Privacy Policy
Effective August 24, 2026
Highpass Studio operates Sheepshead Club, including sheepsheadclub.com and the Sheepshead Club iOS app. This policy explains what information we collect, why we use it, how long we keep it, and how you can delete it. The same account system may also be used by Bid Whist Live and Optimal Felt, so deleting a shared Highpass game account removes it across those services.
What we collect
- Account information: your player name, email address, password hash, account creation date, and session tokens. We never store your password in readable form. Email is used for account recovery and service messages.
- Gameplay and social information: scores, results, event participation, trophies, recent-hand links, clubs, friends, lobby chat, hands shared with a club, and preferences tied to your account.
- Support information: text you send through the feedback form. If you attach a screenshot or PDF, it is validated and forwarded by email but is not saved in the game database or on the game server.
- Operating and security information: a random device identifier created by the app, referral source, connection times, mobile or desktop status, and a coarse country-region value such as US-WI. The server receives your IP address to make a connection, but does not store the raw address. It stores a one-way keyed hash for abuse detection.
- Usage counts: first-party, self-hosted GoatCounter page analytics and anonymous daily feature totals. We do not use advertising identifiers.
How we use information
We use this information to authenticate accounts, recover passwords, run multiplayer tables, calculate stats and event standings, support clubs and chat, reconnect interrupted games, investigate abuse or collusion, answer support requests, verify fair dealing, fix defects, and understand whether the service works. We do not sell personal information, serve targeted advertising, or track you across other companies' apps or websites.
When information is shared
Player names, table activity, standings, badges, and chat can be visible to other players as part of the game. Club-only messages and shared hands are visible to members of that club. Moderators may observe tables and chat to enforce rules and investigate abuse.
We use service providers only to operate the service. Resend processes password-recovery email and emailed feedback. Hosting and network providers process traffic needed to serve the game. On the website only, Stripe processes optional supporter payments under Stripe's own privacy policy. The iOS app does not offer those external purchases. Providers are expected to protect information consistently with this policy and may use it only to provide their contracted service.
Retention
- Account information and account-linked scores are kept while the account exists, then deleted when you delete the account.
- Lobby chat is automatically deleted after seven days. In-memory table chat disappears when its table closes.
- The link between a signed-in player and a hand is kept for seven days, then deleted. The deal record itself contains no human player names or user IDs and may be kept indefinitely for fairness verification, replay integrity, and defect analysis.
- Connection and table-attempt telemetry linked to an account or random device identifier is automatically deleted after 90 days.
- Password reset links expire after one hour. Sessions remain until logout, password reset, account deletion, or administrative invalidation.
- Feedback text is kept until it is resolved and no longer needed, or until the associated account is deleted.
- Anonymous aggregate counts may be kept because they cannot be connected to an account, device, session, or hand.
Delete your account and data
While signed in, choose delete account beside your player name. Enter your current password and type your player name to confirm. Deletion is immediate and permanent.
Deletion removes your credentials, email, sessions, scores, event records, chat, feedback, friends, memberships, shared-hand links, telemetry links, and clubs you created across the shared Highpass account system. It also removes the link between you and recent hands immediately. Anonymous deal records remain, but they contain no human identity. You may also contact support@sheepsheadclub.com with a privacy question.
Your choices
You can play Sheepshead Club and Bid Whist Live as a guest without creating an account. Guests do not receive server-side stats or cross-device history. You can clear local preferences and guest history by clearing the app or browser storage. You can stop future collection by deleting your account and stopping use of the service.
Children
The service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided account information, contact us so it can be deleted.
Security
Connections use TLS. Passwords are salted and hashed. Access to player records is limited to operating and moderating the service. No online system can guarantee absolute security, but we design collection to be limited and remove identifying links when they are no longer needed.
Changes and contact
We may update this policy when the service changes. The effective date above identifies the current version. Material changes will be announced in the service. Highpass Studio is the operator and data controller. Contact support@sheepsheadclub.com for privacy questions or requests.