CDeck privacy policy

Effective October 29, 2026 · 800 Pound Gorilla Inc.

What the app and service store

• A random device token generated when the app first launches. It identifies your TV to the service and nothing else.
• A random push token issued when a pairing code is claimed. It lets the claimant replace the deck shown on that one TV.
• The most recent deck pushed to your TV, encrypted end-to-end on the device that pushed it (X25519 key agreement + AES-256-GCM). The service stores ciphertext it has no key for. Check-offs are stored as keyed hashes of item ids, which are equally opaque to the service.
• Short-lived rate-limit counters keyed by IP address (expire within a day).

What is not collected

No account, name, email, location, contacts, analytics, advertising identifiers or crash reports. The service never reads your mail, calendar or other sources, and cannot read the deck itself: the encryption key exists only on your TV and on the machine running your AI assistant.

Who can see your deck

Only your TV and whoever claimed its pairing code hold the decryption key. The operator of this service, Cloudflare, and anyone who obtained the stored data would see only ciphertext. Tokens are random 256-bit values and are never listed or searchable.

Deleting your data

Choose Re-pair this TV in the app, or have your assistant call cdeck_unpair. Both delete the push token, deck and check-offs. Deleting the app discards the device token; orphaned records are purged.

Third parties

The service runs on Cloudflare Workers and KV. Cloudflare's own privacy policy governs their infrastructure. No data is sold or shared.

Contact

support@happymonkey.dev