Privacy policy
Heist (playheist.net) · Last updated October 19, 2026
The short version
Heist is a free online social card game played with play-money chips. To run the game smoothly, prevent fraud or cheating, and improve the gameplay, we record gameplay activity. We never sell your personal data, we never show banner ads, and we never see or store your password or credit card numbers.
What we collect
- Your account: Your chosen display name, your email address if you register one, and the date you joined. Passwords are encrypted as a secure one-way hash which cannot be read back by anyone.
- Your gameplay progress: Chips, coins, XP, level, unlocked cosmetic items, career win/loss statistics, skill ratings, and season milestones.
- In-game activity: Decisions made during hands, tables joined, pack openings, drinks sent, cosmetic purchases, and chat messages (monitored solely for player safety and anti-harassment).
- Technical telemetry: IP address, device platform, and timestamps used for server stability, anti-abuse, and network diagnostics.
Cookies & Local Storage
Heist uses modern web storage techniques rather than invasive tracking:
- Essential Local Storage: We use your browser's
localStorageandsessionStorageto keep you signed in, remember your sound preferences, preserve current table state, and store your cookie consent preference. - Anonymous Telemetry & Analytics: We use Google Analytics, Google Tag and the Meta Pixel to measure anonymous technical metrics (such as page load speeds, active gameplay milestones, and conversion effectiveness). These tools set standard first-party measurement cookies.
You can manage, block, or clear cookies and local storage at any time through your browser's privacy settings.
Third-Party Service Providers
We work with trusted third-party infrastructure providers to operate the game safely:
- Cloud Hosting: Render (render.com) hosts our encrypted servers and game database.
- Secure Payment Processing: Stripe (stripe.com) handles all payment transactions for optional Coin & Chip Stashes and VIP passes. All transactions are encrypted through Stripe's certified PCI-DSS Level 1 systems. Heist never sees, processes, or stores your credit card number.
- Performance & Measurement: Google Tag / Google Ads (google.com) for aggregated campaign performance and gameplay milestone tracking.
- Ad Measurement: Meta Pixel (facebook.com) tells us when someone who tapped one of our Facebook or Instagram ads arrives, starts a game or signs up, so we can measure those ads.
We do not sell, rent, or monetize your personal data to any third-party data broker or ad exchange.
Data Retention & Your Choices
- Instant Account Deletion: You can permanently delete your account and all associated data at any time directly in the game under Profile › Account › Delete Account.
- Data Requests: To request a full export of your profile data or request manual erasure, email support@playheist.net.
Children's Privacy (COPPA)
Heist is designed for players aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal data to us, please notify us at support@playheist.net and we will promptly delete it.
Changes
If our privacy practices change, we will update the date at the top of this policy. For questions or privacy inquiries, contact us at: support@playheist.net.