Privacy Policy
Effective October 10, 2026
This policy explains what information Tarabish collects when you play on our website or apps, how we use it, and the choices you have.
The short version
- We collect only what the game needs: your display name, your games, and, if you create an account, your email address and password.
- We don’t sell your information, show ads, or use analytics or tracking tools.
- Other players can see your display name, profile and table chat. Your email address is never shown to anyone.
- You can delete your account and its data at any time from the Delete account page.
1. Who we are
Tarabish is an online version of the Cape Breton card game Tarabish. In this policy, “Tarabish”, “we” and “us” mean the operator of the Tarabish website and apps. You can reach us at support@playtarabish.ca.
2. Information we collect
Information you give us
- Display name. The name other players see. Guests receive a name such as “Guest 1a2b” until they choose one.
- Email address and password, if you create an account. Your email address is used to sign in. We store only a salted, one-way hash of your password, never the password itself.
- Profile details you choose to add, such as a short bio, and the cosmetic title, table felt and card style you equip.
- Table chat and emotes you send to other players at your table.
- Feedback reports you send from the Help menu: the type of report and your message.
Information created as you play
- An account or guest ID that links your games, progress and settings.
- Game records: the tables you join, your seat, your moves, scores and match results.
- Progress: experience points (XP) for completed games, wins, your level and coin balance, and the cosmetics you unlock with coins.
- Friends: your friend code, friend requests, and accepted friends. While you have the game open, we record when you were last active so friends can see whether you’re online.
Information collected automatically
- A session cookie that keeps you signed in. It is required for the game to work and is not used for advertising or tracking.
- Server logs. Our web server records each request’s IP address, date and time, the page or action requested, and your browser’s user-agent string. We use these logs to keep the service running and secure.
- Security counters. To slow down password guessing and spam, we keep short-lived counters keyed to your account ID or to one-way hashes of IP addresses and email addresses.
- Feedback context. A feedback report also includes the table code, the public state of the game (scores, trump, the cards on the table), your screen size and your browser’s user-agent. It never includes your hidden cards, table chat or password.
Information stored on your device
The game saves a few settings in your browser’s storage: whether you’ve finished the first-game guide, your sound and vibration preferences, and the code of the table you’re seated at. These stay on your device. You can clear them through your browser settings.
What we don’t collect
We don’t collect payment information (coins are earned by playing and can’t be bought), your location, your contacts, or advertising identifiers. We don’t use analytics services, advertising networks or social media trackers, and our fonts are served from our own server.
3. How we use information
- To run the game: seating you at tables, dealing, scoring, chat, rematches and reconnecting you after a dropped connection.
- To provide accounts: signing in, keeping your progress, coins and cosmetics, and changing your password.
- To show profiles, leaderboards, friends and online status.
- To protect the service: preventing abuse, password guessing and spam, and investigating problems.
- To fix bugs and improve the game using the feedback reports you send.
- To keep backups so the game can be restored after a failure.
We don’t sell your information, use it for advertising, or make automated decisions about you that have legal or similar effects.
4. What other players can see
- Anyone can view a player profile, which shows your display name, bio, title, equipped table and card style, level, games played, wins and win rate.
- Leaderboards list registered accounts with their display name, title, level, XP, games played and wins. Guest profiles are not listed.
- Players at your table see your display name, level and title, the cards you play, run and Bella announcements, and your chat messages.
- Your friends can see whether you’re online.
- Nobody can see your email address, password, coin balance or purchases.
5. When we share information
We share information only in these cases:
- Hosting. Our server is provided by Vultr, a cloud hosting company. It stores and processes the information described here on our behalf.
- Legal reasons. If required by law, or to protect the safety, rights or property of our players, the public or Tarabish.
- With your direction, for example the parts of your profile you choose to make visible to other players.
6. Where information is stored
Our server is located in Newark, New Jersey, United States. If you play from outside the United States, including from Canada, your information is transferred to and stored in the United States, where it may be accessible to authorities under United States law.
7. How long we keep information
| Information | How long |
|---|---|
| Account, profile, progress, friends and feedback reports | Until you delete your account |
| Guest profiles | Until deleted. You can delete a guest profile from the browser you play on. |
| Sign-in sessions | Up to 30 days, or until you sign out |
| Tables and their chat | Closed after 7 days without play; deleted after 30 days without play |
| Server logs | 14 days |
| Backups | Daily backups, each kept for 14 days |
| Security counters | Up to 15 minutes, then removed during routine cleanup |
8. Deleting your information
You can delete your account, or your guest profile, at any time on the Delete account page. You can also open it from the Profile tab in the game. Deletion permanently removes your profile, email address, password, progress, coins, cosmetics, friends, feedback reports and sessions. Your table chat is removed, and a computer player takes over any seat you held, so other players’ games can continue.
Deleted information may remain in backups for up to 14 days and in server logs for up to 14 days, after which it is overwritten. Messages other players wrote at your tables stay until those tables are deleted.
If you can’t sign in, email support@playtarabish.ca from the address on your account and we’ll delete it. We respond to requests within 30 days.
9. Your rights and choices
- Access and correction. You can see and change your display name, bio, title and styles in the game at any time. To request a copy of the information we hold about you, contact us.
- Deletion. Use the Delete account page or contact us.
- Withdrawing consent. You can stop using the game and delete your account at any time.
- Complaints. Depending on where you live, you may have the right to complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada. We’d appreciate the chance to help first.
10. Children
Tarabish is not directed to children under 13, and you must be at least 13 to create an account. If you believe a child under 13 has given us personal information, contact us and we’ll delete it.
11. Security
We use encrypted HTTPS connections, store passwords only as salted hashes, keep session cookies inaccessible to page scripts, limit repeated sign-in attempts, and restrict access to our server. No service can guarantee perfect security. Use a password you don’t use anywhere else, and contact us if you suspect a problem.
12. Changes to this policy
We may update this policy as the game changes. We’ll change the effective date above, and for significant changes we’ll give notice in the game before they take effect.
13. Contact
Questions or requests about your privacy: support@playtarabish.ca