Controller: Edu Bernat, owner of Seven Half Club, tax number [NIF], address Carrer Pare Sanahuja 35, 25600 Balaguer (Lleida), Spain, email [email protected]. Law: the GDPR (EU 2016/679) and the Spanish LOPDGDD (Organic Law 3/2018).
Seven Half Club is an online card game for adults aged 18 and over. It is entertainment, not a gambling service. We do not send marketing messages. There is no third-party analytics or advertising.
No real money
Virtual chips have no monetary value. They cannot be bought, cashed out, transferred for money, or exchanged for prizes, goods or services, inside or outside the game. No result creates a right to a real prize.
Data we collect
- Account: the identifier and the record that lets the server recognise you.
- Email: the address on the account, including the address received when you sign in with Google.
- Alias: the name shown at the table (24 characters at most) and, if you set one, the profile picture.
- Google sign-in: we request only the OAuth scopes
openid,emailandprofile. From Google we receive the account identifier, the email address and the basic profile (name). We do not request contacts, files, calendar or any other Google data. That data is used only to create the account and to sign you in. We do not sell it and we do not use it for advertising. - Face ID and passkeys (WebAuthn): you can sign in with a passkey, including Face ID where the device offers it. The server stores only the public key and the credential id. Biometrics never leave the device. They are not sent to us, to the host or to the CDN.
- Play: virtual chip balance, the date of the last free claim, an invitation code when you open a private table, and table chat while that table is open. Chat is relayed to the players at the table and is not stored.
- Age: the 18+ declaration (acceptance, date and version of the text) stays on the device.
- Local storage keys on the device include
setimig_player_id,setimig_player_name,setimig_player_token,setimig_profile_plus the identifier,setimig_age_gate,setimig.locale,setimig_ai_difficulty,setimig_ai_bot_count,setimig_local_solo_snapshot,setimig-local-balance-plus the identifier,setimig_private_rejoin_code,setimig_private_seats,setimig_recent_tables_v1,setimig_light_reputation_v1,setimig_sound_effects,setimig_sound_ambient,setimig_sound_volume,setimig_sound_muted,setimig_vibrate,setimig_house_rules_enabled,setimig_reduce_motion,setimig_onboarding_v1andsetimig_install_banner_dismissed. Session keys includesetimig_share_ref,setimig_solo_rejoinandsetimig_solo_local. The game itself does not set HTTP cookies. A fuller table is in the cookie policy. - New account: when a new user registers, the server sends an internal notification email to the administrator. It is an operational message to the operator, not a commercial email to you.
- Connection: IP address and technical logs, if the host or the CDN records them, for security and operation.
Legal bases
- Account, email, alias, Google profile, the WebAuthn public key, chip balance and play: performance of the service you asked for (Article 6(1)(b) GDPR).
- The 18+ check: performance of the service and the rule that the game is only for adults (Articles 6(1)(b) and 6(1)(c)).
- The internal registration email to the administrator, and security logs: legitimate interest in running and protecting the service (Article 6(1)(f)). You can object as described below.
- Preferences kept in local storage: performance of the service (Article 6(1)(b)).
Where the data is stored
The game runs on a Hetzner VPS in the European Union. Hetzner Online GmbH hosts it as a processor.
Cloudflare acts as CDN and reverse proxy, and is a processor. It may handle connection data and may transfer data outside the European Economic Area under the EU-US Data Privacy Framework and standard contractual clauses. If Cloudflare sets a technical cookie such as __cf_bm, the game does not read it.
We do not sell personal data. Public authorities receive data only when the law requires it.
How long we keep it
The account is kept while it exists. Local storage lasts until you clear the site data in the browser. Session storage ends when you close the tab. The administrator's registration email is kept as ordinary operational mail. Connection logs, if any, follow the host's or the CDN's retention.
Your rights
You can request access, rectification, erasure, restriction and portability, object to processing based on legitimate interest, and withdraw consent where consent is the basis. Email [email protected] and identify the account. You can also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at aepd.es.
How to delete your account
There is no in-app control to delete the account. Email [email protected] from the address on the account and ask us to delete it. We erase the account, the email, the alias, the Google identifier, the WebAuthn public key and the virtual chip record held on the server. Data that exists only in the browser is removed when you clear the site data. We cannot delete that copy from the server.
Contact
Edu Bernat, owner of Seven Half Club, [NIF], Carrer Pare Sanahuja 35, 25600 Balaguer (Lleida), Spain, [email protected].