Privacy Policy
Last updated:
Summary
Paper Dojo has no accounts, no ads network and no cookies. Games against the computer and pass and play run entirely in your browser; the only data they can send is the optional error reports and anonymous analytics described below.
Stored in your browser
Your settings are saved in your browser’s localStorage under paperDojo.settings, and the names of the settings you changed yourself under paperDojo.settingsTouched (so a device default, such as pencil shading off on low-end devices, never overrides your choice).
If you use online play, the browser also keeps a random anonymous device id (paperDojo.uid) and the seat token for each online match you joined (paperDojo.seats; entries older than 48 hours are dropped). None of these are cookies, and clearing your site data removes them.
Online matches
When you create or join an online match, the server stores the display name you enter, your clan, the anonymous device id, a secret seat token, the match settings and the list of moves. This data expires automatically: a lobby nobody joins is deleted after 30 minutes and every match is deleted at most 24 hours after it was created.
To limit abuse, the server keeps short-lived counters keyed by your IP address (for IPv6, its /64 network): one counts every online-play request and expires after 1 minute, and two count match creations and joins and expire after 10 minutes. A separate counter per match limits how many moves it accepts per minute. The counters hold only a number and are not linked to your moves or display name.
Hosting
The site is hosted on Vercel. Like any web host, Vercel receives your IP address, browser user agent and the pages you request, and keeps request logs under the Vercel privacy policy.
Online play runs on Vercel Functions, and online match data and the rate-limit counters are stored in Upstash Redis, provided through the Vercel Marketplace. Vercel and Upstash process this data on our behalf only to run online play, under their own privacy policies.
Optional error reporting and analytics
Error reporting (Sentry) and analytics (Vercel Web Analytics) are off unless the site operator enables them for a deployment. There is no in-game switch for either.
When Sentry is enabled, crash reports and a sample of page-load performance data are sent to Sentry: the error message and stack trace, the page URL, and your browser and operating system.
When Vercel Web Analytics is enabled, page views and anonymous game events (match start and end, captures, rule set chosen) are sent to Vercel. It does not use cookies.
What Paper Dojo does not do
No ads network is loaded, no data is sold, and fonts, images and scripts are served from this site only.
Fight voice lines are recorded clips served by this site. If a clip can’t play, your browser’s speech synthesis says the line instead; some browsers offer online voices that send the spoken line (never your data) to the browser maker. Turn off Voice callouts in Settings if you prefer.
Contact
Questions or deletion requests: hello@paperdojo.com