deleted right away when you delete your account. See Delete my account.
  • Table chat is not saved to a database. The game server holds only the last few minutes in memory. If someone is reported, the last 5 minutes of that table’s chat are saved with the report.
  • Reports are kept until the reporter’s or the reported player’s account is deleted.
  • Dark Coin records stay after deletion under an account number with no name, email or other personal details attached.
  • Purchase records: Apple, Google and RevenueCat keep their own purchase records under their own policies.
  • Google AdMob data is covered by Google’s policies. See Advertising.

Your choices and rights

  • Delete your account in the app or by email. See Delete my account for the steps and for what is deleted and what is kept. If you ask by email, we confirm we got your request within 7 days and complete the deletion within 30 days.
  • Delete only some of your data, such as your birthday, stats or chat reports, without deleting your account. Email support@spadesafterdark.net from the email on your account and say what you want deleted. We complete it within 30 days.
  • Ask for a copy, correction or deletion of your information by emailing support@spadesafterdark.net.

Adults only

Spades After Dark is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

Security

We use reasonable measures to protect your information. Data between the app and our services (accounts and coins, game play, and purchases) is sent over encrypted connections (HTTPS/TLS). No system is perfectly secure.

Changes to this policy

If we change this policy, we will post the new version here and update the date at the top.