Privacy

Rink & Rail is your hockey and games clubhouse, powered by the server's Discord bot. Here is everything the site learns about you and keeps.

What the site gets from Discord

The first time you log in, Discord asks whether Hockey Bot may know who you are (Discord calls it identify). Hockey Bot is the Discord sign-in application for Rink & Rail. That gives the site your Discord id, your name and your avatar, and nothing else: not your email, your other servers or your messages.

The site keeps only your id, inside its login cookie. The names on these pages come from the bot's own member list, the same names Discord shows in the server.

The login cookie

A login lasts 30 days. The cookie is signed so nobody can make one up, only this site gets it, and the page's scripts can't read it.
Log out (in the menu under your name) ends the login in this browser.
Log out everywhere (in the same menu, and on My season) ends it on every phone and computer at once. The server's admins can do the same for you if you lose a phone.

What is stored

The site keeps web_logins in the bot's database: a number per member that Log out everywhere raises, so every older login stops working. Nothing about what you look at is stored. Choices you submit on an enabled game page are saved in the same pick and activity records used by Discord, under your Discord account. They follow the same deadlines and visibility rules.

The activity and casino pages keep the identifier and choices of an unconfirmed action in session storage until its result is confirmed, so a retry does not place a second wager or purchase. This storage belongs to the tab, not a permanent browser profile. The database keeps action receipts with your Discord id and game record so retries remain safe after a restart. Where private casino unlock links are enabled, the tab temporarily keeps the link while you sign in and removes it after use.

Your mute choice is saved as a single preference in this browser's local storage. Sound and celebration effects keep a limited list of event identifiers in the tab to avoid replaying sounds and animations. Those effect histories do not store wager amounts or the pages you visit.

The web server's logs

The web server in front of the site (Caddy, or Cloudflare when the site runs through its tunnel) writes a line for each request: the time, the page, your browser and your IP address. Those logs are kept for 14 days. The bot's own log has no lines about web visits.

So nobody can flood the site or its logins, the site itself counts recent requests and logins by IP address and by Discord id. It keeps those counts in memory only, forgets each one within about 10 minutes, and never writes them down.

Cloudflare

If the site is reached through a Cloudflare tunnel, Cloudflare carries the traffic between your browser and the server, under Cloudflare's own privacy policy.

What other members see

The same as in Discord. Before a pick'em card locks, everyone sees only how many have picked; after it locks, who picked which winner. Score guesses and first goal picks never show by name, except who got the points. My season, My bets and your chip history are only for you.

Chips

Chips are play money only. They have no cash value, can't be bought, sold or traded, and can only be spent on cosmetics in the server. The website lets you place bets, see your current plays, use the chip shop and play blackjack, roulette and multiplayer Texas Hold'em using your shared chip balance. Poker buy-ins are held at the table until you leave; only chips in your available wallet appear in chip standings. Signing in identifies your account; current server and channel permissions still apply to each request. Casino access opens directly when the owner has disabled private unlocks. Your personal bets and private hole cards are shown only to you. Other members at the poker table see public actions, stacks and community cards; non-folded hands are revealed at showdown. Poker hand state and action receipts are stored so the same hand can resume after a reconnect or restart. Admin changes are recorded with the admin's id, action and time in the site's recent audit history.

Questions

Ask the server owner. They run Rink & Rail and can answer questions about the website and the server's Discord bot.