Privacy notes.

Mindforge collects very little data because it has no accounts, no analytics, and no advertising. This page describes exactly what exists, where it lives, and how long it lasts.

What the server keeps

Game rooms exist only in the server's memory. A room holds player names (chosen or randomly generated), scores, drafted cards, and connection state. Rooms expire two hours after creation and everything disappears whenever the backend restarts. Room tokens are per-seat credentials generated at join time; they are not logged — API request logging is disabled so WebSocket URLs, which carry tokens, are never written to access logs.

What your browser keeps

The client stores your display name and recent room seat tokens in your own browser (local and session storage) so a refresh can restore your seat. These never leave your device except to authenticate to the room they belong to. Clearing site data removes them completely.

What is not collected

There is no tracking, no cookies for analytics or ads, no fingerprinting, and no sale or sharing of personal data — there is essentially no personal data to share. The fonts stylesheet optionally loads from Google Fonts; your browser may contact Google to fetch it, which is governed by Google's own policies.

Questions

Privacy questions can go to contact@alexandrucuriman.com. Because Mindforge is run by an individual in the EU, GDPR rights of access and erasure apply — though in practice the only data held is an ephemeral seat that expires on its own.