CardLocked Privacy Policy

Last updated: September 12, 2026

CardLocked is an adult (18+) app for card-based lock games. This policy explains, in plain language, what data we collect and what we do with it. CardLocked is currently in active development; this policy reflects how the app works today.

What we collect

• Account information — your email address, username, and password (stored only as a secure hash, never in plain text), plus any optional profile details you add such as an avatar or bio.
• Device identifier — on Android, the app-scoped device ID the system provides (it survives reinstalling the app); on iOS, a random ID the app keeps in the keychain. Used only for anti-cheat and to enforce restrictions against repeat abuse.
• Push notification tokens — so the app can send you notifications (for example, keyholder updates).
• Lock and game activity — the locks you create, card picks, lock history, keyholder relationships, ratings and reviews, and related gameplay records. Lock combinations are stored encrypted.
• Pillory votes — when someone votes through a pillory link without an account we keep a keyed one-way hash of their network address and of a browser cookie, computed per lock with a server secret so it cannot be matched across locks or reversed from our database, used only to enforce once-a-day voting and deleted after about a week. Signed-in votes are kept under the voter's account together with the same kind of per-lock hash of the phone's device identifier, used only to stop the same phone voting twice on one lock. If you list a lock in the public pillory, every signed-in user can see your username, avatar, that you are in a lock right now, and what a vote adds — never your lock's name, cards, combination or emergency settings. A pillory can only add cards; nothing in it removes one. The reason line written for a pillory — by you on a self lock, by your keyholder on a keyholder lock — is shown, as written, to everyone who opens the link or sees the listing.
• Support messages — anything you send to support so we can help you. Tickets are first read by an automated assistant that runs on Anthropic's Claude API: the ticket text, plus the status of the lock it is about, is sent there to draft a reply and to decide whether a person needs to look. Your combination, passwords and email address are never sent. Anthropic does not train on this data.
• Error reports — if the app runs into an error, it files a report on your account: the device model and OS version, the screen size, which screen you were on, and the technical stack trace. These reports go to CardLocked's own support system only — never to a third-party crash or analytics service.

What we use it for

• Running the service: your account, your locks, and syncing between you and your keyholder.
• Anti-cheat and abuse prevention. The device identifier exists to enforce account restrictions (for example, a second emergency release inside a year on a lock with no emergency password) and to stop a restriction being dodged by creating a new account on the same phone.
• Sending notifications you'd expect from the app.
• Answering your support requests, and fixing the bugs that error reports show us.

What we do NOT do

• We do not sell your data. Ever.
• We do not use your data for third-party advertising.
• We do not share your data with anyone except the infrastructure providers needed to run the service (server hosting, email delivery, push notification delivery, and the support assistant described above).

Adults only

CardLocked is strictly for adults aged 18 or older. You confirm this when you register. We do not knowingly collect data from anyone under 18; if we learn that we have, we will delete it.

Deleting your data

You can delete your account and all associated data whenever no lock of yours is still running, from Settings → Delete Account in the app, or by following the steps on our account deletion page. A running lock has to end first (the emergency release's usual rules apply). Deletion is immediate and permanent.

One narrow exception: if a device was restricted for abuse, the restriction record stays keyed to the device identifier (not to your identity) so restrictions cannot be evaded by deleting the account and creating a new one on the same phone.

Development phase

CardLocked has not launched yet. During development and testing, data may occasionally be reset or wiped. Don't rely on the app as a permanent record of anything.

Changes

If this policy changes in a meaningful way, we'll update this page, note the date at the top, and email the address on your account before the change applies to you.

Contact

Questions about privacy or your data: aj@cardlocked.app