Why we chose this model
Privacy isn’t a setting we buried somewhere.
It is part of the architecture. Whenever we can keep something on your device, we do. We love data. We just do not think all of yours belongs to us. We make apps, not dossiers.
Privacy and trust
Personal information should remain personal.
We love data. We just do not think all of yours belongs to us. Four of Hearts makes paid software, not dossiers: no behavioral advertising, no cross-app profiling, and as little collection as the product actually needs.
What we don’t do
- No behavioral advertising on this website
- No tracking pixels or cross-site profiling
- No sale of personal data
- No profiling children for advertising
What products may need
Every released product will get its own accurate privacy disclosure. Offline, multiplayer, cloud, and search products do not all move data the same way.
Whomly, for example, would need to send a public-information search request to servers or providers. We will disclose vendors, purposes, retention, and controls before release.
Kids
Play should not become a profile.
Kids should get to play without becoming an advertising profile. We do not believe child-friendly products should profile children for advertising.
How we make money
You pay us with money. Not with data.
Software costs money to build, test, secure, update, and support. We would rather customers pay us directly than have advertisers pay us to study the customers.
Buy the software. Keep it current.
Products may use a straightforward purchase. Where continuing updates, content, or active services justify it, a small ongoing subscription may support those benefits. Exact price, billing frequency, renewal terms, benefits, and cancellation details will be shown clearly before purchase.
Strictly necessary
LimitedOrdinary site delivery plus one opt-out cookie only when you ask us to remember your choice.
Analytics
OffNo analytics scripts or visitor measurement.
Advertising
OffNo ads, pixels, or targeted advertising.
Sale or sharing
Not performedNo sale of personal information or sharing for cross-context behavioral advertising.
Global Privacy Control
RecognizedA browser GPC signal is treated as an opt-out request.
Game progress
On devicePalace stores one game and sound/motion choices in this browser so play can resume. Other website lessons reset on refresh. Nothing is uploaded.
Website privacy: This website exists to show you what we’re making. It does not use advertising cookies, tracking pixels, behavioral analytics, or cross-site profiling. Ordinary hosting infrastructure may process request and security logs. One first-party preference cookie is created only if you ask us to remember that optional cookies stay off.
Legal-review status: This is a detailed, lawyer-ready operational draft based on the website’s current data practices. It was not written or approved by an attorney and is not legal advice. Qualified California privacy counsel should review it before the company represents it as attorney-approved.
1. Scope and who we are
This policy describes how Four of Hearts Interactive, LLC (“4OH,” “we,” “us,” or “our”) handles personal information through 4ohi.com, website game previews, and messages sent to support@4ohi.com. It does not automatically describe a separately distributed game or service with its own notice.
The California Consumer Privacy Act, as amended (“CCPA”), applies only when statutory thresholds and other requirements are met. Whether or not the CCPA applies to 4OH, this policy explains our practices and we intend to honor the California requests described below when reasonably possible.
2. Notice at collection
We may collect the categories below for the stated purposes. We do not collect more information than reasonably necessary and proportionate for those purposes.
| Category | Examples and source | Purpose | Retention criterion |
|---|---|---|---|
| Identifiers and contact information | Email address, name, and other details you choose to include in a support, privacy, security, or project message; collected directly from you. | Respond, authenticate a request when appropriate, troubleshoot, maintain request records, and protect the service. | General correspondence is kept only as long as reasonably needed. If the CCPA applies, consumer-request and response records are kept for at least 24 months as required by regulation. |
| Internet or other electronic network activity | IP address, browser or device type, requested page, date/time, referring information, and security events that hosting and network providers may process when delivering the site. | Deliver, secure, troubleshoot, and maintain the website. | Controlled by the relevant infrastructure provider under its applicable logs and retention practices; 4OH does not operate an analytics database of this activity. |
| Support and correspondence content | Message text, attachments, screenshots, device details, and issue information you voluntarily send. | Provide support, investigate defects or security reports, improve products, and respond to requests. | Kept only as long as reasonably necessary for the request, product quality, security, legal obligations, or disputes. |
| Privacy preference | A first-party value indicating that optional cookies must remain off. | Remember and honor your choice. | 180 days, unless you clear it sooner. No identifier, advertising ID, or browsing history is stored in this value. |
| On-device Palace state | One game state, including cards, turns, local bots, result, and sound/motion preferences stored in your browser. The page does not send this state to 4OH. | Resume the same game after refresh or tab closure, remember completion, and honor accessibility and sound choices. | Remains on the device until site data is cleared or a future incompatible schema safely invalidates it. |
We do not intentionally collect sensitive personal information through this website. Do not send passwords, government identifiers, payment data, precise location, health information, or other sensitive data.
3. Cookies and similar technologies
The site does not use analytics, advertising, cross-site tracking, fingerprinting, or third-party social widgets. Optional cookies are off by default. If you select “Reject optional cookies,” we set one strictly necessary first-party cookie named 4oh_privacy_choice with the value optional_off. It exists only to remember your request, is sent only to 4ohi.com, uses Secure and SameSite=Lax attributes, and expires after 180 days. “Continue without saving” closes the notice for that page view without creating the cookie.
The complete Palace browser game uses local storage keys 4oh_palace_web_v1 for one game and 4oh_palace_web_preferences_v1 for sound and motion choices. These values are required for resume and one-game-limit behavior, remain on the device, contain no account or direct identifier, and are not transmitted by the page. Clearing site data removes them.
You can reopen the control center through “Your Privacy Choices” in the footer. Browser settings can also delete the preference cookie. If optional technology is introduced later, it must remain blocked until the controls and this notice are updated and any legally required choice is obtained.
4. Do not sell or share my personal information
4OH does not sell personal information and does not share personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months. We therefore have no knowledge that we sell or share the personal information of consumers under 16. Selecting “Reject optional cookies,” enabling Global Privacy Control, or emailing us will still be recorded or treated as an opt-out direction.
Submit a Do Not Sell or Share request
5. How we use personal information
We use personal information to deliver and secure the site; respond to support, privacy, security, and business inquiries; diagnose defects; maintain records required by law; prevent abuse; establish or defend legal claims; and improve our products using feedback you choose to provide. We do not use website information for targeted advertising or automated decisions that produce legal or similarly significant effects.
6. Disclosure to service providers
GitHub Pages and ordinary internet infrastructure providers may process request metadata to host, deliver, and protect the site. Our email provider processes messages sent to support@4ohi.com. Professional advisers or authorities may receive information when reasonably necessary for legal compliance, security, or claims. We do not authorize these recipients to use personal information for cross-context behavioral advertising.
7. California categories disclosed in the preceding 12 months
Identifiers, internet/network activity, and correspondence content may have been disclosed for a business purpose to hosting, communications, security, and professional-service providers as described above. No category was sold or shared for cross-context behavioral advertising. We did not use or disclose sensitive personal information for purposes that require a “Limit the Use of My Sensitive Personal Information” link.
8. California privacy rights
Subject to law and applicable exceptions, California residents may request: (a) the categories or specific pieces of personal information collected; (b) sources, purposes, and recipient categories; (c) deletion; (d) correction; (e) opt-out of sale or sharing; (f) limitation of certain uses of sensitive personal information; and (g) freedom from discrimination for exercising privacy rights. We do not offer financial incentives for personal information.
9. How to submit a request
Email support@4ohi.com with the subject “California Privacy Rights Request.” State the right you want to exercise and enough context for us to locate relevant correspondence. Because this is an online-only website with a direct consumer relationship, email is the primary request method. We will confirm receipt and respond within the periods required by applicable law.
We will verify only to the degree appropriate for the request and the sensitivity of the information. We may ask you to reply from the email address involved or provide information already associated with your message. We will use verification information only for verification, security, fraud prevention, and legal compliance. If we cannot verify a request, we will explain the decision where permitted.
10. Authorized agents
An authorized agent may submit a request for you. We may require proof of signed authorization and may ask you to verify your identity or confirm that you gave the agent permission. Opt-out requests generally do not require identity verification, although we may request limited information needed to apply the request.
11. Global Privacy Control
When the browser exposes a Global Privacy Control signal, the site treats it as a request to keep sale, sharing, advertising, analytics, and other optional tracking off. Those technologies are already absent. We do not require you to create an account or provide extra information to use GPC.
12. Children
The company website is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information from children through accounts or forms, and we do not sell or share personal information of people we know are under 16. A parent or guardian who believes a child sent personal information may contact us for review and deletion.
13. Security and data minimization
We use a static-site architecture, local assets, a restrictive Content Security Policy, and no visitor accounts or form backend. No method of transmission or storage is completely secure. Please send only information necessary for your request.
14. Retention
We retain each category only for the period reasonably necessary and proportionate to the disclosed purpose, considering the duration of the relationship, request status, legal and accounting obligations, security needs, limitation periods, and the need to establish or defend claims. The privacy-choice cookie has the fixed 180-day period described above. Palace game state remains locally until site data is cleared or an incompatible schema invalidates it; the page never uploads it. Infrastructure-provider logs are governed by the provider practices.
15. Changes to this policy
We will post material changes here, update the date above, and provide additional notice when required. Materially different uses of previously collected personal information require the notice or consent required by applicable law.
16. Contact and accessibility
Questions, accessibility requests, and privacy requests may be sent to support@4ohi.com. If you need this policy in another format, tell us the format that works for you.