Last Updated: 01 July 2023.
We at Cards Against Humanity (“Company”, “Us” or “We”) respect your privacy and are committed to protecting it through our compliance with this policy.
Cards Against Humanity and its Affiliated Entities (as defined below) collectively own, operate, and maintain cardsagainsthumanity.com, store.cardsagainsthumanity.com, and lab.cardsagainsthumanity.com (our “Websites”) and all of the various pages contained therein, including subdomains, and the related products and services, whether provided through a website owned, maintained, or controlled by us, through a social network, a mobile application, on a cellular telephone, or otherwise.
Cards Against Humanity includes Cards Against Humanity, LLC and its trustees, directors, officers, shareholders, members, employees, contractors, advisors, representatives, subcontractors, consultants, attorneys, agents, suppliers, distributors, licensees and licensors (current and past), and any affiliates, individually and collectively, and any related individuals or entities. Affiliated Parties means Cards Against Humanity, LLC and any related individuals, affiliates, and subsidiaries, and any of their trustees, directors, officers, shareholders, members, employees, representatives, consultants, attorneys, agents, suppliers, distributors, licensees, and/or licensors.
Cards Against Humanity provides the Websites to you subject to the following Policy, which you acknowledge, agree to, and consent to by using the Websites.
This Policy applies to information we collect:
- On the Websites.
- In e-mail, text, and other electronic messages between you and the Websites.
- When you interact with our advertising on third-party websites and services, if the advertising includes links to this policy.
It does not apply to information collected by:
- Us offline; or
- Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from the Websites.
You also represent that you are at least 13 years old and not a person barred from receiving services under the laws of the United States or other applicable jurisdictions.
1. California Residents
If you are a California resident and are under 18 years of age, you may request and obtain removal of postings on the Websites that you yourself post by e-mailing us at email@example.com. All requests must be labeled "California Removal Request" on the e-mail subject line. All requests must provide a description of the content or information in your posting that you want removed and information reasonably sufficient to permit us to locate the material, and include the name and URL (if applicable) of the website, application, or other interactive service. We shall not accept requests via postal mail, telephone, or facsimile.
2. Children’s Privacy
By using our Websites, you represent that you are at least 13 years old. The Websites are not directed toward children under 13 years of age, nor do we knowingly collect information about children under 13. If you are under 13 years of age, you are not permitted to submit any personally identifiable information (“PII”) to us, including your name, address, telephone number, e-mail address, or any screen name or user name you may use. If we learn we have collected or received PII from a child under 13 without verification of parental consent, we will delete it immediately. If a parent or guardian becomes aware that any of their children has submitted PII to us, please immediately notify us at firstname.lastname@example.org.
3. Information We Collect About You and How We Collect It
We collect several types of information from and about users of our Websites:
Identifiers: We may collect your e-mail, real name, nickname, e-mail address, telephone number; and date of birth, country of birth, and state of birth (if in the U.S.) to identify you and for research purposes to make our products better and to effectuate Webstore sales. This information is collected directly from you during your registration with our Websites. We do not sell or share this information with any third party.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): We collect your name, address, and education to identify you and for gameplay analytics purposes. This information is collected directly from you during your registration with our Websites. We do not sell or share this information with any third party.
Protected classification characteristics and sensitive personal information: We collect information about your race/ethnicity, religion or creed, sex, sexual orientation (including gender, gender identity, and gender expression) and political views for gameplay analytics purposes. This information is collected directly from you during your registration with our Services. We do not sell or share this information with any third party.
Commercial Information: We collect purchaser e-mail and payment method, for internal reporting and billing. This information is collected from you and automatically during your interaction with our Websites. We do not sell or share this information with any third party.
Internet or other similar network activity: When you use our Websites we may collect and store your Internet Protocol address, browser, device type, and device operation system for compatibility, tech support, and analytics. We do not sell or share this information with any third party.
“Share” or “sell” means the sale of your personal information to an outside party for monetary or other valuable consideration, subject to certain exceptions as provided by the applicable privacy laws. We do not sell or share your information for monetary consideration. However, we may share information that we collect in the Lab (lab.cardsagainsthumanity.com) with academic researchers. For more information please see Section 5 (Disclosure of Your Information).
We collect this information:
- Directly from you when you provide it to us.
- Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies.
Information You Provide to Us
The information we collect on or through our Websites may include:
- Information that you provide by filling in forms on our Websites. This includes information you provide at the time of setting up an account and/or making a purchase. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with our Websites or express concerns about our products.
- Records and copies of your correspondence (including e-mail addresses), if you contact us.
- Your responses to surveys that we might ask you to complete for research purposes. This includes information provided through the demographics form (“Demographics Form”) in the Lab at https://lab.cardsagainsthumanity.com/. All information collected through the Demographics Form is used internally to create more enjoyable games or for academic research purposes.
- Details of transactions you carry out through our Websites and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Websites.
- Your search queries on the Websites.
Information We Collect Through Automatic Data Collection Technologies
As you navigate through and interact with our Websites, we may use automatic data-collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
- Details of your visits to our Websites, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
- Information about your computer and internet connection, including your IP address, operating system, and browser type.
- Gameplay data, meaning data on your interaction with the game when you play in the Lab at https://lab.cardsagainsthumanity.com/.
Some browsers have a “do not track” feature that lets you tell those websites you do not want to have your online activities tracked. At this time, we do not respond to browser “do not track” signals. Except as described below, no other third party conducts tracking or analytics on our site.
The information we collect automatically does not include PII, but we may maintain or associate that information with PII we collect in other ways. Doing so helps us to improve our Websites and to deliver a better and more personalized service, including by enabling us to:
- Estimate our audience size and usage patterns.
- Store information about your preferences, allowing us to customize our Websites according to your individual interests.
- Recognize you when you return to our Websites.
The technologies we use for this automatic data collection may include “cookies.” Cookies are files with small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your computer’s hard drive. Like many sites, we use “cookies” to recognize your logged-in state on our website, to understand what Services you are interested in, to make our Websites function for you, and to help your browsing experience and use of the Websites and our Services feel more customized. You may be able to instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Websites. You can obtain more information about cookies at http://www.allaboutcookies.org/.
We may also use web beacons, pixel tags, and similar software, which are invisible graphics on a web page or e-mail that are programmed to collect non-PII about the use of a given website or newsletter, such as whether or not an e-mail is opened and viewed.
We use the following Google Analytics Advertising Features:
- Google Display Network Impression Reporting.
- Integrated services that require Google Analytics to collect data via advertising cookies and anonymous identifiers.
You can opt-out of the Google Analytics Advertising Features here: https://tools.google.com/dlpage/gaoptout/. You can also opt-out through any other available means.
You can read more at the Google Analytics Privacy Overview: https://policies.google.com/technologies/partner-sites
We do not control these third parties' tracking technologies nor how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
4. How We Use Your Information
We use the information we collect about you or that you provide to us, including any PII:
- To present our Websites and their contents to you.
- To provide the products and services you request.
- To deliver and track shipments.
- To provide customer support, and respond to your requests, questions, and comments pertaining to your purchase.
- To process returns and refunds.
- To perform data analyses (including geographic distribution of shipments, or financial analysis).
- To conduct research and analysis to improve our products.
- To protect against, identify, and prevent fraud and other criminal activity.
- To comply with applicable legal requirements.
- To fulfill any other purpose for which you provide the information.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
- To notify you about changes to our Websites or any products or services we offer or provide through it.
- In any other way we may describe when you provide the information.
- For any other purpose with your consent.
5. Disclosure of Your Information
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
- To our subsidiaries and affiliates.
- To contractors, service providers, and other third parties we use to support our business (e.g., payment processors and courier services) and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
- To a buyer or other successor in interest in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Cards Against Humanity’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which PII held by Cards Against Humanity about our Websites’ users is among the assets transferred.
- To fulfill the purpose for which you provide the information.
- For any other purpose disclosed by us when you provide the information.
- With your consent.
We may also disclose your personal information:
- To notify you about any changes in or to our Websites or other products or services;
- To fulfill our legal obligations or to otherwise contact you;
- To fulfill our legal obligations and respond to any claims, litigation and/or law enforcement or other government inquiry;
- To deliver products and services to you and to improve the design and performance of the Websites. We may also use your information to deliver to you, among other things, communications, e-mails, and marketing materials from us and third parties as you request them or which we feel may interest you, where you have consented to be contacted for such purposes;
- To ensure that our Websites, products, and services are presented to you in the most efficient manner for you and us and to improve the design and performance of the Websites;
- To administer our Websites and keep them safe and secure, and for internal operations, including research, statistics, troubleshooting, detection/prevention/addressing any potential credit risks/fraud prevention, data analysis, testing, security, survey, and similar purposes;
- To share the data we hold with third-party service providers, including credit card processors, auditors, other service providers, and academic researchers for industry research and development, demographic profiling, and other similar purposes;
- To disclose as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to protect our operations or those of any of our Affiliated Parties; (c) to protect our rights, privacy, safety, or property, or that belongs to you or others; or (d) to allow us to pursue available remedies or limit the damages that we may sustain; and/or
You must notify us immediately of any suspected or actual unauthorized use of your customer information, and of any and all other security breaches.
6. Choices About How We Use and Disclose Your Information
Opting Out of Cross-Context Behavioral Advertising or “Sales” of your Information.
Under the laws of certain U.S. states, you may have the right to opt out of our processing or sharing of your information for online cross-context behavioral advertising purposes. Note that certain state laws also allow you to opt out of the “sale” of your information to third parties in exchange for valuable consideration.
We strive to provide you with choices regarding the PII you provide to us. You have the right to ask us not to process your personal data for marketing purposes. If you have signed up for our e-mail list and later decide you don’t want to receive any more e-mails from us, you have the choice at any time to withdraw your consent for us to contact you by using the “unsubscribe” function in our e-mail messages, or by contacting us via e-mail at email@example.com, or by postal mail at: Cards Against Humanity Customer Service, PO Box 316620, Chicago, IL, 60631, USA.
You also have the choice to do the following at any time by contacting us via the e-mail or postal address above:
Your rights. The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, effective January 1, 2023 (“CPRA”) and some other state privacy laws provide consumers with specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights.
1. Right To Know What Information We Collect, With Whom We Share Your Information, And The Right To Data Portability: You may request that we disclose to you the categories of personal information we collect about you, the categories of sources from which we collected that personal information, the categories of personal information we sold or disclosed, our business or commercial purposes for collecting and selling such personal information, the categories of third parties with whom we shared such personal information, and the specific pieces of personal information we collected about you over the past 12 months.
2. Right To Request Deletion Of Your Information: You may request we delete some or all of the personal information we maintain about you, subject to certain exceptions. If we cannot delete your personal information, we will give you a reason why we cannot do so. For security reasons, you or your authorized agent may be asked to verify your/their identity. Note that some personal data may be retained as permitted by law (e.g., to comply with legal obligations, to prevent fraud). We will delete or deidentify personal information not subject to certain exceptions from our records and will direct our service providers to take similar action.
4. Right to Correct Inaccurate Personal Information: Taking into account the nature of the personal information and the purposes of the processing, this right provides an individual with the ability to seek to correct or update personal data that individual considers that we hold about that individual.
5. Right to Limit Use of Sensitive Information: This right is limited to sensitive personal information used for the purpose of inferring characteristics about an individual. We do not collect sensitive personal information nor do we use sensitive personal information for the purpose of inferring characteristics about an individual, therefore we do not offer a path to exercise this right.
6. Right of Non-Discrimination and Non-Retaliation: This right prohibits (a) denying an individual access to or use of goods and services, (b) charging different prices or rates for those goods and services, and/or (c) providing a different level or quality of those goods or services, as a result of the individual exercising any right under any data protection and privacy laws and/or regulations. We will not discriminate against you because you made any of these requests. We will not: (i) deny you goods or services; (ii) charge you different prices or rates for those goods or services, including through granting discounts or other benefits, or imposing penalties; (iii) provide you a different level or quality of our goods or services, or (iv) suggest that you may receive a different price or rate for our goods or services or a different level or quality of our goods or services.
In addition to the rights that are available to residents of California, other state privacy laws may guarantee the rights to:
- Opt out of the processing of your personal data for the purposes of targeted advertising and for profiling in furtherance of decisions—including, for residents of Connecticut, solely automated decisions—that produce legal or similarly significant effects; and
- Appeal any decision or indecision related to the exercise of any right the consumer is granted under the applicable state law.
If you would like to exercise any of these rights (including the right to appeal), please contact us by e-mailing us at: firstname.lastname@example.org, or via postal mail at PO Box 316620, Chicago, IL 60631, or via phone at (800) 942-4410.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, to process transactions and facilitate customer requests, and/or to protect against fraud and other misuse of our Websites. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information. In some locations, you may designate an authorized agent to make a request on your behalf. When submitting such a request, please ensure you have adequately identified and authorized anyone acting on your behalf.
Shine the Light. California's “Shine the Light” law (Civil Code Section § 1798.83) permits users of our App who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an e-mail to email@example.com or write us at: Cards Against Humanity Legal Department, PO Box 316620, Chicago, IL 60631.
Response Timing and Format. We will confirm receipt of your request to know, correct, delete, and/or seek any request under the relevant U.S. state privacy law(s) within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at firstname.lastname@example.org. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of receipt. If we require more time (up to another 45 days), we will timely inform you of the reason(s) and extension period in writing. We may choose to verify your identity before responding to any such request.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
7. Data Security and Storage
We store your information primarily in the United States. Some information may be stored elsewhere. You authorize us to do so. The PII and other data we collect about you and your use of our Websites may be maintained in servers we control and maintain or in third-party servers. The information you provide may be transferred or accessed by entities in many different countries as described elsewhere in this Policy. By submitting your information, you agree to the transfer, storage, and processing of your data in accord with this Policy.
We have technical, administrative, and physical safeguards in place to help protect against unauthorized access to, use, and disclosure of PII and other information we maintain. Access to this information is authorized only for those who have a business need for such access.
We will do our best to keep the PII data we maintain secure. However, no program is totally secure. Therefore, we cannot guarantee that our safeguards will prevent every attempt at unauthorized access or use, or the disclosure of any PII. If you become aware of a security breach, please notify us immediately at email@example.com.
9. Laws in Other Countries
We comply with United States privacy laws and regulations. We do not represent our Websites are governed by, or operated in accordance with, the laws of other nations or jurisdictions, or that the Websites or any portion of them are appropriate or available for use in any particular location. If you choose to access our Websites, you do so at your own risk, and you are responsible for complying with all local laws, rules, and regulations. By using the Websites, visitors to the Websites from outside the United States acknowledge and agree that our Websites are subject to United States laws and regulations, and waive any claims against us that may arise under their own national laws.
10. Vermont Residents
The information practices described above comply with U.S. federal law. Vermont law places additional limits on the sharing of your PII. In accordance with Vermont law, we will not disclose information we collect about Vermont residents to unaffiliated companies except as permitted by law, such as with the authorization or consent of the Vermont resident.
12. Contact Information