Privacy Policy
Short version: there are no accounts, no advertising and no tracking of any kind. Playing on your own keeps everything on your device. Playing online sends the name you chose and the cards you play, and nothing else.
Last updated: 20 August 2026
Who is responsible
Hearts Zone is run by Maurizio Mariani, who acts as data controller. You can reach him at privacy@heartszone.net for anything on this page.
What is stored on your device
Four things, all of them in your own browser or app, never sent anywhere: your preferences including your display name (hz_settings), an offline game in progress so it survives closing the app (hz_local_game), a token per room that lets you take your seat back after a disconnection (hz_token_ plus the room code), and your chosen language (hz_locale).
Playing against the computer
The computer opponents run inside the app itself. A game against them involves no server at all, and no information about it leaves your device.
Playing with other people
When you join a room, the display name you chose and the moves you make are sent to the game server so the table can work. Your name and your plays are visible to the others at that table; the cards in your hand are never sent to them.
Connection data
The site and the game server are hosted on Cloudflare, which processes connection data such as IP addresses in order to deliver the service and protect it from abuse. That is the basis on which any hosting works, and it is a legitimate interest in keeping the service running and secure.
What is not done
No analytics, no advertising, no profiling, no cookies beyond the language one, no sale of data, no sharing with third parties for their own purposes. There is no advertising identifier and no account to attach anything to.
Legal bases
Online play is processed to perform the service you asked for. Connection data is processed on the basis of a legitimate interest in security and availability. The language cookie is technically necessary and needs no consent.
How long anything is kept
What is stored on your device stays until you delete it. A room and the game inside it are deleted automatically thirty minutes after the last player leaves. Cloudflare's own logs follow Cloudflare's retention policy.
Where data goes
Cloudflare's network is global, so a connection may be served from outside the European Union. Those transfers rely on the safeguards Cloudflare provides for its customers, including the European Commission's standard contractual clauses.
Your rights
Data protection law gives you the right to access, correct, delete and object to the processing of your personal data, and to complain to your supervisory authority — in Italy, the Garante per la protezione dei dati personali. Being honest about the limits: with no account, there is no way to look you up, so for what is on your device the fastest route is to clear the site data in your browser or uninstall the app, which removes all of it at once.
Children
The game is not intended for children under 13. It asks for no personal information beyond a display name, which should not be a real name for a young player.
The mobile apps
The iOS and Android apps contain the same game and ask for no system permissions: no contacts, no location, no camera, no notifications. On Android the app declares internet access, which is what online play needs.
Changes
This policy may be updated if the game starts doing something different with data. The date at the top says when it last changed.
Contact
Privacy questions and requests: privacy@heartszone.net.