Privacy policy

1. What we collect and why

Card sets you make

Your words, titles, and settings are processed in your browser to preview cards and build PDFs. PDFs are created on your device and aren't uploaded to us.

When you use Copy link, most sets are packed into the link itself, after the "#" symbol. That part of a link is not sent to our servers when the link is opened. Anyone you share the link with can see the list inside it.

Short links

If a list is too long for a normal link, or when a caller sheet (the printed list of calls) QR code is created, we save the set on our servers and give you a short link. We store the set data (your words, title, and settings), when the link was created and last opened, and a scrambled (hashed) version of a private delete key. Short links are deleted automatically after 400 days without being opened. You can delete one sooner with the Delete saved link button on the device that created it, or by contacting us with the link.

Games with join links

When a host creates a join link, we store the game on our servers so players can get cards: the game code, the card set (words, title, and settings), the host's settings (card limit, printed cards, late joining), and a scrambled (hashed) version of the host's private key. When a player joins, we store their card number, the first name or nickname they chose to enter (optional unless the game's host requires one; shown to the host and, if they win, on the winners list other players in the game can see), and scrambled versions of their private device key and recovery code. Players on a waitlist are stored the same way. When a player presses BINGO, we store the claim (card number, the player's first name if given, and whether the host has checked it) so the host can check the card and the player can see the result. If the host turns on auto-mark, we also store the items called so far and the round, the server checks claims automatically, and players' phones check for new calls every few seconds while the game is on screen. When the host ends a game, we store a short recap (the game title, number of rounds and calls, and each round's winner name, pattern, and prize) so players see a thank-you screen. Games and everything in them are deleted automatically 48 hours after the last activity. When the host plays another game with the same join link, the finished game's results (its summary, calls, cards and number of players) are kept for up to 48 hours more, so the host can still make a recap page for it; then they're deleted.

Recap pages

After a game with a join link ends, its host can make a recap page to share the results. There's no page unless the host makes one. Before anything is public, the host sees exactly what the page will show and chooses the title on the page; whether winners appear by first name (off by default, so winners show by card number; when it's on, only the first word of each name); whether the list of calls appears (in a word game, the calls are the host's own words); and whether everyone who played sees a link to it on their Thanks for playing screen. The page shows the title, the date, how many rounds and calls there were, how many played on phones, how long the game ran, each round's pattern, winners and prize, and, if the host chose, the calls and the items that never came up. It never shows the game code, invite link, QR code, host link, or any other player's name. Anyone with the page's link can see it. The link is random and can't be guessed, and search engines are told not to list the page. We store the page's content, when it was made, and a scrambled (hashed) version of a private delete key that stays on the host's device. The page is deleted 30 days after it's made, or sooner if the host deletes it or you contact us with its link; after that, the link says the page is gone.

Host links

The host link shown when you host a game contains your card set and, once you create a join link or save a game code, a private key. You can copy it, open it in your own email app, or ask us to email it to you. Anyone who has the host link can control that game, so keep it private.

Emails we send

We send email only when a host asks, and only two kinds. We never send marketing, and we never add your address to a list.

Your host link. If you type your email address under your host link and confirm it, we send that one email: your host link and game code. We don't keep the address (our email provider does, in its delivery logs: see below). We keep only a scrambled (keyed, one-way) fingerprint of it, to count emails for the limits below: the daily count is deleted within two days, and the count for each game is deleted with the game.

A reminder the day before. For a game code saved for a later date, a host can ask for one reminder the day before. We first email the address a confirmation link, and send nothing more unless it's confirmed within 48 hours. Until the reminder is sent we store the address encrypted, with the host link and game code it will contain, the game's date, a fingerprint of the address, and the recipient's time-zone offset from UTC (a number such as minus 5 hours, sent by their browser when they confirm, so the email arrives about 10 am their time). We delete the address and the offset as soon as the reminder is sent; if it isn't confirmed within 48 hours; if the host removes the reminder or the person cancels it with the link in the confirmation email; if the game has already been started when the reminder is due; or if the saved code expires. At the latest we delete them the day after the game's date. Afterwards we keep only whether the reminder was sent or couldn't be sent (no address), so the host can see it, until the saved code expires.

The copy we don't control. Emails are delivered by Resend, our email provider. Resend receives the address and the whole email (including the host link in it) to deliver it, and keeps delivery logs containing them under its own retention policy. Those logs stay after we delete our copy: wherever this policy says we delete an address, it means our copy, not Resend's. Replies to our emails reach us at bingo@bingocardmakerfree.com.

Saved game codes

A host can save a game code before the game, to put on invitations. We store the six-character code, when it was saved, and the event date if the host enters one. The event date is optional and entered by the host; it's the only new information this feature collects. We also store a scrambled (hashed) version of the private key in the host's saved-code link, so that link can reopen the code. Saved codes are deleted 32 days after they're saved, and saved-code host links after 90 days.

Hosting a game on your device

The bingo caller keeps the called numbers, rounds, winners, and your caller settings in your browser's storage on your device so a refresh doesn't lose your game. Winner names you type stay on your device, except in a game with a join link: when you end that game, the winner names and prizes are stored with the game for 48 hours so players see them on the thank-you screen. Winner certificates and calendar reminders are created on your device and aren't uploaded.

Abuse prevention

To stop abuse, we count how many short links and games are created, how many join requests are made, and how many emails are sent, from each connection per hour. We store a hashed (scrambled) version of the IP address with the count, not the address itself, and delete these counts within about a day. For emails we also count, using the fingerprints described above, how many different addresses each game has emailed and how many emails each address has received that day.

Analytics

We use Google Analytics 4 to learn which pages and features are used, such as how many cards are downloaded, which card types are popular, and whether visitors arrive from search engines or AI assistants. Google Analytics collects information like pages viewed, approximate location, device and browser type, and referring site. Our events include settings and counts (for example, "5 × 5 word cards, 30 cards") and never include your word lists, titles, or links.

Bingo Caller Chrome extension

Our Bingo Caller extension for Google Chrome works entirely in your browser. It doesn't collect, send, or sell any personal information, and it has no analytics or ads. Your current game and settings (such as the number range and read-aloud choice) are saved only in the extension's storage on your device. Read-aloud uses your browser's built-in voices. Links in the extension open this website, where this privacy policy applies.

Hosting

The site is hosted by Netlify, which processes IP addresses and request details to deliver pages and protect against attacks. Our fonts are served from our own site, so loading them doesn't send your information to a font provider.

2. Cookies and choices

We use Google Consent Mode. For visitors in the European Economic Area, the United Kingdom (including the Crown Dependencies and Gibraltar), and Switzerland, analytics and advertising storage start switched off. Visitors in European time zones see a banner to accept or reject, and anyone can change their choice at any time with Privacy choices at the bottom of every page. When storage is switched off, Google may still receive limited information without cookies, such as that a page was viewed.

Elsewhere, analytics is on by default and you can turn it off with Privacy choices.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising storage and ad personalization, and we switch those off automatically.

The site also saves a few settings in your browser's storage on your device: your cookie choice, light or dark mode, paper size, your recent sets, delete keys for short links you created, whether you dismissed the bookmark tip, your current bingo caller game and settings (including breaks and winners), the private key for a game you're hosting, the recap pages you made and their delete keys, your marker style and color for phone cards, your card, recovery code, marked squares, and round number for games you've joined, which of your wins your phone has already celebrated, whether read-aloud is on for your phone card, your 90-ball ticket settings, and, for the current visit only, whether you arrived from an AI assistant. You can clear these by clearing your browser's site data.

3. Advertising

The site does not show ads yet. We plan to add ads to support the free tool. Before ads go live, we will update this policy to explain the advertising partners involved, the data they use, and your choices, including how to opt out of personalized ads.

4. Sharing

We don't sell your personal information. We share information only with service providers that run the site (Netlify for hosting and storage, Resend for the emails a host asks for, and Google for analytics), when required by law, or to protect the site and its users.

5. Children

Bingo Card Maker Free is a tool for adults, including teachers and parents who make cards for children. It is not directed at children under 13, and we don't knowingly collect personal information from them. Please don't put children's personal details, like full names, in lists you save as short links. When students join a game, a first name or nickname is enough, and it's optional unless the host asks for one.

6. Your rights

Depending on where you live, including the EEA, the UK, and several US states and Canadian provinces, you may have the right to access, correct, or delete personal information, to object to or limit certain uses, and to withdraw consent. Because we don't have accounts, we hold very little that identifies you. To make a request, contact us. We may need a short link or other details to find the information you're asking about.

7. How long we keep information

• Short links: until deleted, or 400 days after they were last opened.
• Games with join links, including player names and card numbers: 48 hours after the last activity.
• Saved game codes: the six-character code and the optional event date the host entered, kept 32 days, then deleted.
• Host links: kept 90 days when no game has been attached.
• An email address you ask us to send your host link to: not kept by us. Its fingerprint, for the email limits: about two days, or as long as the game for the per-game count.
• An email address for a reminder, with its time-zone offset: encrypted, until the reminder is sent, cancelled, or not confirmed within 48 hours, and never past the day after the game.
• Emails we send, including the address and the host link: in Resend's delivery logs, under Resend's retention policy, after we've deleted our copy.
• Recap pages: 30 days after they're made, or until the host deletes them.
• Hashed abuse-prevention counts: about one day.
• Analytics data: according to the retention setting in our Google Analytics account.
• Settings in your browser: until you clear them.

8. Changes and contact

We'll update this policy when our practices change, such as before ads are added, and change the effective date above. Questions? Email bingo@bingocardmakerfree.com or visit our contact page.