Captain John and his 3 Aces: Privacy Policy

Last updated 21 October 2026

Captain John and his 3 Aces is a treasure-hunting board game for 2 to 6 pirates, played on one phone or online with friends. This page explains what the game keeps, where it is kept, and for how long. In short, it collects as little as it can. You don't need an account, and the game has no ads, no analytics and no tracking.

Playing on one phone

A game played on one phone, against friends passing it round or against computer pirates, never leaves that phone. The game keeps your settings (pirate names, crew, map, pace and sound) and the voyage you are in the middle of in the phone's own storage, so you can carry on later. Uninstalling the app, or clearing its data, removes them.

Playing online

When you start or join an online game, the game's server keeps:

• the game's five-letter code and its settings (map, seats, wildcards);
• the pirate name you type for yourself (it can be anything, and needn't be your real name);
• the game itself, every pirate's cards included, so the server can deal and judge fairly and show each player only their own hand;
• a random code your phone is given for each game, so the server knows which seat is yours.

Games are stored on Supabase servers in London, in the United Kingdom. A game nobody has touched for seven days is deleted automatically. When you leave a game, your seat is handed to a computer pirate. If you were the last player at the table, the game closes.

Membership

The game is free, and there's nothing to buy yet. A one-off membership, bought through Google Play, is planned: it will let you start online games, and friends will always be able to join your games for free. Until it goes on sale, none of the information below is collected. Google will handle the payment: the game never sees your card or bank details, your name or your email address. To check and restore a membership, the server will keep:

• Google Play's purchase token and order number for the purchase;
• a scrambled copy (a SHA-256 hash) of a random code kept on your phone. The code itself is never stored on the server;
• when the membership was bought and when it was last used, and whether it was refunded.

The membership record will be kept for as long as the membership lasts, so it can be restored on a new phone.

Other services the game connects to

Like any app that goes online, the game's requests carry your phone's internet (IP) address. The services involved keep ordinary short-term logs of it, to run and protect their systems. The game uses these services:

• Supabase, the online game server described above;
• Google Fonts, for the lettering;
• jsDelivr, which serves the 3D table's code to the web version. The Android app carries that code inside itself;
• Google Play, for membership purchases.

What the game never does

• It never asks for your email address, phone number, contacts, photos, camera, microphone or location.
• It never shows ads, and never uses analytics or tracking tools.
• It never sells or shares your information for advertising.

The Android app asks for only two permissions: internet access, for online play, and vibration, for a short buzz when it is your turn in an online game.

Children

The game doesn't ask anyone for personal information, and online names can be made up. A parent who thinks their child has entered something they shouldn't have can ask for it to be deleted (see below).

Your choices

• Play on one phone, and nothing is sent anywhere.
• Online games delete themselves seven days after they were last played.
• To ask what is stored about you, or to have it deleted (including a membership record), write to the developer at the contact email shown on the game's Google Play page.

Changes

If the game starts keeping anything new, this page will be updated first and its date changed.