Odd Deck Privacy Policy

Last updated: October 2026

The short version

Odd Deck is where kids make card games starring ducks, watch robots play them, and print them for the kitchen table.

• Your kid's game lives on your device. We don't get it, see it, or keep it.
• We don't collect personal information from kids. No kid accounts, no chat, no typing that gets sent to us, no photos, no ads, no tracking across sites.
• There are no accounts. Nobody has to give us anything to play.
• Grown-ups can choose to leave an email for Odd Deck news, or send us feedback. Unsubscribe whenever you like.
• We never sell anything about anyone. Not even to a duck.

The full version is below. It says the same things, with more words and fewer ducks.

1. Who we are and what this covers

Odd Deck is operated by Curio Studio, LLC, doing business as Odd Deck ("Odd Deck", "we", "us", "our"). This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use the Odd Deck website at odddeck.lovable.app (and odddeck.app, if we publish it there) and any related pages, printed games, and emails (together, the "Service").

Curio Studio, LLC is a Delaware limited liability company.

Odd Deck is made for children and the grown-ups who play with them. We built it so that children can use it without giving us any personal information. If you are a parent or guardian, Section 2 is written for you.

2. Children's privacy (for parents and guardians)

We designed Odd Deck to follow the Children's Online Privacy Protection Act ("COPPA") and the FTC's COPPA Rule. In this section, "child" means a child under 13. Here is exactly how Odd Deck handles children.

What kids can do in Odd Deck: design a game (pick a question, a story, ducks, a deck and rules), watch computer "robots" play it, run experiments in the Game lab, and print it.

What we do not collect from children:

• We do not ask children for their name, email address, phone number, home address, school, photo, voice, or location.
• We do not offer accounts, profiles, chat, messaging, or any way for children to talk to each other or to us.
• The "For grown-ups" area, where people can sign up for news or send feedback, is for people 18 and older. It asks them to confirm that before anything is sent.
• We do not let children post anything publicly.
• We do not use advertising, ad networks, or tracking cookies, and we do not build profiles of children.
• We do not send anything a child makes or types to artificial-intelligence (AI) services. The robots that play-test games are simple, fixed rules running in your browser, not AI.

Where a child's game lives: on the device. A child can type a game name, a "Made by" name, and duck names. These are saved only in the browser's storage on that device. They are not sent to us.

Saving and moving a game:

• Save to file: downloads the game as a file to your device. We don't receive a copy.
• QR code and link:
  • When a game is finished, Odd Deck shows a QR code and a link that hold the game.
  • You can copy the link, or send it with your own device's share or email app. Odd Deck doesn't send it anywhere.
  • The game is stored inside the part of the link after the "#" sign. Web browsers do not send that part to our servers. Odd Deck also removes it from the address bar as soon as the game opens. So opening a saved game does not send the game to us.
  • Anyone who has the code or link can open that game, so treat it like the game itself.
• You can delete everything Odd Deck has saved on a device by clearing the site's data in your browser settings.

Technical information that every website receives:

• When any device loads a website, the website's host receives technical information such as the device's IP address, browser type, the page requested, and the time.
• Our host is Lovable, which runs on Cloudflare's network.
• Our host counts visits in total, so we can see whether people are using Odd Deck: the number of visits and pages viewed, how long visits last, the website that sent the visitor, device type (phone or computer) and country. It doesn't use cookies for this, doesn't build profiles, and doesn't track anyone across visits or sites. We see only the totals.
• We also count downloads in total. When someone saves a duck picture or downloads a sample deck, we record which one it was and whether it's the first, second or later download from that browser. That running number stays in the browser itself; we don't receive any name, email, ID or IP address with it.
• We don't use our host's error monitoring, so no error reports are collected.
• When someone sends a grown-up form, we keep a scrambled (hashed) form of their IP address for 24 hours, only to stop spam by limiting repeated tries.
• COPPA treats some of this, such as an IP address, as personal information. We and our host use it only to support the internal operations of the Service:
  • delivering the pages;
  • keeping the Service secure and preventing abuse;
  • finding and fixing errors;
  • counting visits in total.
• We do not use it to contact a child, to build a profile about any person, to show advertising, or for any other purpose. We don't combine it with any other information, and we don't use it to identify anyone. Our host keeps its own logs under its privacy policy (Section 8). COPPA allows this limited use without parental consent.

If we learn we collected a child's information by mistake: if we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. For example, this could happen if a child used a grown-up form or emailed us.

Your rights as a parent: you can ask us at any time:

• what personal information we have about your child, if any;
• to delete it;
• to stop any further collection or use.

Contact us using Section 13. We will verify that you are the child's parent before sharing anything.

If this changes: before Odd Deck ever collects personal information from children, we will update this policy and get verifiable parental consent first. For example, that would happen if we add family accounts that save games on our servers.

3. Information we collect from grown-ups

Information you give us: only what you choose to send us.

• Odd Deck news (optional). If you sign up in the For grown-ups area, we store:
  • your email address;
  • that you confirmed you're 18 or older and asked for Odd Deck news;
  • when you signed up.
• Feedback (optional). If you send feedback, we store:
  • your message;
  • your email address, if you choose to give one for a reply;
  • that you confirmed you're 18 or older.
  • Feedback doesn't sign you up for news. Please don't include a child's name or details in it.
• Messages you send us: if you email us (for example, with feedback, questions, or a request about your information), we keep the message so we can respond.

Information collected automatically: the same technical information described in Section 2, used in the same limited ways.

Cookies and device storage: Odd Deck uses no advertising, analytics or tracking cookies, so there's nothing to accept or decline. Here is everything it stores in your browser:

You can clear the device storage with the "clear this device" button in the For grown-ups area, or in your browser settings. If we ever want to add a cookie that isn't needed to run the site, we will update this policy and ask first.

Do Not Track and Global Privacy Control: we don't track people across sites, so these browser signals don't change anything here. If that ever changes, we will honor them.

4. How we use information

We use the information described above only to:

• provide and run the Service, including delivering pages and printing games;
• send Odd Deck news to grown-ups who signed up for it;
• read your feedback and, if you gave an email, reply to it;
• stop spam on the grown-up forms;
• keep the Service secure, prevent abuse, and fix errors;
• see, in total, how many people visit and which pages they use, so we can improve Odd Deck;
• respond to you;
• comply with the law.

We do not:

• sell personal information;
• "share" it for cross-context behavioral advertising;
• use it for targeted advertising;
• use any information from children for any purpose other than supporting the internal operations of the Service, as described in Section 2.

5. How we share information

We use a small number of service providers to run Odd Deck. They may handle information only to provide their service to us, and they are bound by confidentiality and data-protection obligations:

• Lovable (on Cloudflare's network): website hosting and visit totals.
• Supabase, through Lovable Cloud: the database that stores news sign-ups, feedback, and the short-lived anti-spam records.

Lovable processes visitor information to deliver and protect the site. Under its own privacy policy, it may also keep its own logs and use de-identified or aggregated data for security and to improve its services. Lovable says it does not use this information to train AI models and does not share it with advertisers. See Lovable's privacy policy.

No other service receives information about you from Odd Deck. We don't keep user accounts or profiles.

We may also disclose information:

• if required by law or legal process;
• to protect the safety, rights, or property of our users, the public, or Odd Deck;
• as part of a merger, acquisition, or sale of assets. If that happens, we will notify you, and this policy (including the promise not to collect from children without consent) will continue to apply to information collected under it.

We do not disclose children's personal information to third parties. If that ever changes, we will ask parents for separate consent first, as the COPPA Rule requires.

6. Emails from us

• We send Odd Deck news only to grown-ups who signed up for it.
• Every news email includes our mailing address and a way to unsubscribe. You can also unsubscribe any time by emailing hello@odddeck.app.
• We reply to feedback only if you gave us an email address for that.
• We don't sell, rent or share our mailing list.

7. Your choices and rights

Anyone can ask us to:

• tell you what personal information we have about you;
• correct it;
• delete it;
• send you a copy;
• stop emailing you.

Email us (Section 13). We respond within 30 days, and we honor these requests whatever state or country you live in. We will not treat you differently for making a request.

Some laws give additional rights. Examples are the California Consumer Privacy Act and similar laws in other U.S. states, and the GDPR if you're in the European Economic Area or the UK. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you.

If you're in the EEA or UK:

• We rely on your consent for Odd Deck news.
• We rely on our legitimate interest in running and securing the Service, stopping spam, and answering your messages and feedback.

On your device: to delete games and settings, clear the site's data in your browser settings.

8. How long we keep information (data retention)

9. Security

• We use reasonable technical and organizational measures to protect information, including encryption in transit and limited access.
• Because games stay on your device, most of what Odd Deck holds about you is held by you.
• No method of transmission or storage is 100% secure.
• If you find a security issue, please tell us (Section 13).

The Service is operated from the United States. If you use it from elsewhere, any information we receive is processed in the U.S.

10. Accounts

• Odd Deck has no accounts. You never need to sign up to make, save, print, or reopen a game. Signing up for news doesn't create an account.
• In the future we may offer optional grown-up accounts or paid features. Before we do, we will update this policy.
• Before any account stores anything a child made, we will also ask for your verifiable consent as a parent.

11. Links to other sites

Odd Deck may link to other websites, such as a printing service or a game we like. Their privacy practices are their own, and we encourage you to read their policies.

12. Changes to this policy

• We may update this policy. The "Last updated" date shows the latest version.
• If we make a material change, we will post a notice on the Service.
• We will never begin collecting personal information from children without first updating this policy and getting verifiable parental consent.

13. Contact us

Curio Studio, LLC, d/b/a Odd Deck

• Mailing address: 123 2nd Ave S, Suite 230 #52, Edmonds, WA 98020
• Email: privacy@odddeck.app