What we keep.
Almost nothing. Afterlife Arena is an unofficial, fan-made simulator for the Cyberpunk trading card game. It has no ads, no analytics and no tracking, we make no money from it, and we don't sell or share anything about you. The other disclaimers are on the disclaimers page.
Signing in
Online play (tables against a rival, draft and pre-release events, online tournaments and the dice Link between two phones) needs a Google or Discord sign-in. Solo, vs AI, the tutorial and the dice on one phone don't.
- From Google we ask only for your basic profile and read your account number and first name.
- From Discord we ask only to identify you and read your account number and display name.
- Both are kept in one signed cookie on your device (
aa_s, 30 days). We keep no account database and no copy of your profile on our side. The access token Google or Discord gives us is used once, at sign-in, and thrown away. - We never see your email address, password, friends, servers or messages.
Playing online
- Games connect the two players' browsers directly (WebRTC). Card moves, chat and dice go between you and your rival, not through us.
- To find each other, browsers use the free public matchmaking server run by PeerJS, which sees your IP address while you connect.
- When two networks can't connect directly, traffic goes through a relay run by Cloudflare. Each relay pass is labelled with your account number, so Cloudflare's usage reports to us show how much data each account relayed. We use that only to stop abuse, and can block an account that misuses the relay. Each account also has a daily limit on relayed data; past it, the relay stops for that account until midnight UTC, and play goes on without it where the two networks allow.
- Before your device joins a host, our server gives it a player pass that lasts 15 minutes, and the host's device asks our server whether the pass is good. The host learns only a random-looking tag that stays the same for your account, so it can keep your seat for you and keep out a player it removed. It never learns your name on Google or Discord, your email or your account number.
- To limit abuse, our server briefly counts relay requests, passes and pass checks per IP address and per account. These counts expire within a day. Each device also limits how many connections and how much data it accepts from the others, and hangs up on a device that floods it.
Online tournaments
Tournaments are the one place we keep something on our side, in a Cloudflare D1 database, so a tournament survives its host closing the tab or changing devices.
- For each tournament: its name, settings and bracket (pairings, results, standings and the tournament log), the host's random-looking tag, and the labels the host gives reserved seats.
- For each player who takes a seat: their tag, the callsign they play under and the decklist they bring. Never a Google or Discord name, email or account number.
- While it runs, the host's device sends us the latest state of each unfinished match, so play can resume where it stopped. Those match states are deleted as each match ends, and all of them when the tournament finishes.
- A tournament is deleted with its seats and matches when its host deletes it, or after 60 days without a change if it never started or was never finished. A finished tournament's bracket and standings stay until its host deletes it.
- Matches still run between the players' and the host's browsers (above); the host's device sees every card in the matches it hosts, as with any table you host.
Stored on your device
Your decks, collection, callsign, settings and the state of a game in progress are saved in your browser's local storage. They stay on your device and are never sent to us, except the decklist you bring to an online tournament.
The site moved from afterlife-arena.pages.dev to afterlifearena.com. Browser storage belongs to one address, so the old address hands your saved data to the new one inside the link itself (the part after #, which browsers never send to any server). It is copied once and nothing new is collected.
Hosting and prices
The site runs on Cloudflare Pages, which handles each request the way any web host does (see Cloudflare's privacy policy). Card prices come from TCGplayer through our server; no information about you is sent with those requests.
Your choices
- Sign out (at the bottom of the home page) deletes the cookie from your device.
- To remove Afterlife Arena's access altogether, remove it from your Google account's connections or from Discord's Settings > Authorized Apps.
- You can give up a tournament seat before it starts, which deletes your seat and decklist. A host can delete their tournament at any time.
- Clearing this site's data in your browser removes everything stored on your device.
Contact
Questions about privacy: [email protected].