Contract Whist
Privacy Policy
Last updated 5 November 2026
Who we are
The Contract Whist app (“the app”) and this website are run by Michael Lewis, who is responsible for your data under UK data protection law. Questions or requests: contractwhistpro@gmail.com.
Without an account
Playing against the computer works without signing in, and those games are saved only on your device.
When you keep score for a game with real cards, the game (its name, the players’ names as typed, bids, hands and scores) is stored on our server so that others can watch it live, in the app or on this website, with the game’s 6-character code. Treat it as public, so use first names or nicknames.
With an account (Sign in with Apple)
Signing in is needed to play online with other people. We then keep:
- An account ID, and the email address Apple shares with us (which can be Apple’s private relay address). We don’t send you email.
- Your display name, which other players see.
- Your online games: seats, bids, cards played and scores; and finished games’ results, your League rating and Game History.
- Your finished games against the computer: the same results, and the bids and cards played, without the players’ names. Games you play signed out stay on your device, unless you sign in from a game’s final scores to keep its result.
- A push notification token, to tell you when it’s your turn.
- Whether you’re online while the app is open, shown to the people you’re playing with.
Apple may share your name when you first sign in. If your first name is up to 8 letters and no one else has it, it becomes your display name, which other players see; you can change it any time in Account.
Purchases
Whist Pro is bought through Apple. We never see your payment details; Apple tells the app only whether your Apple ID owns it.
Camera and photos
The camera is used only to scan a game’s QR code, and nothing it sees is kept or sent. Photos access is used only to save a scoreboard picture when you ask.
What we don’t do
No advertising, no tracking across other apps or websites, no analytics services, and we never sell your data. It is used only to run the games and, for bids and cards played, to study how people play and make the computer players better.
Why we may use it
We use your data to provide the app you’ve asked for: running your games, your account, the League and notifications. Keeping the bids and cards played to make the computer players better is in our legitimate interests; you can object by emailing us.
Where it’s stored
Game and account data is stored with Supabase, in the European Union (Paris). This website is hosted by Vercel. Sign-in, purchases and push notifications are handled by Apple.
These services handle your data only to provide them to us, under data protection terms that protect it at least as well as this policy does.
How long we keep it, and deleting it
Your account data is kept until you delete your account. In the app: Account → Delete Account. That deletes your account, display name, rating, results, Game History, the cards kept from your games against the computer and push token, and you leave any online games you’re in (a computer player takes your seat). Finished games other people played with you stay in their history under the name you had then, without your account.
When the scorekeeper deletes a game kept with real cards, it is no longer shown, but its names, bids and scores stay on our server until you email us to have them removed. You can also email us to ask for a copy of your data, a correction or deletion.
Your rights
You can ask to see, correct, delete or move your data, or object to how it is used. If you’re unhappy with how we handle it, you can complain to the Information Commissioner’s Office (ico.org.uk).
Children
The app is not aimed at children under 13, and we don’t knowingly collect their data.
Changes
If this policy changes, the new version will be posted here with a new date.