Certain Death — Privacy Policy
Effective 13 October 2026
Certain Death is a card game made by Plausible Plan (“we”, “us”). This policy explains what the game keeps, what it sends to us, and what you can do about it. The short version: there are no ads, no analytics and no tracking, and we never ask for your email, your real name or a password.
What stays on your device
Your profile (the name and face you choose), your settings, your achievements, a game in progress, and your recovery code are kept on your device. We can’t see any of it unless it is part of what is sent to the leaderboard, described below.
What is sent to our server
When you finish a match, or earn an achievement during one, the game sends it to our leaderboard server, which replays it to check it and awards your experience points (XP). The server keeps:
- A random player ID that the game makes up the first time you play. It isn’t tied to your device, your Google or Apple account, or anything else about you.
- The name and face you chose. These are public: anyone who opens the leaderboard sees them next to your XP. Please don’t use your real name if you’d rather not have it shown. If a name is offensive or impersonates someone, we may change it on the leaderboard.
- Your XP, your achievements and when you earned them, and a record of each match: when it was received, when it finished, and the XP it paid. The moves you made are used to check the match and are not stored.
- A scrambled (hashed) copy of your recovery code and a device token, so that a recovery code can move your profile to a new device. We can’t recover the code from what we store.
When you change your name or face, the new one is sent straight away so the leaderboard stays up to date.
Internet addresses. To stop people guessing recovery codes, the server counts restore attempts from each internet (IP) address for 15 minutes. These counts are kept in memory only, are never written to disk, and are gone when the server restarts. We don’t otherwise record IP addresses.
Our server is located in Canada.
Supporter purchase
If you buy the optional supporter upgrade, the purchase is handled entirely by Google Play or the App Store. We never see your payment details. The game sends us the store’s confirmation of the purchase so that our server can mark your profile as a supporter and show the badge on the leaderboard.
Feedback email
If you use SEND FEEDBACK, your own email app opens a message to support@plausibleplan.ca. We receive whatever you choose to send, including your email address, and use it only to reply to you.
What we don’t do
We don’t sell or share your information, show ads, use analytics or tracking tools, or collect your location, contacts, photos or any other information from your device.
Keeping and deleting your information
We keep your leaderboard profile for as long as the leaderboard exists. You can delete it yourself at any time from the game: open EDIT PROFILE and choose DELETE PROFILE. It is removed from our server straight away, along with its matches, achievements and face.
If you no longer have the game, email support@plausibleplan.ca and include your recovery code (shown in EDIT PROFILE once you have finished a match). The code is how we know the profile is yours. We will delete your profile, its matches and its achievements from our server, and your name and face will no longer appear on the leaderboard. If you keep playing on that device afterwards, your next match starts a new profile from nothing. Uninstalling the game deletes everything kept on your device.
Children
Certain Death is not directed at children under 13, and we don’t knowingly collect information from them. If you believe a child has created a profile, contact us and we will delete it.
Changes
If this policy changes, we will update this page and its effective date.
Contact
Plausible Plan — support@plausibleplan.ca