Privacy Policy

Last Updated: 01 July 2023.

We at Cards Against Humanity (“Company”, “Us” or “We”) respect your privacy and are committed to protecting it through our compliance with this policy.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our websites, as well as our practices for collecting, using, maintaining, protecting, and disclosing that information.

Cards Against Humanity and its Affiliated Entities (as defined below) collectively own, operate, and maintain cardsagainsthumanity.com, store.cardsagainsthumanity.com, and lab.cardsagainsthumanity.com (our “Websites”) and all of the various pages contained therein, including subdomains, and the related products and services, whether provided through a website owned, maintained, or controlled by us, through a social network, a mobile application, on a cellular telephone, or otherwise.

This Privacy Policy (“Policy”) is an agreement between You and Us. It is governed by and incorporated by reference into the Terms of Use available here, and should be interpreted consistent therewith.

Cards Against Humanity includes Cards Against Humanity, LLC and its trustees, directors, officers, shareholders, members, employees, contractors, advisors, representatives, subcontractors, consultants, attorneys, agents, suppliers, distributors, licensees and licensors (current and past), and any affiliates, individually and collectively, and any related individuals or entities. Affiliated Parties means Cards Against Humanity, LLC and any related individuals, affiliates, and subsidiaries, and any of their trustees, directors, officers, shareholders, members, employees, representatives, consultants, attorneys, agents, suppliers, distributors, licensees, and/or licensors.

Cards Against Humanity provides the Websites to you subject to the following Policy, which you acknowledge, agree to, and consent to by using the Websites.

This Policy applies to information we collect:

• On the Websites.
• In e-mail, text, and other electronic messages between you and the Websites.
• When you interact with our advertising on third-party websites and services, if the advertising includes links to this policy.

It does not apply to information collected by:

• Us offline; or
• Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from the Websites.

PLEASE READ THIS POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES REGARDING YOUR INFORMATION AND HOW WE WILL TREAT IT. IF YOU DO NOT AGREE WITH OUR POLICIES AND PRACTICES, YOUR CHOICE IS NOT TO USE OUR WEBSITE. BY ACCESSING OR USING THIS WEBSITE, YOU INDICATE YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS PROVISIONS. THIS POLICY MAY CHANGE FROM TIME TO TIME. YOUR CONTINUED USE OF THIS WEBSITE AFTER WE MAKE CHANGES IS DEEMED TO BE ACCEPTANCE OF THOSE CHANGES, SO PLEASE PERIODICALLY CHECK THIS POLICY FOR ANY UPDATES.

You also represent that you are at least 13 years old and not a person barred from receiving services under the laws of the United States or other applicable jurisdictions.

1. California Residents

If you are a California resident and are under 18 years of age, you may request and obtain removal of postings on the Websites that you yourself post by e-mailing us at privacy@cardsagainsthumanity.com. All requests must be labeled "California Removal Request" on the e-mail subject line. All requests must provide a description of the content or information in your posting that you want removed and information reasonably sufficient to permit us to locate the material, and include the name and URL (if applicable) of the website, application, or other interactive service. We shall not accept requests via postal mail, telephone, or facsimile.

2. Children’s Privacy

By using our Websites, you represent that you are at least 13 years old. The Websites are not directed toward children under 13 years of age, nor do we knowingly collect information about children under 13. If you are under 13 years of age, you are not permitted to submit any personally identifiable information (“PII”) to us, including your name, address, telephone number, e-mail address, or any screen name or user name you may use. If we learn we have collected or received PII from a child under 13 without verification of parental consent, we will delete it immediately. If a parent or guardian becomes aware that any of their children has submitted PII to us, please immediately notify us at privacy@cardsagainsthumanity.com.

3. Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Websites:

• Identifiers: We may collect your e-mail, real name, nickname, e-mail address, telephone number; and date of birth, country of birth, and state of birth (if in the U.S.) to identify you and for research purposes to make our products better and to effectuate Webstore sales. This information is collected directly from you during your registration with our Websites. We do not sell or share this information with any third party.
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): We collect your name, address, and education to identify you and for gameplay analytics purposes. This information is collected directly from you during your registration with our Websites. We do not sell or share this information with any third party.
• Protected classification characteristics and sensitive personal information: We collect information about your race/ethnicity, religion or creed, sex, sexual orientation (including gender, gender identity, and gender expression) and political views for gameplay analytics purposes. This information is collected directly from you during your registration with our Services. We do not sell or share this information with any third party.
• Commercial Information: We collect purchaser e-mail and payment method, for internal reporting and billing. This information is collected from you and automatically during your interaction with our Websites. We do not sell or share this information with any third party.
• Internet or other similar network activity: When you use our Websites we may collect and store your Internet Protocol address, browser, device type, and device operation system for compatibility, tech support, and analytics. We do not sell or share this information with any third party.

“Share” or “sell” means the sale of your personal information to an outside party for monetary or other valuable consideration, subject to certain exceptions as provided by the applicable privacy laws. We do not sell or share your information for monetary consideration. However, we may share information that we collect in the Lab (lab.cardsagainsthumanity.com) with academic researchers. For more information please see Section 5 (Disclosure of Your Information).

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies.

Information You Provide to Us

The information we collect on or through our Websites may include:

• Information that you provide by filling in forms on our Websites. This includes information you provide at the time of setting up an account and/or making a purchase. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with our Websites or express concerns about our products.
• Records and copies of your correspondence (including e-mail addresses), if you contact us.
• Your responses to surveys that we might ask you to complete for research purposes. This includes information provided through the demographics form (“Demographics Form”) in the Lab at https://lab.cardsagainsthumanity.com/. All information collected through the Demographics Form is used internally to create more enjoyable games or for academic research purposes.
• Details of transactions you carry out through our Websites and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Websites.
• Your search queries on the Websites.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Websites, we may use automatic data-collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Websites, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.
• Gameplay data, meaning data on your interaction with the game when you play in the Lab at https://lab.cardsagainsthumanity.com/.

Some browsers have a “do not track” feature that lets you tell those websites you do not want to have your online activities tracked. At this time, we do not respond to browser “do not track” signals. Except as described below, no other third party conducts tracking or analytics on our site.

You may not find third-party website links on all of the pages of our Websites. However, where they are provided, this Privacy Policy does not cover the information privacy practices of any of those third-party websites or those you may otherwise be able to access from our Website. We do not control, and are not responsible for, any such third-party websites' collection and use of your information. All users should timely refer to the privacy policy disclosures on those websites to obtain information regarding their information collection and use practices.

The information we collect automatically does not include PII, but we may maintain or associate that information with PII we collect in other ways. Doing so helps us to improve our Websites and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Websites according to your individual interests.
• Recognize you when you return to our Websites.

The technologies we use for this automatic data collection may include “cookies.” Cookies are files with small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your computer’s hard drive. Like many sites, we use “cookies” to recognize your logged-in state on our website, to understand what Services you are interested in, to make our Websites function for you, and to help your browsing experience and use of the Websites and our Services feel more customized. You may be able to instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Websites. You can obtain more information about cookies at a[href="http://www.allaboutcookies.org/"]{http://www.allaboutcookies.org/}.

We may also use web beacons, pixel tags, and similar software, which are invisible graphics on a web page or e-mail that are programmed to collect non-PII about the use of a given website or newsletter, such as whether or not an e-mail is opened and viewed.

We use the following Google Analytics Advertising Features:

• Google Display Network Impression Reporting.
• Integrated services that require Google Analytics to collect data via advertising cookies and anonymous identifiers.

You can opt-out of the Google Analytics Advertising Features here: https://tools.google.com/dlpage/gaoptout/. You can also opt-out through any other available means.

You can read more at the Google Analytics Privacy Overview: https://policies.google.com/technologies/partner-sites

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Websites are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Websites. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties' tracking technologies nor how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

4. How We Use Your Information

We use the information we collect about you or that you provide to us, including any PII:

• To present our Websites and their contents to you.
• To provide the products and services you request.
• To deliver and track shipments.
• To provide customer support, and respond to your requests, questions, and comments pertaining to your purchase.
• To process returns and refunds.
• To perform data analyses (including geographic distribution of shipments, or financial analysis).
• To conduct research and analysis to improve our products.
• To protect against, identify, and prevent fraud and other criminal activity.
• To comply with applicable legal requirements.
• To fulfill any other purpose for which you provide the information.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Websites or any products or services we offer or provide through it.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

Cards Against Humanity will retain your information only for as long as is necessary for the purposes set out in this Privacy Policy, or as needed to provide the services to you or otherwise to satisfy our legitimate business interests. Cards Against Humanity will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Privacy Policy.

5. Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Cards Against Humanity will not sell, share, dispose, or otherwise transfer your PII to third parties without your consent except as specifically set forth in this Privacy Policy. When you choose to supply us with your e-mail address, Cards Against Humanity compiles this information in a database with other Cards Against Humanity customer information.

We may disclose PII that we have about you as described in this Privacy Policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business (e.g., payment processors and courier services) and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in interest in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Cards Against Humanity’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which PII held by Cards Against Humanity about our Websites’ users is among the assets transferred.
• To fulfill the purpose for which you provide the information.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To enforce our Terms of Use and this Privacy Policy, including any investigation of potential violations thereof;
• To notify you about any changes in or to our Websites or other products or services;
• To fulfill our legal obligations or to otherwise contact you;
• To fulfill our legal obligations and respond to any claims, litigation and/or law enforcement or other government inquiry;
• To deliver products and services to you and to improve the design and performance of the Websites. We may also use your information to deliver to you, among other things, communications, e-mails, and marketing materials from us and third parties as you request them or which we feel may interest you, where you have consented to be contacted for such purposes;
• To ensure that our Websites, products, and services are presented to you in the most efficient manner for you and us and to improve the design and performance of the Websites;
• To administer our Websites and keep them safe and secure, and for internal operations, including research, statistics, troubleshooting, detection/prevention/addressing any potential credit risks/fraud prevention, data analysis, testing, security, survey, and similar purposes;
• To share the data we hold with third-party service providers, including credit card processors, auditors, other service providers, and academic researchers for industry research and development, demographic profiling, and other similar purposes;
• To disclose as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to protect our operations or those of any of our Affiliated Parties; (c) to protect our rights, privacy, safety, or property, or that belongs to you or others; or (d) to allow us to pursue available remedies or limit the damages that we may sustain;
• For any other legitimate business purpose we may have in accord with this Privacy Policy, including but not limited to protection of our rights, property, or safety, or the rights, property, and safety of our employees, users and/or others.

You must notify us immediately of any suspected or actual unauthorized use of your customer information, and of any and all other security breaches.

6. Choices About How We Use and Disclose Your Information

Opting Out of Cross-Context Behavioral Advertising or “Sales” of your Information.

Under the laws of certain U.S. states, you may have the right to opt out of our processing or sharing of your information for online cross-context behavioral advertising purposes. Note that certain state laws also allow you to opt out of the “sale” of your information to third parties in exchange for valuable consideration.

Communications Preferences.

We strive to provide you with choices regarding the PII you provide to us. You have the right to ask us not to process your personal data for marketing purposes. If you have signed up for our e-mail list and later decide you don’t want to receive any more e-mails from us, you have the choice at any time to withdraw your consent for us to contact you by using the “unsubscribe” function in our e-mail messages, or by contacting us via e-mail at privacy@cardsagainsthumanity.com, or by postal mail at: Cards Against Humanity Customer Service, PO Box 316620, Chicago, IL, 60631, USA.

You also have the choice to do the following at any time by contacting us via the e-mail or postal address above:

Your rights. The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, effective January 1, 2023 (“CPRA”) and some other state privacy laws provide consumers with specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights.

1. Right To Know What Information We Collect, With Whom We Share Your Information, And The Right To Data Portability: You may request that we disclose to you the categories of personal information we collect about you, the categories of sources from which we collected that personal information, the categories of personal information we sold or disclosed, our business or commercial purposes for collecting and selling such personal information, the categories of third parties with whom we shared such personal information, and the specific pieces of personal information we collected about you over the past 12 months.
2. Right To Request Deletion Of Your Information: You may request we delete some or all of the personal information we maintain about you, subject to certain exceptions. If we cannot delete your personal information, we will give you a reason why we cannot do so. For security reasons, you or your authorized agent may be asked to verify your/their identity. Note that some personal data may be retained as permitted by law (e.g., to comply with legal obligations, to prevent fraud). We will delete or deidentify personal information not subject to certain exceptions from our records and will direct our service providers to take similar action.
3. Opt-out of “Sale”/“Sharing” of your personal information: We do not currently consider the ways we shared consumer personal information in the past 12 months to comprise the “sale” of personal information as defined in the CCPA or other applicable state privacy laws. For purposes of this Privacy Policy, “sell” means the sale of your personal information to an outside party for monetary or other valuable consideration, subject to certain exceptions in the CCPA or other applicable privacy laws.
4. Right to Correct Inaccurate Personal Information: Taking into account the nature of the personal information and the purposes of the processing, this right provides an individual with the ability to seek to correct or update personal data that individual considers that we hold about that individual.
5. Right to Limit Use of Sensitive Information: This right is limited to sensitive personal information used for the purpose of inferring characteristics about an individual. We do not collect sensitive personal information nor do we use sensitive personal information for the purpose of inferring characteristics about an individual, therefore we do not offer a path to exercise this right.
6. Right of Non-Discrimination and Non-Retaliation: This right prohibits (a) denying an individual access to or use of goods and services, (b) charging different prices or rates for those goods and services, and/or (c) providing a different level or quality of those goods and services, as a result of the individual exercising any right under any data protection and privacy laws and/or regulations. We will not discriminate against you because you made any of these requests. We will not: (i) deny you goods or services; (ii) charge you different prices or rates for those goods and services, including through granting discounts or other benefits, or imposing penalties; (iii) provide you a different level or quality of our goods or services, or (iv) suggest that you may receive a different price or rate for our goods or services or a different level or quality of our goods or services.

In addition to the rights that are available to residents of California, other state privacy laws may guarantee the rights to:

• Opt out of the processing of your personal data for the purposes of targeted advertising and for profiling in furtherance of decisions—including, for residents of Connecticut, solely automated decisions—that produce legal or similarly significant effects; and
• Appeal any decision or indecision related to the exercise of any right the consumer is granted under the applicable state law.

If you would like to exercise any of these rights (including the right to appeal), please contact us by e-mailing us at: privacy@cardsagainsthumanity.com, or via postal mail at PO Box 316620, Chicago, IL 60631, or via phone at (800) 942-4410.

We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, to process transactions and facilitate customer requests, and/or to protect against fraud and other misuse of our Websites. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information. In some locations, you may designate an authorized agent to make a request on your behalf. When submitting such a request, please ensure you have adequately identified and authorized anyone acting on your behalf.

Shine the Light. California's “Shine the Light” law (Civil Code Section § 1798.83) permits users of our App who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an e-mail to privacy@cardsagainsthumanity.com or write us at: Cards Against Humanity Legal Department, PO Box 316620, Chicago, IL 60631.

Response Timing and Format. We will confirm receipt of your request to know, correct, delete, and/or seek any request under the relevant U.S. state privacy law(s) within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at privacy@cardsagainsthumanity.com. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of receipt. If we require more time (up to another 45 days), we will timely inform you of the reason(s) and extension period in writing. We may choose to verify your identity before responding to any such request.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

7. Data Security and Storage

We store your information primarily in the United States. Some information may be stored elsewhere. You authorize us to do so. The PII and other data we collect about you and your use of our Websites may be maintained in servers we control and maintain or in third-party servers. The information you provide may be transferred or accessed by entities in many different countries as described elsewhere in this Policy. By submitting your information, you agree to the transfer, storage, and processing of your data in accord with this Policy.

We have technical, administrative, and physical safeguards in place to help protect against unauthorized access to, use, and disclosure of PII and other information we maintain. Access to this information is authorized only for those who have a business need for such access.

We will do our best to keep the PII data we maintain secure. However, no program is totally secure. Therefore, we cannot guarantee that our safeguards will prevent every attempt at unauthorized access or use, or the disclosure of any PII. If you become aware of a security breach, please notify us immediately at privacy@cardsagainsthumanity.com.

8. Payment

Cards Against Humanity does not store credit-card data. Customer encrypted credit-card data is securely stored and processed by our payment-processing vendor. For more details on how credit card information is handled/secured by our payment-processor vendor, please see Stripe’s Privacy Policy: https://stripe.com/us/privacy.

9. Laws in Other Countries

We comply with United States privacy laws and regulations. We do not represent our Websites are governed by, or operated in accordance with, the laws of other nations or jurisdictions, or that the Websites or any portion of them are appropriate or available for use in any particular location. If you choose to access our Websites, you do so at your own risk, and you are responsible for complying with all local laws, rules, and regulations. By using the Websites, visitors to the Websites from outside the United States acknowledge and agree that our Websites are subject to United States laws and regulations, and waive any claims against us that may arise under their own national laws.

10. Vermont Residents

The information practices described above comply with U.S. federal law. Vermont law places additional limits on the sharing of your PII. In accordance with Vermont law, we will not disclose information we collect about Vermont residents to unaffiliated companies except as permitted by law, such as with the authorization or consent of the Vermont resident.

11. Changes to Our Privacy Policy

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the Websites. If we make material changes to this policy, we will notify you that it has been updated via an announcement on our Websites, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

In case there is a conflict between the terms established in this Privacy Policy and the terms established in our Terms of Use, the Terms of Use prevail.

12. Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at privacy@cardsagainsthumanity.com or by mail to: Cards Against Humanity Legal Department, PO Box 316620, Chicago, IL 60631 USA.

Website: www.cardsagainsthumanity.com

If you need to access this Privacy Policy in an alternative format due to having a disability, please contact privacy@cardsagainsthumanity.com or (800) 942-4410.