Privacy Policy
THE LAW is a free multiplayer card game. It runs in a browser and as a Discord Activity. It is run by OPERATOR_NAME (“we”). This page says what the game handles and why. We keep it small on purpose.
What we handle
- Your name and symbol. You type a display name and pick a symbol. In Discord, we use your Discord display name instead (your global name, or your username if you have none). We never see your email or your servers.
- Your account, if you sign in. Signing in is optional. If you do (on the website with “Sign in with Discord”, or automatically inside the Discord Activity), we store: your Discord user ID, your Discord username, your global display name, your avatar ID, when the account was created and when you were last seen. We also link the games you play signed in to your account, to show your stats, and keep your friends list and pending friend requests. Friends can see whether you are online and which game you are in.
- Game actions and results. The cards you play, accusations, scores and similar moves, so the game can run.
- Finished-game records. When a game ends, we save it in a SQLite database on our server: room code, game number, difficulty, winner name, the revealed laws, the move log, and for each player their name, symbol, score, accusation counts, rejections and longest streak. Anyone who has the room code can see this on the “Past games” page, including the names.
- Chat messages. Chat is held only in the server’s memory for the live room. Only the last 100 messages are kept. Chat is never written to the database.
- Bug reports. If you press “Report a bug”, we store what you typed, your contact if you chose to give one, and this technical context: game version, screen size, browser, level, turn number, room code, and whether you are on the web or in Discord. We never include your cards, the hidden law or the chat. Only we can read reports, and we delete them on request.
Discord login
We ask Discord for the identify scope only. The one-time code from Discord is exchanged for an access token, which is used once to read who you are (the fields above). We do not store the token.
On the website, signing in sets one cookie, law_session: a random session id, signed, not readable by scripts, that keeps you signed in for up to 30 days or until you sign out. During sign-in a second short-lived cookie (10 minutes) protects the login against forgery. Inside the Discord Activity there is no cookie; the session id stays in memory until you close the Activity.
Subscriptions
The Lawmakers Edition is an optional paid subscription. Paddle.com is the merchant of record: it sells the subscription, takes the payment and handles tax in its own checkout, and we never see or store your card or other payment details. We store only your subscription id and the date your access ends, linked to your account (we pass your account id to Paddle with the order), so we know whether to open the Chancery. Paddle’s own privacy policy covers what it holds.
On your device
Your browser keeps your settings, your name and symbol, and which tips you have seen in localStorage. A session token that lets you rejoin a room after a dropped connection is kept in sessionStorage. This stays on your device. We do not use ads, analytics or trackers, and no cookies unless you sign in (see above).
Where and how long
- The server runs in Microsoft Azure, Sweden Central (EU). Connections use HTTPS.
- Live rooms, and their chat, vanish when everyone leaves.
- Finished-game records are kept until deleted. You can ask us to remove your name from them.
Age
You must be old enough to use Discord: at least 13, or older where your local law requires. Do not use the game if you are younger.
Deleting your account
Signed in, open your profile (your name at the top left of the start screen) and press Delete my account. If you have a Lawmakers subscription that is still set to renew, cancel it first (the profile has a Manage subscription button); deleting an account does not cancel billing. Once it is cancelled or set to end, deleting immediately removes your account, all your sessions, your friends list, your Lawmakers laws, modes and collections, and your stored subscription id and end date, and unlinks your past games from you. The finished-game records themselves stay, under the name you played with, as for guests; ask us if you want your name removed from them too. You can also revoke the game’s access in Discord under User Settings → Authorized Apps.
Your rights
You can ask for access to your data, correction, deletion, or object to how it is handled. Tell us your name as it appeared and the room code, if you know it. We will answer by email. If you are in the EU, you can also complain to your local data protection authority.
Contact
Changes
If this policy changes, the new version goes on this page with a new date.