Last Updated: October 10, 2026
CardShark Rogue ("we", "our", or "the app") is a collection of classic card games played against computer opponents, against people nearby, or online. This Privacy Policy explains what information the app handles, where it goes, and how you can remove it.
Game progress (ladder rungs, achievements, statistics, unlocked decks and backgrounds), your settings and your saved matches are stored locally on your device. Nothing in this category is sent to our servers. There is no account, sign-up or login to play offline.
The Android version is free and shows advertisements through Google AdMob: a banner on the game list, the Ladder screen and the nearby and online lobbies while you wait for other players, and an optional rewarded video you can choose to watch in Options to unlock a card deck or table background. AdMob may collect the following automatically for ad delivery, personalization and measurement:
If you are in the EEA, UK or Switzerland, the app shows a consent prompt (Google's User Messaging Platform) before requesting personalized ads and honours your choice. You can reopen it at any time from the "Privacy options" row in Options. You can also opt out of personalized ads in your device settings.
Google's own policy: Google Privacy Policy.
Online tables and rankings are optional. When you open the online lobby the app signs you in as a guest through Epic Online Services (EOS) using a device-bound identifier; no email, name or Epic account is required. EOS provides the lobby, matchmaking and the peer-to-peer relay that carries card plays between players. EOS receives your IP address and the guest identifier to do this. Epic's policy: Epic Games Privacy Policy.
So that blocking and bans still work after a reinstall, the app also derives a device key: a one-way salted hash of the identifier Android, Windows or Linux gives this app. The raw identifier never leaves your device, the key cannot be turned back into it, and it is never combined with the advertising ID. Other players at an online table can read the key, and your device uses theirs only to recognise players you have blocked. The block list stays on your device.
When a public ranked table finishes, each player's app sends the match outcome to our rankings service (hosted on Cloudflare). We store, keyed by the pseudonymous EOS guest identifier:
The leaderboard shows display names, avatars and ratings to other players. No chat is stored. Private and nearby tables never contact the rankings service.
Reporting a player: if you use Report in an online lobby, the service stores your guest identifier, the reported player's, the table and game, and the reason you picked. Reports are used only to review abuse and are deleted automatically after 90 days.
The Windows and Linux version is sold on itch.io and shows no ads. itch.io handles the payment; we never see your card or payment details. To unlock the game, it asks our licence service (hosted on Cloudflare) to confirm your purchase with itch.io. You prove the purchase in one of three ways: signing in through the itch app, entering your purchase email, or entering your download key. That proof is passed to itch.io only to confirm the purchase, and the email address and download key themselves are never stored. We store:
To stop abuse, the service also counts verification attempts per IP address; those counts are deleted after a day.
Nearby tables connect devices directly over the local Wi-Fi network or Bluetooth Low Energy. The app asks for Bluetooth permissions, and on some Android versions the location permission that Android requires for Bluetooth scanning. The app does not read, store or transmit your location. Nearby play involves no server.
CardShark Rogue includes simulated casino games (Blackjack, poker variants) played with virtual chips and no real money. It is intended for adults and is not directed at children under 13. We do not knowingly collect personal information from children.
All traffic between the app and AdMob, Epic Online Services, the rankings service and the licence service is encrypted in transit with HTTPS or the EOS transport encryption.
You may access, correct (display name and avatar) and delete the online data described above from inside the app, and you may withdraw ad consent at any time. If you need help with any of this, contact us at the address below.
We may update this policy from time to time. Changes are posted on this page and the "Last Updated" date at the top shows when it was last revised.
Questions about this Privacy Policy:
Email: smeegoan@gmail.com