Privacy Policy
Last updated: October 21, 2026
Meydan is a free, non-commercial website for playing social deduction and board games with friends in the browser (Werewolf-style "Vampire Village", Secret Hitler, Codenames, Chess and Sudoku). This policy explains which personal data is processed when you use Meydan, why, and what rights you have. Our principle is to collect no more than we need: we show no ads, sell no data and do not track you across other websites.
1. Data we collect
| How you sign in | Data we store |
|---|---|
| As a guest | The nickname you choose, a randomly generated user ID and an avatar seed. No email is required. |
| With email and password | Your email address, display name and a one-way hash of your password. The password itself is never stored. |
| With Google | Your Google account ID, email address and name (see section 2). |
| With Discord | Your Discord user ID, username and display name, email address (if Discord shares it) and the URL of your profile picture (see section 3). |
In-game data: Chat messages, moves, roles and votes are held only in the server's memory while a game room is open and are discarded when the room closes. We do not write them to a database.
Technical data: Session and security cookies required for the service to work are used (see section 6). The server keeps no access logs containing visitors' IP addresses; application logs kept for debugging are rotated and deleted automatically after a short time.
2. Sign in with Google
When you choose "Continue with Google", we request only your basic profile
information (the email and profile scopes). What we
receive and how we use it:
- Google account ID: to recognise you the next time you sign in.
- Email address: to identify your account and prevent two separate accounts with the same email.
- Name: as the initial value of your in-game display name. We do not retrieve your profile picture.
We do not access Gmail, Google Drive, Calendar, Contacts or any other Google service, and we never act on your behalf. We do not store Google access tokens.
Meydan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google is not used for advertising, is not sold, is not used to develop, improve or train generalised AI or machine-learning models, and is not read by humans for any purpose other than the sign-in function described above.
3. Sign in with Discord
When you choose "Continue with Discord", we request only the
identify and email scopes:
- Discord user ID: to recognise you the next time you sign in.
- Username and display name: as the initial value of your in-game display name.
- Email address (if Discord shares it): to identify your account.
- Profile picture: shown as your avatar in games. We store the image's URL on Discord's servers, not the image itself; if you change your picture on Discord, it updates on Meydan the next time you sign in.
We do not access your servers, messages, friends list or any other Discord data. Data received from Discord is used only to sign you in and show you in games; it is not sold, shared or used for advertising. You can revoke Meydan's access at any time in Discord under User Settings → Authorized Apps.
4. How we use data
- to create your account and let you sign in,
- to show your display name and avatar to other players in game rooms,
- to keep the service secure and prevent abuse (e.g. fake accounts).
We do not use your data for marketing, advertising, profiling or automated decision-making, and we do not send newsletters or promotional emails.
5. Third parties and sharing
We do not sell or rent your personal data. The service relies on these providers:
- Oracle Cloud: the infrastructure hosting the server and database.
- Google and Discord: only if you choose to sign in with them; their own privacy policies then also apply.
- Google Fonts: the site's fonts are loaded from Google's servers, which means your browser sends your IP address to Google.
- Discord CDN: Discord avatars are loaded directly from Discord's servers.
Your display name and avatar are visible to other players in the same game room; your email address is never shown to other players. We do not share your data with authorities unless legally required to.
6. Cookies and browser storage
We use only what is strictly necessary for the service; there are no advertising or analytics cookies.
| Name | Type | Purpose |
|---|---|---|
sessionid | Cookie | Keeps you signed in (2 weeks). |
csrftoken | Cookie | Protects against cross-site request forgery (CSRF). |
meydan:locale, meydan:theme | Local storage | Your chosen language and theme. |
meydan:reconnect | Local storage | Lets you rejoin the same game room within one minute after a page reload. |
7. Retention and security
Account data is kept for as long as your account exists and is deleted at your request. In-game data is discarded when a room closes. Database backups are kept for at most 14 days, so a deleted account is also gone from backups after that period.
The site is served only over encrypted connections (HTTPS), passwords are stored as one-way hashes and the database is not reachable from the internet. No system is perfect; if we become aware of a data breach, we will notify affected users.
8. Your rights and data deletion
You have the right to access your data and to ask for it to be corrected or deleted (including your rights under the GDPR in Europe and KVKK in Türkiye).
To delete your account and data:
- Email akadirgumusbas@gmail.com with the subject "Meydan data deletion request".
- Include your display name and how you sign in (guest, email, Google or Discord); writing from the email address linked to your account speeds up verification.
- We will complete your request within 30 days and confirm it to you. Your account is permanently deleted together with its Google/Discord link and avatar URL.
You can also revoke Meydan's access to Google or Discord at any time from your account settings (Google account permissions, and in Discord under User Settings → Authorized Apps).
9. Children
Meydan is not directed at children under 13 and does not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it.
10. Changes and contact
When we update this policy, we change the date at the top of this page and announce significant changes on the site. For any questions: akadirgumusbas@gmail.com
For the rules of using the service, see the Terms of Service.