Privacy Policy
Last updated: 26 September 2026
Spellmate is in beta. This document describes the service as it works today, and will change with it.
What we collect
Your username, your password (never in clear text: only a bcrypt hash is kept), the account creation date, your game progression, your decks, your games, and your cosmetic choices. Your email address is OPTIONAL; without it, only the features that depend on it are unavailable.
Email addresses and hashes
If you provide an address, it is kept so you can sign in, verify your account and reset your password. The ledger that limits address changes only keeps irreversible HASHES: it counts distinct addresses without ever being able to read them back.
IP address and logs
Your IP address is used transiently to limit abuse (bursts of sign-ups and logins). It also appears in the web server's technical logs. It is not linked to any account in the database. Your browser identifier (user-agent) is kept with your active sessions, so you can tell them apart and revoke them.
What we do not do
No advertising. No trackers, no analytics, no social network widgets embedded in the site. The only outbound link is a plain text invitation to our Discord server — not a button that loads a third-party script before you click it. No data is sold or passed to third parties for commercial purposes. This is not merely an intention: the site's security policy technically forbids loading any external resource.
Where your data lives
On a server rented from Hetzner, in Falkenstein, Germany. Emails are sent through Scaleway, in France. Your data does not leave the European Union.
For how long
During the beta, until the next reset (see the terms of use). You may request deletion of your account at any time; it is permanent.
Your rights
You can already do all of this yourself from your profile: view and export your data, correct your username, password or email address, and delete your account. A question these tools don't cover? The contact details are right below.
Questions about this document? Write to [email protected].