Privacy
Last updated: 2026-10-24
In short
Spades Online has no accounts, no login, no cookies, no advertising and no third-party analytics. Your settings and your record live only in your own browser. The server keeps a table in memory while you play and forgets it afterwards. The only thing we write to disk is a small, size-capped log of anonymous error reports, which you can switch off in Settings.
What is stored on your device
The game uses your browser's local storage (not cookies). Nothing in it is sent to us, except the reconnect token described below.
spades.prefs.v1: your settings (volume, animation speed, card size, four-colour deck, mute, bot level, the error-report switch).spades.stats.v1: your record on this device (rating, wins, best and recent games). It is never uploaded and there is no world ranking.spades.onboarded.v1(tutorial progress),spades.lastRecorded(a marker that stops a finished game being counted twice) andspades.perf.v1(your graphics quality choice).spades.resume: a random token for your current seat, so you can rejoin after a refresh or a dropped connection. It is removed when you leave the table.dirk8.lang: the language you picked.- Offline cache: a service worker keeps a copy of the game files so the game can start without a connection. It contains no personal data.
Older versions used spades.mute, spades.fourColor, spades.level and spades.history; they are read once to carry your settings over.
What the server handles while you play
There are no nicknames: players are just seats at a table. A table lives only in the server's memory, with its four-letter room code, the cards and the score. Nothing about a game is written to disk.
An empty or finished table is removed within minutes, and no table lives longer than 6 hours.
To limit abuse the server keeps your IP address in memory only, to count connections and messages. It is not stored in any file by the game server. Operational logs contain only technical events such as the room code and why a table was closed.
Anonymous error reports
If the game hits a script error, the page can send one short report: the error message, a short stack trace, the build version, a browser-and-system class such as chrome-linux, and the window size. Any text that looks like a room code, a token or a link query is stripped. Reports contain no IP address, room code, token or identifier, and at most 5 are sent per visit.
Reports are appended to reports.jsonl on the server, and a counter summary (tables created, games finished, reconnects) is written once an hour to metrics.jsonl. Each file is a rotating log capped at 1 MB and 1 MB: when it is full, the oldest data is overwritten. There is no other retention period.
You can turn reports off at any time under Settings, and nothing is sent after that.
What we do not do
We do not ask for your name or email, set cookies, show ads, use third-party analytics or tracking pixels, or sell or share data.
Hosting providers
The website files are delivered by Cloudflare Pages and its network, and the game server runs on a rented server behind a reverse proxy. Those providers may keep their own standard access logs (such as IP address and request time) under their own policies, outside the control of this game.
Your control
Clear this site's data in your browser to erase everything stored on your device. Leaving a table frees your seat on the server at once.
Changes
If this page changes, the date at the top changes with it.