Privacy
Three Golds is run by TZ Flow LLC. This page says what the game stores about you, why, and how to get it removed. Questions go to hello@threegolds.app.
The short version
- Playing needs no account. Signing in is optional and uses only your email address, with a code we mail you or through your Google account, or your Apple Account in the iPhone app. No phone number, no location.
- No ads, and nothing is sold or shared for marketing.
- The game keeps a nickname, a random ID for your device, what happened at your tables, and your record. If you sign in, it also keeps your email address.
- A table is deleted 90 days after it was last used, and no later than a year after its last hand. A practice hand is deleted 7 days after it starts.
- If you sign in, a copy of each session you finish stays with your account until you delete the account, so your past sessions outlast the table.
What is stored on your device
Your browser keeps a few items so the game knows you when you come back: the name you typed, a random ID made on your first visit, your settings (sound, haptics, tile sorting, and whether you have seen the tour), and, if you signed in, the key that keeps you signed in, with a copy of your email address and that sign-in's IP address and browser type. The game sets no cookies. Clearing the site's data in your browser removes all of it, and your next visit starts as a new player; if you had signed in, signing in again brings your record and tables back.
What is stored on our servers
| What | Why |
|---|---|
| Your display name, device ID and time zone | To seat you, let you return to your table, and count the days you played on your own calendar |
| The tables you joined: moves, scores, settlement | To run the game and show the session's history |
| When your device was last connected | To tell the table you are away and keep the game moving |
| Your record: hands played, wins, your best hand, the days you played, and your firsts | To show Your record on Home |
| If you sign in: your email address, the name you play under, and which of your devices are signed in. Signing in with Google also gives us the name on your Google account and an ID Google uses for you in this game; we keep those and nothing else from Google, not your picture and not access to your Google account. Signing in with Apple, in the iPhone app, gives us your email address (or, if you choose Hide My Email, an address Apple makes that forwards to yours) and an ID Apple uses for you in this game, and a token we keep only so that Delete my account can end the game's access at Apple; we ask Apple for nothing else, not your name | To sign you in and bring your record and tables to every phone you use |
| If you sign in: a copy of each session you finish at a table: when it ended, the table code, every player's name as it was shown at the table, the Final scores and the payments, and a scrambled form of each player's device ID (never the ID itself) | To keep your past sessions after the table is deleted, and to find a player's name in these copies when they delete their data |
| If you sign in: for each sign-in, your IP address and your browser type, and when it started and ends | To keep you signed in and keep sign-ins secure |
| Your IP address with each sign-in request | To limit how often codes can be requested, so nobody floods an inbox |
| The code we mail you, with your email address | To check the code you type |
| A scrambled form of each email address a code is asked for, and how many codes it asked for and tried | To limit the codes one address gets, so nobody floods an inbox or guesses a code |
| Problem reports: the text you wrote, error details, the app version, your browser type, the table code and that hand's moves | To find and fix bugs |
Problem reports are sent when you tap Report a problem, and automatically when the app hits an error.
What other players see
Everyone at your table sees your display name. Anyone with the table's link can watch as a spectator. Pick a name you are comfortable sharing.
A player at your table who is signed in keeps a copy of each session you played together, with your display name as it was shown. When you use Delete my data or Delete my account, your name in those copies becomes Player 1 to 4.
Who handles the data for us
| Company | Role |
|---|---|
| Convex | Database and game server, in the United States |
| Cloudflare | Serves the app from the data center nearest you, which may be outside the United States, and counts page views with Cloudflare Web Analytics, which uses no cookies and does not follow you across sites |
| Resend | Sends the sign-in code to your email address, in the United States |
| Only if you choose Sign in with Google: confirms who you are and tells us your email address and name | |
| Apple | Only if you choose Sign in with Apple in the iPhone app: confirms who you are, tells us your email address or an address that forwards to it, and ends the game's access when you delete your account |
| Google Workspace | Our email, where your messages to us arrive |
Each of these companies works under its own data processing terms, and those terms give your data the same protection this page describes: they limit it to providing and securing its service, require it to protect the data, and do not let it sell the data or use it for advertising. Cloudflare and Convex see your IP address while delivering the app, as any web service does, and Cloudflare also uses network traffic data to protect and improve its own network. Our own database stores your IP address only for signing in, as the tables above and below say.
Why we are allowed to use it
We use your name, device ID, table data, record and, if you sign in, your email address to provide the game you asked for. We use problem reports and page counts because we have a legitimate interest in keeping the game working. We do not use any of it for advertising or profiling.
How long we keep it
| Data | Kept for |
|---|---|
| A table and everything in it | 90 days after a player was last connected to it, and never more than 365 days after its last hand |
| A practice hand | 7 days after it starts |
| Problem reports | 90 days |
| Your record, and your email address and name if you signed in | Until you delete them, with Delete my data or Delete my account |
| If you signed in with Apple: the token that lets us end the game's access at Apple | Until you delete your account; then until Apple confirms the game's access has ended, usually within seconds, and no more than about an hour and a half if Apple cannot be reached |
| If you signed in: the copies of your finished sessions | Until you delete your account. Your name in other players' copies is replaced when you delete your data or your account |
| A sign-in, with its IP address and browser type | Until you sign out, on that phone or with Sign out other phones, or it ends: 90 days after you last used the game on that device. Ended sign-ins are deleted within an hour |
| Your IP address for limiting code requests | One day after your last request |
| A code we mailed you | Until you use it, or within an hour after its 5 minutes are up |
| The scrambled email address for limiting codes | Within an hour after its 15 minutes are up |
| Email you send us | Until your question is settled, then deleted from our mailbox within 90 days. Google may take up to 180 days more to clear it from its systems |
Deleted data leaves our live database at once. Our database provider keeps backups for disaster recovery, and deleted data can remain in those for a limited time.
Your choices
To delete what we hold about your device yourself, open Privacy and terms in the game and tap Delete my data. Your name and device leave every table you played, your reports are deleted, and the game forgets you on that phone. The tables themselves stay, with your seat shown as Player 1 to 4, and your name becomes Player 1 to 4 in the sessions other players keep.
If you signed in, open the menu at the top right of Home and tap Delete my account. That does the same for every device you signed in on, and deletes your record, the sessions kept with your account, your email address and the name the account kept. If you signed in with Apple, it also tells Apple to end the game's access to your Apple Account.
You can also ask us to show you, correct or delete what we hold. Email hello@threegolds.app with the table code and the display name you used. We answer within one month.
If you never signed in, the table code and name are how we find your data. If you cleared your browser's data, tell us roughly when you played. If you signed in, your email address is enough.
If you are in the EU or the UK, you may also complain to your data protection authority.
Children
Three Golds is for a general audience and is not directed to children under 13. A child under 13 should play with a parent or guardian, who picks the display name. We do not knowingly collect personal information from children. If a child has typed a real name or personal details into the game, write to us and we will remove it.
Fonts
The game ships three typefaces under the SIL Open Font License 1.1: Spectral, Ma Shan Zheng and LXGW WenKai TC. Each name opens its license.
Changes
If this page changes in a way that matters, the date below changes and the app's changelog says so.