Privacy Policy

How Corkboard Club handles your data, in plain words. This policy covers our website, your account, the game on your TV and phones, and the websites we run for the game.

Who is responsible

Corkboard Club is run by Gornostaev Konstantin, a sole proprietor (individual entrepreneur), who is responsible for your personal information. Questions and requests: [email protected].

What we log and why

We keep our own log of how the game is played, for every player, so we can fix problems and make cases better. No third-party trackers run inside the game.

Pages you open, buttons you tap and which parts of a case you've seen.
What you type, recorded once when you send it: searches, form entries and codes. Never keystroke by keystroke.
Your device and browser, and the country your connection comes from.
Which ad or link brought you here: UTM tags and click IDs.

We don't record your screen, your camera or your microphone.

Other information we collect

Your account: an anonymous ID for your browser and, if you save your account, your email address or the ID Apple or Google gives us when you sign in with them. Your language and email choices.
Your game: the rooms you play in, the player name you choose, your answers and votes, and the TVs you link, with the names you give them.
Purchases: what you bought, when and for how much, and your Paddle customer ID. Your card details go to Paddle, not to us.
A photo, only if you choose to upload one at the end of a case. We remove its location and other hidden data when you upload it.
What you write to us, and your answers to optional questions after a case.

How we use it

To run the game: keep everyone's phones and the TV in sync, save your progress and your cases.
To manage your account and purchases, and to send the emails you need, like sign-in links and codes.
To fix problems and make our cases better.
To keep the service safe: stop abuse, fraud and code guessing.
To see which ads and links bring people to us.
To follow the law and protect our rights.

Cookies

We use cookies the game needs: to recognize your browser, keep you signed in, keep your place in a game and link your TV. The websites we run for the game set only cookies needed for your game session. Cloudflare, which protects our site, may use its own security cookies, for example when it checks that you're not a bot.

Emails

We send the emails you need: sign-in links, codes and gifts. After an evening we may send a follow-up about your case, for example when Act II is still waiting for your group; each such email has an unsubscribe link. We send news about new cases only if you ask for it.

We share personal information only with companies that help us run the service, and only what they need:

Paddle.com, our Merchant of Record, for payments, sales tax, receipts and refunds. Paddle handles your payment data under Paddle's privacy policy.
Cloudflare, for our network, security, file storage and email forwarding.
Our hosting and email delivery providers.
Sentry, for error reports that help us fix problems.
Apple and Google, only if you choose to sign in with them.
Authorities, when the law requires it, and a buyer of our business if it is ever sold.

When a case sends you to Google Maps, you use it directly under Google's own terms and privacy policy.

Advertising

When you come from an ad, we save which ad or link brought you in our own log. Advertising pixels from Meta and TikTok are turned off. If we turn them on, they'll run only on our main website, never inside the game or on the websites we run for the game, and we'll update this policy first.

To tell which ad worked when you open our site inside an app and then scan a QR code in another browser, we may match the two visits by network address within 2 hours. For this we keep only a scrambled form of the address, never the address itself, and we use the match only to count ads.

Do Not Sell or Share My Personal Information

We don't sell your personal information. If your browser sends a Global Privacy Control signal, we don't load advertising pixels for you.

To opt out of sharing for advertising, turn on Global Privacy Control in your browser, or write to [email protected] with the subject “Do Not Sell or Share”.

Do Not Track and Global Privacy Control

We honor Global Privacy Control (GPC): it works as a request not to sell or share your information, and no advertising pixels load for you. There's no common standard for the older Do Not Track setting, so we don't change what we do when we receive it. Third parties can't track you across websites through our game.

How long we keep it

Raw game events, including what you type: 13 months. After that only totals remain.
Answers to questions after a case: 13 months.
Photos from the end of a case: deleted automatically after 30 days.
Your account: until you delete it.
Receipts and tax records: kept by Paddle, our payment provider, as the law requires.

Deleting your data

Tap “Delete my data” in your account, or write to [email protected] from the email linked to your account. Within 30 days we erase everything linked to you: game events, answers, offers and your account, on every browser and device we've linked to you.

In the history of past games your player name becomes “Player N”. Records of purchases stay without your name; receipts stay with Paddle.

Your rights in California and other states

Depending on where you live, including California and other US states with privacy laws, you may have the right to:

know what personal information we have about you and get a copy of it;
correct it;
delete it;
opt out of the sale or sharing of your information and of targeted advertising;
use these rights without being treated worse for it.

To use your rights, write to [email protected]. We'll confirm your request from the email linked to your account and answer within 45 days. Someone you authorize in writing can make a request for you. If we say no, you can ask us to reconsider by replying to our answer.

We don't collect sensitive information such as precise location, health data or government IDs, and we don't share personal information with others for their own direct marketing.

Children

Corkboard Club is not meant for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to [email protected] and we'll delete it.

Keeping it safe

We encrypt connections, limit who can access data and keep photos in private storage, shown only through short-lived links to your own group. No system is perfectly secure, so please tell us at [email protected] if you notice a problem.

Websites that are part of the game

Cases take place on websites we run for the game. They are part of the service and follow this policy. See our list of domains we operate.

Where we process data

We sell in the United States. Your information may be processed in the United States and other countries where we and our providers work.

Changes to this policy

We'll post any update on this page with a new date. If a change is important, we'll tell you on the site or by email before it takes effect.

Contact

Questions or requests about your data: [email protected]. See also our Contact page.

Effective and last updated: October 22, 2026