Privacy policy
ClapOut is built to need as little of your information as possible. This policy explains what we collect, why, who helps us run the game, and the choices you have.
Who we are
ClapOut, at clapout.app, is a free card game made and run by HAYE CO, a small independent studio. In this policy, "we", "us" and "our" mean HAYE CO, and "the service" means the ClapOut website, the game and its tables. If you have any question about this policy or your information, email us at connect@mikehaye.com.
What we collect and why
You do not need an account to play ClapOut. Here is everything the service handles, and the reason for each.
The name you type
Before you join a table you type a name. It is stored in your browser and sent to the game server so the other players at your table can see who is who. Please do not use your full name or anything you would not want the rest of the table to see.
Your player id and rejoin tokens
The game server gives each browser a random player id, which is kept in your browser's local storage. It is not linked to your real identity; it is how the server knows which Claps wallet is yours. Each table you join also leaves a rejoin token in local storage, so that if you refresh the page or lose your connection you go straight back to your seat.
Your moves and technical data
To run a game, the server receives your moves, your name, your player id, and the technical data any website receives: your IP address, your browser type, and the times of your requests. We need these to deal and referee the game, keep the tables working, and protect the service from abuse. Our server keeps logs of this for operating the service and preventing abuse.
Gameplay and economy events
The server records gameplay and economy events — for example, that a game started, a reward was claimed or a purchase was made. We use these to run the Claps economy correctly and to improve the game. We do not use any third-party analytics scripts.
Your account, if you sign in
Signing in is optional. If you choose to sign in, we store your email address and an account id so your Claps and purchases can follow you to other devices. See Sign-in below.
Purchase records
If you buy something, we keep a record of what was bought and for which player or account. See Payments below.
| What we collect | Why | How long |
|---|---|---|
| The name you type | To show the others at your table who you are | In your browser until you change or clear it; on the server while you play |
| Random player id and per-table rejoin tokens | To keep your Claps wallet and put you back in your seat after a refresh | In your browser until you clear it |
| Moves, IP address, browser type, timestamps | To run the game and keep it secure | Server logs for a limited period |
| Gameplay and economy events | To run the economy and improve the game | As long as needed for those purposes |
| Email address and account id (only if you sign in) | To keep your Claps and purchases across devices | While your account is active; deleted on request |
| Purchase records | To deliver what you bought and for our accounts | As long as accounting and legal obligations require |
Microphone and voice
Clapping into your phone
ClapOut can listen for a real clap, so you can clap at the table instead of tapping. This is optional and only works if you allow your browser to use the microphone. Clap detection runs entirely on your device. The audio it listens to is never sent to us and never stored. Without the microphone you clap with a tap instead, and you can withdraw microphone permission at any time in your browser's settings.
Voice chat
Voice chat at a table is also optional. When you turn your mic on at a table, your voice is streamed live to the other players at that table through a real-time media service, LiveKit. We do not record voice chat. You can mute yourself at any time, and you can mute any other seat for yourself, so you no longer hear them.
Advertising and cookies
ClapOut offers optional rewarded video ads: you tap to watch a short video and receive free Claps. An ad is shown only when you tap to watch one. These ads are served by Google, through Google's ads for web games, which are part of Google AdSense.
When an ad is requested, Google and its partners may use cookies and similar technologies. In particular:
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or to other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings.
- You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info/choices, or, in Europe, at www.youronlinechoices.eu.
To learn more about how Google handles data in its advertising, see How Google uses information from sites or apps that use its services.
If you visit from the European Economic Area, the United Kingdom or Switzerland, Google may show you a consent message asking whether you agree to cookies and personalised ads. You can make your choice there.
ClapOut itself does not set advertising cookies, and we do not use third-party analytics. The game keeps its own small settings in your browser's local storage, described below.
Payments
Claps packs and the Club membership are paid for through Stripe Checkout. You enter your payment details on Stripe's secure checkout page, not on ours. We never see or store your full card number; Stripe processes your payment details under its own privacy policy. We keep a record of what was bought and for which player or account, so we can deliver it, help you with any billing question, and keep our accounts. Stripe sends your receipt.
Sign-in
You can play ClapOut without ever signing in. If you want to keep your Claps and purchases across devices, you can sign in with Google, with Apple, or with a one-time link we email to you. When you do, we store your email address and an account id with our authentication provider, Supabase. If you sign in with Google or Apple, that company handles the sign-in under its own privacy policy and shares with us the email address linked to your account, so we can recognise you next time.
Local storage in your browser
ClapOut uses your browser's local storage — a small store on your own device — rather than cookies to remember things between visits. It holds:
- the name you type;
- your random player id, which keys your Claps wallet;
- a rejoin token for each table, so a refresh puts you back in your seat;
- your mute preference and a few other game settings for this device;
- if you sign in, your sign-in session, so you stay signed in.
You can clear these at any time by clearing this site's data in your browser. If you do, you will get a new player id, and any Claps kept only on the old id without signing in will no longer be reachable from that browser.
Service providers
We use a small number of trusted providers to run ClapOut. Each handles only what it needs to do its job:
- Vercel hosts the website.
- Google Cloud runs the game server.
- Supabase provides accounts and the Claps wallet.
- Stripe processes payments.
- LiveKit carries live voice chat.
- Google serves the optional rewarded ads and provides Google sign-in.
- Apple provides Apple sign-in.
We do not sell your personal information.
How long we keep data
We keep information only as long as we need it. Account data is kept while your account is active and deleted when you ask us. Server logs are kept for a limited period for operating the service and preventing abuse. Purchase records are kept as long as needed for accounting and our legal obligations. What is stored in your browser stays there until you clear it.
Your choices and rights
- Access, correction and deletion. Email connect@mikehaye.com to ask for a copy of the information we hold about you, to correct it, or to delete it. Tell us your player name and, if you signed in, the email address you used, so we can find it.
- Personalised ads. You can opt out at Google Ads Settings, www.aboutads.info/choices or www.youronlinechoices.eu. You can also simply never tap to watch an ad.
- The microphone. Clap detection and voice chat are both optional. Turn your mic off at the table, or withdraw microphone permission in your browser's settings at any time.
- Local storage. Clear this site's data in your browser to remove what ClapOut keeps on your device.
If you live in the EEA or the UK
Data protection law, including the GDPR, gives you rights over your personal information: to access it, to have it corrected or erased, to restrict or object to how it is used, to receive it in a portable form, and to withdraw consent where we rely on it. You also have the right to complain to your local data protection authority. Where required, consent for ads is asked through Google's consent message. To use any of these rights, email us.
If you live in California
California residents have the right to know what personal information we collect and how we use it, to ask us to delete it, and to ask us to correct it, and not to be treated differently for using these rights. We do not sell personal information for money. To make a request, email us.
Children
ClapOut is for a general audience. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Signing in and making purchases are for adults, or for younger players with a parent's permission. If you are a parent and believe your child has given us personal information, contact us at connect@mikehaye.com and we will delete it.
Security
We protect the information we hold with reasonable technical and organisational measures: payment details stay with Stripe, the audio for clap detection never leaves your device, and access to our systems is limited. No service on the Internet can promise perfect security, but we take care with what you trust us with, and we keep as little as we can.
International transfers
Our service providers may process information in countries other than the one you live in, including the United States. Where that happens, we rely on those providers' safeguards for international transfers, as described in their own policies.
Changes to this policy
We may update this policy as ClapOut changes. When we do, we will post the new version on this page and change the effective date at the top. If a change is significant, we will make it clear on the site.
Contact
For any question or request about your privacy, email HAYE CO at connect@mikehaye.com. You can also visit our contact page.