Privacy Policy

Spades Night is a free card game made by mhmm s.r.o. ("we"). This policy explains what we collect when you play, why, and what you can do about it.

What we collect

Identity

Inside Discord we ask for the identify scope: your Discord user id, username, display name and avatar, so you can be seated at the table. If you allow the voice-read scope, we also receive speaking and mute events for the voice channel, used only on your own device to show who is talking and to lower game audio under speech. Voice audio itself never reaches us.

We also ask for the email scope inside Discord. If you allow it, we store the email address on your Discord account and use it to reach you about the game and about your account: an outage that cost you a match, a change to these policies, or a reply when you write to us. It is never shown to other players, never appears in the game, and we do not sell or rent it. If you decline the scope, or your address is unverified, we simply do not store one and everything else works the same.

On the web you play as a guest. We create a random guest id stored in a cookie and in your browser's local storage. If you later sign in with Discord, your guest history is merged into your Discord account.

On the web you may also give us an email address to save your progress. We send a one-time sign-in link to it, and your guest level and history move onto that account. We use the address the same way as a Discord email above: to send the sign-in link and to reach you about the game and about your account. It is never shown to other players, never appears in the game, and we do not sell or rent it. Sign-in mail is delivered by Resend, which handles the address only to send it.

Gameplay

Match records: which table you sat at, seat and team, bids, results, timeouts, emotes and rematch votes. We keep these to show scores, resume interrupted games, tune the bots and understand how the game is played.

Analytics

We log product events (session started, match started, hand scored, invite opened, and similar) with a timestamp, your user id and coarse technical details such as platform and layout mode. We do not use third-party advertising trackers.

This website and the web version of the game also use Google Analytics to count visits and see how people find us. Google Analytics sets cookies (_ga and _ga_*) and receives the page address, the referring site, your browser and device type, and your IP address, from which Google derives an approximate location. We use it for aggregate traffic reports only, not for advertising. It does not run inside the Discord Activity. You can block it with the Google Analytics opt-out add-on or any content blocker.

The pages of this website outside the game (this page, the rules and the guides) also count visits with our own counter: the page, the referring site, campaign tags and screen width, with no cookies, no stored identifier and no user id.

Technical

Server logs include IP address, user agent and request paths for security and abuse prevention. They are rotated within 30 days.

What we do not collect

• No voice or text chat content. Discord voice is Discord's.
• No contact lists, location, or payment details (there is nothing to buy).
• No data from anyone under 13. If you believe a child has played, contact us and we will delete the record.

How we use it

• Run the game: seating, scores, reconnecting you to a table you left.
• Improve the game: bot tuning, balancing timers, spotting broken flows.
• Keep it safe: rate limits, abuse detection, mute lists.

We do not sell your data and we do not share it with advertisers.

Who else sees it

Discord (when you play inside Discord or sign in with it, under Discord's own privacy policy), our hosting and database providers and our email provider Resend (acting on our instructions, under contract), Google (for Google Analytics on the website and the web game, under Google's own privacy policy), and authorities when the law requires it.

How long we keep it

Accounts and match history: while your account is active and up to 24 months after your last game. Analytics events: 24 months. Google Analytics data: 14 months. Server logs: 30 days. Anonymised aggregates may be kept longer.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. Write to [email protected] from the Discord account, email address or guest browser in question. Depending on where you live (for example the EU, UK or California) you may have additional rights, including the right to complain to a supervisory authority.

Cookies and storage

One session cookie (sn_session) keeps you signed in. On the website and the web game, Google Analytics sets its own cookies (_ga, _ga_*), which last up to two years. Local storage holds your settings, your sign-in token and the last table options you used. Clearing site data removes all of it.

Changes

We will post changes here and update the date above. Significant changes are announced in the game.

Contact

mhmm s.r.o., [email protected].