Privacy Policy

Controller and scope

Develofi, LLC is the data controller for Ben & Wicks. Address: 7901 4th St N, Ste 300, St. Petersburg, FL 33702. Privacy requests: legal@develofi.com. This policy covers cards.benwick.us, euchre.benwick.us, blackjack.benwick.us and euchre-friends-designer.lovable.app.

Information we collect

Account information includes email addresses, account identifiers, display names, sign-in verification hashes, expiry times and attempt counts, authentication sessions, and account creation/update dates. We also store legal acceptance timestamps and versions.

Game information includes room identifiers and invite codes, player and team names, seat assignments, host and seat access tokens, account-to-seat associations, game settings, private hands and undealt cards, accepted moves, game logs and table talk, scores, outcomes, virtual wagers and chip balances, round/match dates, and performance records used for grades or leaderboards.

Uploads include card and table artwork, file locations, design types, ownership associations and upload dates. Your device may store your name, recent tables, invite codes, seat credentials, session information, card size/sort/suggestion preferences and cookie choice.

Hosting and service operations may process IP addresses, browser and device information, timestamps, request/error logs and usage diagnostics. Cookies or similar storage support authentication and preferences. No optional analytics or advertising tracker is currently installed in the app; if optional analytics is introduced, it must respect your consent choice.

How information is used

We use information to authenticate users, host and resume games, synchronize tables, save artwork and virtual wallets, calculate records and friends rankings, provide optional AI table talk, support users, prevent misuse and meet legal obligations. Where applicable, processing relies on performing our agreement, legitimate interests in safe service operation, consent for optional analytics, or legal obligations. We do not currently send promotional email or SMS; sign-in messages are transactional.

Sharing and visibility

Players can see table names, public game state, played cards, game outcomes and shared artwork. Learning mode allows seated players to see all hands; spectators do not receive private hands. Invite links are not a guarantee of confidentiality: anyone with a link can access permitted table information, and some game records and display names may be publicly readable. Do not use a sensitive name or upload private artwork.

We use Lovable Cloud and its infrastructure providers for hosting, authentication, storage and operations, Google Fonts to serve typefaces, and Lovable AI with OpenAI for AI text processing. When AI table talk is requested, relevant game-event input may be sent to those AI providers. Our AI request asks that responses not be stored, but providers' own applicable processing and retention terms still apply. Never submit sensitive information in AI inputs.

We may share information with service providers under appropriate protections, advisers, authorities where legally required, or in a business transfer subject to applicable safeguards. We do not have a payment processor because the service currently does not collect payments. We do not sell or share your personal information for cross-context behavioral advertising.

Cookies, consent and Global Privacy Control

Essential cookies and local storage keep sign-in, private seat access and preferences working. They remain available when you decline optional analytics. On your first visit you can accept or decline optional analytics; the choice is remembered on this browser and can be changed through Cookie settings in the footer. No optional analytics is currently active. A Global Privacy Control signal is treated as an opt-out and overrides an earlier optional analytics acceptance. Choices are device/browser-specific.

Retention and security

We retain account records, game history and saved designs while needed to operate the service, maintain your records or meet legal obligations. Sign-in codes expire after 10 minutes and are removed when used or superseded; expired records may persist until cleanup. Active table artwork and saved design copies can have different lifetimes. Deletion requests may leave limited records required for security, law, dispute resolution or backup rotation; we do not promise immediate removal from all backups.

We use access controls, server-side private-card handling, hashed sign-in codes and encrypted transport. No service can guarantee absolute security. We will provide data-breach notices as required by Florida's Information Protection Act and other applicable law. Providers may process data outside your state or country, subject to applicable protections.

Your rights and California notices

Contact legal@develofi.com to request access, correction, deletion, portability where applicable, or to object to or restrict processing. You may also opt out of marketing should it ever be offered, and withdraw optional analytics consent using Cookie settings. We may verify your identity before fulfilling a request. Applicable rights and exceptions depend on your location; you may contact your privacy regulator.

For California residents, subject to CCPA/CPRA applicability, rights include knowing categories and specific pieces of personal information collected, correction, deletion, opting out of sale/sharing, limiting qualifying use of sensitive information, and non-discrimination for exercising rights. We do not sell or share your personal information. We do not use sensitive personal information to infer characteristics about you. Authorized agents may submit requests with evidence of authority. The collection, purposes and recipient categories are described above.

Children and updates

The service is for adults 18 and older and is not directed to anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child supplied information, contact legal@develofi.com so we can investigate and delete it as appropriate. We will post updates with a revised date and provide further notice when legally required.