Skip to content
Cribbage.com » Privacy Policy

Privacy Policy

Last updated: 30.04.2026

Welcome to Cribbage.com (“we”, “us”, “our”). This Privacy Policy explains how Tumes Media Limited collects, uses, discloses, and protects your personal information when you use our website, games, and related services (the “Services”).

By using our Services, you agree to this Privacy Policy.

1. Who We Are The Services are provided by: Tumes Media Limited 49, Bambinella, Triq is-Soll, Santa Venera, SVR1832, Malta

We are the data controller of your personal data under the General Data Protection Regulation (GDPR).

2. Information We Collect We may collect and process the following categories of information:

  • Account Information: username, email address, password, profile settings.
  • Gameplay Information: games played, moves, scores, leaderboards, achievements.
  • Device & Technical Data: IP address, browser type, operating system, device identifiers, cookies.
  • Payment Information: when you make purchases, payment details are processed securely via third-party payment providers (we do not store full card details).
  • Communications: messages or requests you send to us.
  • Cookies & Tracking: information collected through cookies and similar technologies.

3. Facebook Login and Third-Party Authentication If you choose to log in or create an account on Cribbage.com using Facebook Login, we collect and process certain information from your Facebook profile to facilitate this process.

  • Data We Collect: When you connect your Facebook account, we collect your basic profile information as permitted by Facebook and your privacy settings. This includes your Facebook User ID, your name, and your profile picture.
  • How We Use Your Data: We use this information strictly to authenticate your identity, create and manage your game account, support gameplay features (like displaying your name/avatar), and provide customer support.
  • Data Sharing with Third Parties: To manage your game account and provide backend server features, your data (including your Facebook User ID) is securely shared with our backend service provider, PlayFab. PlayFab uses this data solely to manage your account and game progress on our behalf. We do not sell, rent, or share your Facebook data with any other third parties for their own commercial use or marketing.
  • Data Retention: We retain your Facebook login data and associated game progress for as long as your Cribbage.com account remains active, or as long as necessary to provide you with our services.
  • User Data Deletion Instructions: You have the right to request the complete deletion of your account and any associated data (including your Facebook login data). To request data deletion, please email us at [email protected] with the subject line “Data Deletion Request.” We will process your request and permanently remove your data from our servers and PlayFab within 30 days.

4. How We Use Your Information We process your personal data for purposes including:

  • To provide and operate the Services.
  • To create accounts and enable gameplay (including multiplayer and leaderboards).
  • To process payments and manage subscriptions.
  • To personalize the user experience.
  • To send important service updates, support responses, or marketing communications (where permitted).
  • To maintain safety, security, fraud prevention, and compliance.
  • To improve our games and Services through analytics and performance monitoring.

5. Legal Bases for Processing (GDPR) We rely on the following legal grounds under GDPR:

  • Contract: to provide Services you request (e.g. account, gameplay).
  • Consent: for marketing, cookies, or optional features.
  • Legal Obligation: to comply with EU and Maltese law.
  • Legitimate Interests: improving our Services, preventing abuse, ensuring site security, provided these do not override your rights.

6. Sharing Your Information We may share your data with:

  • Service Providers: hosting, payment processors, analytics, support tools.
  • Other Users: e.g. your username, avatar, or leaderboard position in multiplayer games.
  • Legal Authorities: if required by law or to protect our rights.
  • Business Transfers: in case of merger, acquisition, or sale of assets.

We do not sell your personal data.

7. International Transfers As we operate globally, your personal data may be transferred outside the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses.

8. Data Retention We retain your personal information only as long as necessary:

  • For your account to remain active.
  • To comply with legal obligations.
  • To resolve disputes or enforce agreements.

When no longer needed, data will be securely deleted or anonymized.

9. Your Rights (GDPR / EU) As an EU/EEA resident, you have the following rights under GDPR:

  • Access – request a copy of your data.
  • Rectification – correct inaccurate or incomplete data.
  • Erasure (“Right to be Forgotten”) – request deletion of your personal data.
  • Restriction – limit how we process your data.
  • Portability – request transfer of your data in a structured, machine-readable format.
  • Objection – object to processing based on legitimate interests or direct marketing.
  • Withdraw Consent – where processing is based on consent.

You can exercise these rights by contacting us (see Section 15). You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) Malta or your local supervisory authority.

10. Cookies & Tracking We use cookies and similar technologies for:

  • Essential site functionality.
  • Analytics and performance measurement.
  • Remembering your preferences.
  • Marketing (if consented).

You can control cookies via your browser settings or through our cookie banner.

11. Children’s Privacy Our Services are not directed to children under 13 (or under the age of digital consent in your country, usually 16 in the EU). If we discover we have collected personal data from a child without parental consent, we will delete it.

12. Security We implement appropriate technical and organizational measures to protect your data, but no system is completely secure. Please keep your account credentials safe.

13. Additional Rights for California & United States Residents If you are a resident of California or other US states with data privacy laws, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA) and similar laws:

  • Right to Know: You can request disclosure of the categories of personal information we have collected, used, or disclosed in the past 12 months.
  • Right to Access: You can request a copy of the personal information we hold about you.
  • Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale or Sharing: We do not sell your personal information for monetary value. If in the future we share personal information for targeted advertising, you will have the right to opt out.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

You may exercise these rights by contacting us (see Section 15). Authorized agents may also submit requests on your behalf, subject to verification.

14. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date and, if significant changes are made, provide notice through the Services or by email.

15. Contact Us If you have questions, requests, or complaints regarding this Privacy Policy, you can contact us at: Tumes Media Limited 49, Bambinella, Triq is-Soll, Santa Venera, SVR1832, Malta Email: [email protected]