Privacy Policy

Last updated: September 25, 2026

ShuffleKit (“we”, “us”, “our”) is a personal project operated by Yaman Jalal that runs the ShuffleKit card game creation platform at shufflekit.com. This policy explains what data we collect, why we collect it, and how we handle it.

By using ShuffleKit, you agree to the practices described in this policy.

What data we collect

Account data: Your name and email address when you sign up.

Payment data: Billing is handled by Dodo Payments. We never see or store your card details. Dodo Payments’ privacy policy applies to payment data.

Usage data: How you use the platform — features accessed, content created, session duration, and general interaction patterns. We also collect error reports so we can find and fix bugs. This helps us improve the product.

Content you create: Card designs, artwork, game rules, and any other content you build using ShuffleKit. This is yours — see the ownership section below.

Cookies and analytics: We use cookies to keep you logged in and remember your preferences, and PostHog cookies to understand how people use the platform. If you arrive through a partner link, a referral cookie remembers who sent you for 90 days. If you arrive from a Google ad, a Google Ads cookie records whether you went on to sign up or subscribe. The TikTok Pixel sets a cookie on every visit, so TikTok can tell which of our TikTok ads led to a visit, a sign-up or a subscription. You can disable cookies in your browser, though some features may not work correctly.

Why we collect it

We collect data to:

  • Run and improve the platform
  • Process your subscription and payments
  • Send you account-related emails (confirmations, billing, important updates)
  • Respond to support requests
  • Understand how the product is being used so we can make it better

We do not sell your data, we do not show ads, and we never share your content with advertisers. The one advertising use is measurement: Google Ads and TikTok are told when a visit ends in a sign-up or a subscription, so we know which of our ads work.

Third-party services we use

ShuffleKit is built on top of several third-party services. Each has its own privacy policy:

  • Supabase — database and account sign-in
  • Cloudflare — hosting and file storage
  • Google — Gemini models for the AI assistant, image generation and voice input; Google sign-in if you choose it; Google Ads conversion measurement
  • Dodo Payments — checkout, billing and tax
  • PostHog — product analytics and error tracking
  • Resend — account and project emails
  • TikTok — ad measurement through the TikTok Pixel
  • Affonso — referral tracking for the partner program
  • The Game Crafter — only when you use Print & Ship: your card images and game details are sent to your Game Crafter account

When you use ShuffleKit, your data may pass through these services as part of normal operation.

International data transfers

ShuffleKit is operated from Qatar, but our infrastructure providers are based in the United States. By using the Service, you acknowledge that your data may be transferred to and processed in the US or other countries, which may have different data protection laws than your own.

Your content

You own everything you create on ShuffleKit — card designs, artwork, game mechanics, and any other content. We only store and process your content to provide the Service to you. We do not claim ownership over it.

If you delete your account, we will delete your content within 30 days unless we are required to retain it by law.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to how we process your data

If you are in the EU or UK (GDPR): Our legal basis for processing your data is either your consent, the performance of our contract with you, or our legitimate interests in improving the Service. You have the right to lodge a complaint with your local data protection authority.

If you are in California (CCPA): You have the right to know what personal information we collect, to delete it, and to opt out of any sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at yaman@shufflekit.com.

Data retention

We keep your account data for as long as your account is active. If you cancel or delete your account, we will delete your personal data within 30 days unless we are legally required to keep it longer.

Security

We take reasonable steps to protect your data, including encrypted connections (HTTPS) and secure infrastructure. That said, no system is completely secure. If you believe your account has been compromised, contact us immediately.

Children

ShuffleKit is not intended for users under the age of 13. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.

Changes to this policy

If we make significant changes to this policy, we will notify you by email or by posting a notice on the platform. The date at the top of this page always reflects the most recent version.

Contact

Questions about this policy? Reach us at:

Yaman Jalal
Email: yaman@shufflekit.com
Website: shufflekit.com