Privacy & legal

The short version: no accounts, no tracking, nothing to sell. Here's the long version anyway.

// Privacy — what we collect

No accounts. There is nothing to sign up for. We never ask for your name, email, or any identifier.
No analytics or tracking. The app and this site run no trackers, no ad tech, no fingerprinting.
Your decks and settings live on your device (browser storage). We can't see them. Clearing your browser data removes them.

// Online rooms — what transits, what persists

When you host or join an online room, game traffic passes through a small relay we run on Cloudflare. What transits: your chosen display name, your deck list, and the game's moves. The relay is a dumb pipe — it can't read the room's invite secret and holds no game authority.
Nothing persists. An empty room self-deletes after a ~10-minute reconnect grace. We keep no logs of names, decks, games, or addresses.
As with any internet service, our infrastructure provider (Cloudflare) sees standard connection metadata (such as IP addresses) to deliver traffic, under their privacy policy.
Card text and images are fetched from Scryfall under their terms; those requests go to Scryfall directly.

// Intellectual property

Pay the 2 is unofficial fan content — not affiliated with, endorsed, or sponsored by any trading card game publisher.
The rules engine is an original, clean-room implementation. No publisher's code, card scripts, or data files are used or bundled.
No card art or card text ships with the app. Cards are fetched at runtime from Scryfall's public API under Scryfall's terms and cached only on your device.
The project is free. There is no monetization of any card content.