This policy explains what information Desmoche ("we," "us") collects when you play, why, and what control you have over it. Desmoche is operated by Hnry Labs LLC — questions or requests can be sent to contact@hnry.us.
Every player gets an anonymous account the first time the app is opened — no sign-up required. It consists of:
| Data | Details |
|---|---|
| Account ID | A randomly generated identifier. Not your name or email. |
| Display name | Whatever you choose to type in Settings. Defaults to "Guest." |
| Account dates | When the account was created and, if you link a Google account, when it was first linked. If you delete your data, the creation date stays with the now-anonymous account. |
| Device ID | A random identifier generated on your device and stored in the system's secure storage on Android (Keystore) and iOS (Keychain), or in your browser's local storage on the web version, so the app recognizes your device on relaunch. Alongside it the app keeps a random device secret that proves the device is really yours; we store only a one-way hash of it, never the secret itself. |
If you choose to link a Google account — so your account and stats survive a reinstall or a new device — Google's standard sign-in flow gives us a verified token that includes your account's stable identifier, name, and email address. We keep only the identifier. Here's exactly what we do with each:
| From Google | What we do with it |
|---|---|
| Account identifier ("subject" ID) | Stored permanently — this is how we recognize your linked account on future sign-ins. It's an opaque ID, not your name or email. |
| Account name | Not used and not stored. It arrives inside Google's sign-in token and is discarded as soon as the token is verified, same as your email. Signing in with Google never changes your in-game display name. |
| Email address | Arrives inside Google's sign-in token and is discarded as soon as the token is verified. We never store it, and it's never used for anything. |
Desmoche's use of information received from Google APIs adheres to the Google API Services User Data Policy.
If you link a Google account, we also save a small set of your app settings and onboarding progress against your anonymous account ID, so they come back if you reinstall or sign in on a new device. Guest accounts are not synced — a guest's settings stay on that device only. Specifically:
| Data | Details |
|---|---|
| Preferences | Your theme choices, language, auto-rejoin choice, and whether in-game hints and the turn indicator are shown. |
| Onboarding progress | Simple yes/no facts such as "has seen the Cambio introduction," and which version of the in-app notice you acknowledged — so you aren't shown the same tutorials or notice again on a new device. |
This is not tied to your name or email, because we never store them. It is deleted when you delete your data (below).
At a table, other players can see your display name and a small "Linked account" check if you've linked a Google account. Your anonymous account ID is also sent to the other players at the table (the app uses it to open your profile). They can also tap your avatar to open your public profile, which exists only for linked accounts and shows your matchmaking record: member since, hands played and won, win rate, skill rating, points, how your wins break down, and bonuses earned. It does not include your Google name, email, or activity in private rooms and practice games. Guest accounts and bots have no public profile.
Desmoche lets linked accounts send friend requests, keep a friends list, show a room to their friends, and schedule games for friends to join. There is no chat and no messaging, and no online or "last seen" status. The only signs of activity a friend can see are the rooms and games listed below. Here is who sees what:
| Who | What they can see |
|---|---|
| People you send a friend request to | Your display name, the "Linked account" check and when the request was sent. A request that is declined or left unanswered looks the same to you: you only see that it was sent. |
| Your friends | Your display name (the current one, if you change it) and the "Linked account" check. They can open your public profile, as described above. |
| Your friends, for rooms you choose to show to them | Your display name as the room's creator, how many seats are taken, the room's size and its room code, until the room ends (it closes or the game finishes), even if you leave it. They do not see the other seated players' names. |
| Your friends, for games you schedule | If you invite them: your display name, the start time, the house rules, and how many people are going or on the waitlist; once the room is open, also its room code and seat count. If you allow it, friends you didn't invite can also see the game from a time you choose (up to 1 hour before the start, at the start, or 10 minutes after), and get the room code only once the room is open. A game you keep to invitees is never shown to other friends. |
| You, as the person who scheduled a game | The display names and replies (going or not going) of the friends you invited. Invitees see only counts, not each other's names. |
Because friends can see the rooms and games you list, they can tell when you have a room open or a game planned. If you don't want that, don't show rooms to friends, don't schedule games, or remove a friend. A removed friend isn't notified, but you disappear from their friends list and they stop seeing your rooms and games.
The friends feature stores, against your anonymous account ID, your friendships, the friend requests you sent and received, your scheduled games, and your invitations and replies to other people's scheduled games.
Room codes, seats, hand results, and point totals are recorded against your anonymous account ID so stats and leaderboards work. None of this is tied to your name or email, because we never store them in the first place.
When Quick Play seats you at a table that already exists, including one where a hand is already in progress, we also record which table you joined and when, against your anonymous account ID. We use these records only to check for players who keep joining the same tables to team up against others, and we delete them after 14 days.
On our own systems, we also turn gameplay and account data into daily totals of how the game is used, for example how many hands were played that day, how many new accounts were created, and how many players came back within a week. The totals are counts only. They don't include your account ID, display name or any other identifier, and we use them only to measure and improve the game.
Our hosting provider, Cloudflare, keeps request logs for the Desmoche server. Each entry records basic request details such as the time, the address requested, the response status, and the IP address the request came from. We use them only to investigate abuse and errors, and Cloudflare keeps them for a limited period (3-7 days, as set by Cloudflare). We don't add your name or email to them, and we don't use them for analytics or advertising.
Desmoche keeps a points rating that goes up when you win a hand and down when you lose one. These points have no cash value. They cannot be purchased with real money, redeemed for real money, or exchanged for anything of value outside the game. There is no real-money component of any kind in the app.
We use a small number of infrastructure providers to run Desmoche. None of them are permitted to use your data for their own purposes.
| Provider | What they handle |
|---|---|
| Cloudflare | Hosts our server, database, and this website. All account and gameplay data described above is stored on Cloudflare's infrastructure (plus the one copy on our own server described below), and Cloudflare keeps the request logs described under "Server logs." |
| Cloudflare Turnstile | A bot-detection check that runs before certain actions (like creating a room). Cloudflare may use device/browser signals for its own fraud-scoring; Desmoche only ever receives a pass/fail result from it, not the underlying signal data. |
| Google Sign-In | Handles the sign-in flow if you choose to link an account. See "Signing in with Google" above for exactly what we retain from it. |
Once a day we also copy gameplay data, display names and account dates to a server we run ourselves, not a third party, to compute leaderboards and the daily usage totals. Because the copy is updated daily, deleting your data clears your name and link date there at the next daily update.
We do not sell your data. There is no advertising business model in Desmoche, so there's nothing to sell it for.
Account and gameplay data is kept for as long as your account exists, so stats, leaderboards, and matchmaking keep working correctly. You can end this at any time — see the next section.
Quick Play seating records (see "Gameplay data") are deleted after 14 days, or sooner if you delete your account.
The daily usage totals (see "Gameplay data") contain no account information, so they're kept after an account is deleted. A total for a recent day can still change slightly when someone deletes their data.
Friendships and friend requests are kept until you delete your account (see below) or use "Reset friends and games" (see below), which ends your friendships but not every record. This includes requests that were declined or that expired, and the record of a friend you removed or who removed you: we keep them so that someone who declined a request can't be asked again. Your replies to other people's games are kept (marked "withdrawn" if the game was upcoming or open when you reset) until you delete your account. The invite lists of games you scheduled are kept until you reset or delete your account or, for a cancelled game, until shortly after its start time (a cleanup runs every few minutes), so invitees can see that it was cancelled. The invite lists and replies of ordinary games are otherwise kept until account deletion.
The exception is an anonymous guest account that has never been used to play a game or create a room and hasn't been opened for 90 days. These are deleted automatically, together with their device record.
Open Settings → Delete My Data at any time. This immediately:
What this doesn't remove: past hand results and point totals may remain associated with your (now fully anonymous) account ID, and so does the date the account was created. These records were never tied to your name or email — nothing links them back to you once the steps above are complete — and they're often shared with other players' own game history (a hand you played is also part of their record), so we don't delete them outright. The same goes for the bare record of a room you showed to friends or a game you scheduled (its time and house rules): it stays, tied only to your anonymous account ID, and no longer links to any friend or invitee. Cloudflare's request logs (see "Server logs") are not changed by deleting your data and expire on their own schedule. If you'd like to discuss this further, email contact@hnry.us.
Can't open the app? See how to request account and data deletion without it, including by email.
If you want a fresh start socially without deleting your account, open the Social page's menu and choose Reset friends and games. You need a linked account, and you can do it once every 30 days. It is separate from "Delete My Data": your account, display name, stats, rating, settings and game history are untouched.
The reset:
What the reset keeps: the records of friend requests, including ones you sent that were declined or expired, and of friends who were removed, are changed to a "withdrawn" or "declined" state rather than erased, and remain until you delete your account. They exist so that a reset can't be used to send new requests to people who declined you or to undo your own declines. They are never shown as a list to anyone.
Desmoche is intended for an adult audience (18+) and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has used Desmoche, contact us at contact@hnry.us and we'll address it.
We may update this policy as Desmoche changes. Material changes will be reflected by updating the date at the top of this page.
Questions, requests, or concerns about your data: contact@hnry.us.