Privacy Policy

1. What data we collect

Without signing in, a player gets a name like “Guest-12345”; the number comes from a random ID of the browser. If you sign in with Discord: your Discord account ID, display name and a link to your avatar; Discord does not pass us your email, password or friends list. If you sign in with email: your email address, your in-game name and your password as an irreversible hash (the password itself is never stored). The site does not send any emails to that address. A name you set yourself in your profile is stored in both cases. If you upload a profile photo, the site keeps a reduced 192×192 copy; you can remove it in your profile, and it is erased when the account is deleted.

During a game, room data is processed: the code, the participants, roles, the chosen pack, the stages of the game, votes and system events.

For the season table we store names, the number of games, wins and points. For a signed-in player's profile we store their all-time results and their last 20 games: the case, role, outcome and points.

2. Technical data

To keep the site running, we process IP addresses, request times and error codes. The IP address is held in the server's memory to protect against overload and password guessing and is never written to disk. The hosting provider may keep its own request logs.

This data is used only for security, protection against abuse and keeping the service stable.

3. Cookies and local storage

The site uses technical cookies (sign-in with Discord or email for 30 days, and a short-lived cookie for the sign-in itself) and your browser's local storage, which holds a random browser ID so you can get back to your seat if the connection drops. More in the cookie notice.

There are no advertising or analytics cookies. Fonts are loaded from Google Fonts. If you turn off cookies or clear the storage, signing in and getting back into a game may stop working.

4. Why we process data

Data is used to run games and lobbies, return players to their game, support sign-in with Discord and email, keep the season table, protect against spam and attacks, investigate bugs and answer messages.

5. How long we keep it

A room and its game are kept while the room is open, but no longer than 6 hours without activity. A sign-in lasts 30 days or until you sign out. A profile name is kept until you reset it or ask us to delete it. An email account is kept until you ask us to delete it; once deleted, it is also removed from backups, which are kept for no more than 14 days. The season table is reset at the end of each quarter. Support emails are kept for a year.

Technical logs are kept only as long as needed to look into failures and abuse.

6. Sharing data with third parties

Data is never sold or passed to advertising networks.

Data is processed by the hosting provider that runs the service, and only as far as needed to run it. If you sign in with Discord, Discord processes your data under its own rules. Only the site administration can see your email; it is never shown to other players. Other players in a game see your name, profile photo (your own or your Discord avatar), the revealed lines of your card and the results.

7. Your rights

You can find out what data we hold about you and ask us to correct or delete it by writing to support@detective-game.org. We will reply within 10 working days.

You can stop using the service at any time, sign out with the “Sign out” button and clear the site's data in your browser. Some data may be kept to the extent required by law.

8. Data protection

Only the administration has access to the data, and only when technically necessary.

The connection is encrypted, the sign-in cookie is signed and not available to page scripts, and the server is protected against password guessing and overload.

9. Changes to this policy

We may update this document when the game or security requirements change. The current version is always on this page.

10. Contacts

Questions and requests about your data go to support@detective-game.org.