Privacy Policy

Ringmaster · Last updated: 11 July 2026

This Privacy Policy explains what information Ringmaster collects, why, and what choices you have. Ringmaster is an AI-narrated party game played inside Discord and on the web. Ringmaster is an independent product and is not affiliated with, endorsed by, or sponsored by Discord Inc.

1. Who we are

"Ringmaster", "we", "us", or "our" refers to mhmm s.r.o., the operator of the Ringmaster game and its related services (the "Service"). We are the data controller for the personal data described in this policy.

For any privacy question or request, contact us at info@mhmm.cz.

2. Summary

To play, we use your Discord identity (user ID, display name, avatar) via the Discord identify permission.
Live game data (who is in the room, roles, votes) is held only in server memory and is deleted shortly after the game ends or the server restarts. We do not currently store it in a database.
Your display name and in-game events are sent to our AI providers (Google, ElevenLabs) so the narrator can speak about the game.
We do not sell your personal data.
Some data described below (email, accounts, analytics) is planned and clearly marked "Planned". It is not collected until this policy is updated to say so.

3. Information we collect

3.1 Discord account information

When you launch or join the game, Discord asks you to authorize the identify permission. With your authorization we receive:

Your Discord user ID
Your username / display (global) name
Your avatar image URL

We use the identify scope only. We do not request your email, servers, friends, messages, or connections through Discord.

3.2 Gameplay data

While a game is running we process game state — the room, the players present, assigned roles, actions, votes, and outcomes. This lives in server memory for the duration of the session and is automatically discarded shortly after the game ends, the room becomes empty, or the server restarts. It is not written to a database or long-term storage.

3.3 Technical and connection data

Your IP address, used transiently to enforce rate limits and prevent abuse of our endpoints.
Basic connection metadata (WebSocket session, timestamps) needed to keep you seated and to reconnect you.
Standard server logs, which may contain IP addresses and request metadata, kept for a limited period for security and debugging.

3.4 Email address (Planned)

We plan to introduce optional accounts. If and when we do, we may collect and store your email address (and, if you sign in through Discord, your Discord-provided email) to create your account, secure it, send you service and product communications, and let you carry progress across sessions. We will update this policy and, where required, ask for your consent before doing so.

3.5 Usage analytics (Planned)

We plan to measure how the game is used (for example: games started and completed, number of players, feature usage, retention) so we can decide what to build. This may involve event logging and analytics cookies or similar technologies. Where required by law, we will ask for your consent and provide an opt-out before enabling non-essential analytics.

4. How we use your information

To run the game: seat you, show your name and avatar to other players, and adjudicate the rules.
To generate narration: your display name and in-game events are used to produce spoken and captioned commentary.
To keep the Service secure and reliable: rate limiting, abuse prevention, debugging.
(Planned) To provide accounts, communicate with you, and understand product adoption.

5. Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on:

Contract — to provide the game you asked to play.
Legitimate interests — to keep the Service secure, prevent abuse, and improve it, balanced against your rights.
Consent — for optional features such as marketing email and non-essential analytics. You may withdraw consent at any time.

6. AI narration and sub-processors

To deliver the game we share limited data with the service providers below. They process it on our behalf and are not permitted to use it for their own purposes.

Provider	Purpose	Data shared
Discord Inc.	Identity & the platform the game runs in	OAuth identity (per your authorization)
Railway	Hosting & infrastructure	All request/connection traffic, logs
Google (Gemini API)	Generates narration text	In-game events, including player display names
ElevenLabs	Text-to-speech voice	Narration text, which may include player names
[EMAIL / COMMS PROVIDER] (Planned)	Account & email delivery	Email address
[ANALYTICS PROVIDER] (Planned)	Product analytics	Usage events

Please note that display names you choose (or that come from your Discord profile) are included in text sent to our AI providers. Avoid putting sensitive information in a display name.

7. Data retention

Gameplay data: held in memory only; deleted shortly after the game ends or the server restarts.
Logs / technical data: kept for a limited period for security and debugging, then discarded.
Email / account data (Planned): kept until you delete your account or ask us to remove it.

8. Your rights

Depending on where you live (including under the GDPR, UK GDPR, and CCPA/CPRA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal data. To exercise any right, contact info@mhmm.cz. We will respond as required by applicable law. You also have the right to complain to your local data protection authority.

Because most gameplay data is ephemeral and not stored, we may have little or no data about you after a session ends. To revoke our access to your Discord identity, remove the app from Discord → User Settings → Authorized Apps.

9. Children

The Service is not directed to children under 13, or under the minimum age required by Discord's Terms of Service and the laws of your country (whichever is higher). We do not knowingly collect data from children below that age. If you believe a child has provided us personal data, contact info@mhmm.cz and we will delete it.

10. International transfers

We and our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for such transfers.

11. Security

We take reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. Material changes — especially before we begin collecting email addresses or enabling analytics — will be reflected here with an updated "Last updated" date, and where required we will seek your consent.

13. Contact

mhmm s.r.o.
Email: info@mhmm.cz
Support server: https://discord.gg/8ChxRZwGp