Privacy
Shuffled is anonymous by default. This page says exactly what the site keeps, what it never keeps, which services run it, and how to have anything deleted. Last updated August 24, 2026.
What Shuffled keeps
An identity cookie. The first time you use the site it hands your browser a random identity - a string like usr_3a9f..., tied to nothing about you. It is what lets your streak, finds and achievements exist without an account. This cookie is strictly necessary (the site cannot work without it), lasts one year, renewing while you keep playing, and is never used for tracking or advertising. Your browser also keeps a local copy of the same identity so an accidental cookie wipe does not erase your collection.
Your shuffles. Each daily shuffle - the card order, its fingerprint, and the time it was dealt - is kept permanently. The archive is the product: every future shuffle is measured against every past one.
A city, not a location. When you shuffle, your rough city and country are stored with that shuffle and shown to other players at city level only - "someone in Melbourne", never anything finer, never a username. Nothing more precise is ever kept.
An email, only if you register. Registering is optional and gates nothing. If you register, your address is kept so your collection can be restored on any device. It is never shown to other players. News emails are sent only if you separately opt in, and every one carries an unsubscribe link; the in-app toggle works too.
Anonymous counters. The site counts how often a few of its own doors are used - shares, registrations, support clicks - as bare daily tallies with no identity, no address, and no cookie attached.
Settings in your browser. Preferences like the sound toggle and which notices you have dismissed live in your browser's local storage and never leave it.
What Shuffled never keeps
Your IP address is used for one thing: looking up the city above at the moment you shuffle. It is not stored. There are no tracking cookies, no advertising, no fingerprinting, and no selling or sharing of data with anyone. Visit counts come from Vercel's cookieless analytics, which identifies no one.
The services that run it
Shuffled runs on a small set of processors, each holding only what its job needs:
| Service | Job | What it handles |
|---|---|---|
| Vercel | Serves the site; cookieless visit counts | Standard web traffic |
| Railway | Runs the server and database | Everything in "What Shuffled keeps" |
| Supabase | Sends the registration sign-in links | Your email, if you register |
| ipinfo.io | Turns your IP into a city, once per shuffle | Your IP, transiently; nothing stored |
| Ko-fi | Handles voluntary support | Only what you give Ko-fi on their own site |
How long things are kept
Shuffles stay in the archive permanently - each one is part of every future player's odds. Your identity, collection and (if registered) email are kept until you ask for them to be deleted. The anonymous daily counters hold no one's data and are kept indefinitely.
Deleting your data
Email hello@shuffle.day from the address your collection is registered to (or with your identity string, for anonymous collections) and everything tied to you - identity, email, streak, finds, achievements - will be deleted. Your past shuffles remain in the archive as anonymous decks of cards, no longer connected to anyone.
Contact
For further information or anything else, contact us at hello@shuffle.day.
HOW CLOSE CAN THEY GET?
Deal today's shuffleOne shuffle per day. Compared against every shuffle on Earth.