PRIVACY POLICY
Drugs — the card game · last updated 4 August 2026
Drugs is a free, hobby-run online card game, playable in a web browser
and as a Discord Activity. This page explains exactly what it does with your
information. The short version: it collects as little as possible, sells
nothing, and shows no ads.
What the game collects
- The name you play under. Either the name you type, or your Discord
display name when you launch the game as a Discord Activity. It is shown to
other players in your room and in the chat log.
- Your Discord account details, if you play via Discord. The game asks
Discord for the
identify scope, which returns your user ID, username,
display name and avatar. This is used in your browser only, to fill in
your player name. It is not stored on the server and not shared.
- Your IP address. Held in memory while you are connected, so the
operator can see who is online and shut out abuse. It is discarded when you
disconnect. It is not written to any log or statistics file. If an IP is
blocked for abuse, that single address is stored until the block is lifted.
- Basic connection details. Your browser's user-agent string and how long
you have been connected, shown on the operator's dashboard while you are online.
- Chat messages. Relayed live to the other players in your room and held
only in memory. They are not saved to disk and are gone when the room ends.
- Game statistics. Anonymous running totals — cards played, piles picked
up, games finished, and so on. The one exception is the winners list,
which stores the display name of each winner alongside a win count.
What it does not collect
- No email address, phone number, password or payment details — there are no accounts.
- No advertising or analytics trackers of any kind. No third-party scripts.
- No tracking cookies. The game stores two preferences in your browser's local
storage (your chosen table theme and whether sound is on). These never leave
your device and you can clear them at any time through your browser.
Who your information is shared with
Nobody. It is not sold, rented or passed to advertisers or data brokers.
There are only two ways information leaves the game's own server:
- Discord, when you play as a Discord Activity — the game exchanges the
authorisation code Discord gives it for an access token so it can read your
display name. Discord's own Privacy Policy
covers what Discord does with your data.
- An IP location service (ip-api.com), only if the operator has enabled
the optional location feature, and only to turn an IP address into a city and
country for the moderation dashboard. This setting is off by default.
Information may also be disclosed if the operator is legally required to do so.
How long it is kept
- Your IP address, name, hand of cards and chat: only while you are connected.
Rooms and their contents are deleted from memory when the last player leaves,
and everything in memory is lost whenever the server restarts.
- Aggregate statistics and the winners list: kept indefinitely, as a running
tally of the game's history.
- Blocked IP addresses: kept until the block is removed.
Security
Traffic is served over HTTPS and game connections over encrypted WebSockets.
The server is authoritative for all game rules, so no player can see another
player's hidden cards. That said, this is a small hobby project run on a home
server — please don't treat it as a secure place for anything sensitive, and
don't type anything into chat you wouldn't want another player to read.
Children
The game is not directed at children. Discord requires its users to be at
least 13 (or older where local law demands it), and the same minimum applies here.
Your choices and rights
- Play under any name you like — a nickname is fine.
- Ask for your display name to be removed from the winners list, or for the
statistics to be reset, and it will be done.
- Ask what is currently held about you. Given how little is stored and how
briefly, the honest answer is usually "nothing but a name on a list".
- Clear the game's stored preferences by clearing site data in your browser.
Depending on where you live you may have further rights over your personal
information (for example under the Australian Privacy Principles or the GDPR),
including access, correction and erasure. Use the contact details below.
Changes to this policy
If this policy changes, the "last updated" date at the top changes with it.
Material changes will be announced in the support server.
Contact
Join the support server — that's the quickest way to reach the operator. You can also email jrcardgames@protonmail.com.