Privacy

A name, if you give one. You are asked for one when you first open the app and you can skip it. It is shown above your seat to people you invite to a table — anyone you gave the four-letter code to — and to nobody else. Use whatever you like; nobody verifies who you are.

A name we give you. In ranked games and on the leaderboard, where you are put in front of strangers, you are not shown by the name you typed at all. The server gives you one of its own, like “Quiet Fox 47”, and that is what a stranger sees. It is attached to your account rather than to you, and there is nothing in it that came from you.

An anonymous account. The first time the app needs the server it creates one for you in the background. It has no email address, no password and no personal details — it is an identifier and nothing else. It exists so that a rating cannot be forged by whoever is asking.

Your games. While a table is live, the cards are on the server, because that is the only way two phones can agree about them. When a ranked game ends, the result and the rating change are kept so the leaderboard means something.

No email address, no phone number, no contacts, no location, no photographs, no advertising identifier. Nothing is read from the rest of your phone, and no identifier belonging to the device — the one Apple and Google issue for advertising included — is ever touched.

The counting described in 05 does not record what you play. Not the cards in your hand, not the name you chose, not the code of the table you are at. Nothing watches the screen, and nothing records what you tap inside the game. The one thing that is counted is on the website only: if you follow a link that leaves Karma for another site, that a link was followed and where it went. Links within Karma are not counted.

Nothing is sold, and nothing is shared with anybody for advertising. There is nothing to sell: a made-up name and a number.

The site is served by Vercel, the data is held by Supabase, and the counting in 05 goes to PostHog — into two separate places there, as 05 describes, which are not joined up. All three keep ordinary server logs of requests made to them, and all three are processors: they hold this on our behalf and are not free to use it for their own purposes. Beyond that the only place anything is kept is your own phone, where the app remembers your name, your theme and a tally of games played so it can show you your record.

This is a family card game and children will play it. That is exactly why it asks for nothing: no sign-up, no email, no personal details, no adverts and no tracking. The counting in 05 is the same for everybody and is not personal to anyone — nothing about it identifies a player, so there is nothing there that belongs to a child any more than to anyone else. A name is optional and can be anything at all, and it is worth saying to a child that a first name or a nickname is plenty.

A child’s name is never put in front of a stranger. It is shown only at a table somebody was invited to; in ranked play and on the leaderboard every player appears under a name the game hands out instead.

The app counts that a round was dealt and that a round was finished. Each carries which mode it was — on your own, round one phone, with friends or rated — how many were playing, the difficulty if you were against the house, and how long it took.

It also counts which screen you are on — the route, like /rules or /play, and never the code of a table. An invite link is recorded as /room/:code, with the code taken out before anything is sent or written down. That is the whole list.

It is there to answer questions the game cannot otherwise answer: whether people get to the end of a round or give up halfway, whether the hard bots are too hard, whether anybody uses pass-and-play. Solo and pass-and-play never touch the network otherwise, so without this they are simply invisible.

On the website, and only there, visits are counted a second time, separately, so the family of small sites this one belongs to can see how many people come. That count is two things and no more: that a page was opened, and — if you follow a link that leaves for another site — that a link was followed and where to. It is kept in its own place, under its own random identifier, deliberately not joined to the one above, and it is the same anonymous counting under the same switch below. The apps do not do it at all.

The counts are attached to a random identifier made up on this device the first time the app runs — and, on the website, a second one for the visit count, which is a different number on purpose. Neither is your phone’s identifier, neither is the advertising one, and neither is connected to your name or your account. Delete the app and it is gone for good; there is no way to link the new one to the old.

No location, on either count. The game’s own counting is set never to keep the internet address an event arrives from, so there is nothing left to work a place out from. The website visit count is kept in a place shared with those other small sites, and those sites do record a rough country — so every one of Karma’s visits is sent with the address blanked and an instruction not to look it up. No country, no city, nothing about where you are, on either one. That is what 02 means when it says no location.

For six days in September that was not true of the game’s own counting. It is set out in 08.

No cookies, either way. Both counts are kept in this browser’s own storage, on this device, and nothing about them is shared with any other site.

This is not tracking in the sense the App Store means it. It goes nowhere near a data broker, it is never matched against what you do in any other app or on any website, and it is not used to advertise anything to you or to anyone else.

It also honours Do Not Track and Global Privacy Control. If your browser or your phone sends either signal, nothing is counted and you do not have to touch the switch below.

Your name, right now. The button below removes it from this phone and from every table it is still showing at, without asking anybody. You can carry on playing afterwards.

Deleting the app removes everything kept on your phone. To have your anonymous account and its results deleted from the server, write to karma@whatwedocollective.com from anywhere and say so — there is no form and no account to log into. Tell us the name the game gave you — the one shown on the leaderboard — since that is what points at your account.

You can also just stop. An anonymous account with no games attached is a row with nothing in it.

For the counting in 05, the switch there is the control: turning it off stops it and discards the identifier it was attached to. We cannot go and find your past counts and delete them on request, and it would be dishonest to pretend otherwise — there is nothing recorded against them that says which ones were yours. That is the point of them being anonymous, and it cuts both ways.

If the app starts collecting something it does not collect today, this page changes at the same time, and the date below changes with it.

Between 10 and 16 September 2026 the game’s counting did record where people were, and 05 said it did not. That is this page having been wrong for six days, written down rather than quietly fixed.

A step in the analytics project looked up the internet address each count arrived from and attached a place to it before the address was thrown away. It was switched on on 10 September and switched off on 16 September. 525 counts carry a city, a region, a country and an approximate latitude and longitude, spread across 30 of the random identifiers described in 05. Nothing recorded since 16 September carries any of it.

Those 525 are still there. A count cannot be edited after the fact, and for the reason given in 06 there is no way to find which ones were yours — so removing them would mean removing six days of everybody’s. The two honest options were to delete all of it or to say this plainly. This is the second one, and if you would rather it were the first, 06 is the address to write to.

What those counts were never attached to has not changed: no name, no account, and nothing about what was played. A place, a moment, and a random identifier that dies with the app.