Security and privacy

Your camera and your account stay yours.

Your video and voice never touch CamTable's servers. Games run in an isolated frame that can't reach your Discord page, your session or your token. Here is what we touch, what we never touch, and what we keep for how long, in plain words.

  • No audio or video passes through CamTable's servers
  • Discord gives us only your basic identity; your token is never kept
  • A game can't use a permission it didn't declare

Never

What CamTable never touches

By design, we never see or keep any of these.

  • Your Discord password and token

    CamTable never reads your Discord session token and never asks for your password. When you sign in with Discord, only your basic identity is requested; the tokens Discord hands over are discarded the moment sign-in completes and never written to our database.

  • Your messages

    It doesn't read or send your chat messages or DMs, and it doesn't look at your friends list or your message history.

  • The call's audio and video

    Your camera and microphone are never sent to or recorded on CamTable's servers. Discord carries the call as usual; camera overlays are drawn on your own device.

  • Your email address

    Never requested, collected or stored, not even when you sign in with Discord.

  • Your IP address and browser details

    Your sessions are stored without an IP address or browser details.

  • Ads and tracking

    No analytics, no tracking scripts, no telemetry. We never sell your data or use it for advertising.

What we do touch, plainly

To bring a game into your call, CamTable touches three things on Discord Web. All of it happens in your own tab.

  1. The call's context

    It reads the call's channel and server IDs, the people in the voice channel and your own Discord user ID from the page, to tie rooms to the call and find the video tiles.

  2. Your own camera and microphone

    From the moment Discord Web loads, it sits between your outgoing camera and microphone and the call. It changes nothing unless you mute, or the game, with the permissions you accepted when joining, sets an effect or closes your camera to the call. Whatever a game changes is lifted when the match ends or you leave the room.

  3. The table's sound while you whisper

    While you're in a whisper, it turns the table's sound off in your own tab only, and back on when the whisper ends. Your voice doesn't reach the call meanwhile either. Nothing is sent anywhere, and nothing is recorded.

Discord's terms

Discord's terms restrict modifying its client. Discord may limit or suspend an account that uses CamTable, and CamTable can't prevent or reverse that. Terms of Use, section 3

What it asks Chrome for

When you add CamTable, Chrome asks you to allow five permissions: running on discord.com, this site's install page, saving in your browser, whisper audio and signing in with Discord. It asks for no camera or microphone access: you turn your camera on in Discord, and CamTable never turns it on; Chrome asks for microphone access itself on your first whisper. It doesn't ask for your tabs, your browsing history, your downloads or other sites either.

What each one is for
  • discord.com

    Running on Discord

    It runs only on discord.com and its subdomains. It puts the CamTable panel, the tile badges and the game layer on the page, reads the call's context, and wraps your own outgoing camera and microphone.

  • camtable.app/install

    The addon install page

    A small script runs on this site's install page: when you click an addon link, it passes the addon to CamTable and opens the install consent. It runs on no other page.

  • storage

    Saving in your browser

    Keeps your session token, installed addons, join approvals, recently played games and whether the CamTable panel is open, in this browser.

  • offscreen

    Whisper audio

    Runs whisper audio in a hidden extension page, without touching Discord's call. It records nothing in the background.

  • identity

    Sign in with Discord

    Opens Discord sign-in in Chrome's own sign-in window. It has no access to your Google account or your browser sign-in.

Data flow

What goes where, and how long it stays

During a game, four separate paths leave your browser. On none of them do audio or video pass through CamTable's server.

Your browser

Chrome, on desktop

Your browser has Discord Web open, CamTable inside it, and inside that the sealed-off game frame.

  1. Discord and everyone in the call

    The call's video and audio

    Carried by Discord, as always. CamTable's server never sees it.

  2. Players in your whisper browser to browser

    Whisper audio, and your camera when needed

    A direct connection. No relay server in between.

  3. CamTable server on Cloudflare

    Room state: moves, turns, scores, whisper text

    No audio, no video. Whisper text is deleted when the room closes.

  4. The addon's site the game's author

    The game's page

    Opens in an isolated frame. The site sees your IP address and browser type, never your Discord identity.

Illustration: the four paths out of your browser during a game, what each one carries and where it leads.

For games whose rules run on the addon's server, CamTable's server shares moves and game state with that server, server to server. To set up a whisper, Google's and Cloudflare's public connection (STUN) servers see your IP address too. Third parties

What we keep, and for how long

We keep what it takes to run a game, and no more.

While you play
The open room record (channel and server ID, the host's name) and whisper text are deleted when the room closes. When you start a room on a Discord server with the Community plan, the fact that the check passed is kept for 10 minutes; your roles are never kept.
After the game
Move logs are kept for 30 days and match history (your account ID, display name, scores and results) for 1 year, then deleted automatically.
Your account
Your Discord identity (user ID, display name, avatar address) or guest name, and your addon collection, stay until you delete your account. A guest account is deleted after 30 days without activity, or when you sign out.
Your browser
Your session token, installed addons, one-time join approvals, recently played games and whether the CamTable panel is open stay in this browser only. If you sign in on this site, its session token stays in this browser too, until you sign out. Games can't read any of it.

This is a summary; the Privacy Policy is what binds us. The detail is there: Information We Collect, Data Retention Periods.

When you delete your account, your account, sessions and installed addon list are permanently deleted, and your name in other players' match history becomes “Deleted player”. Account deletion and your rights

Games

Every game in its own box

A game is an ordinary web page from its author's site. CamTable opens it in your browser, inside a frame sealed off from everything else.

  • A frame with no origin

    The game's page runs in a sandboxed frame with an opaque origin. It can't reach the Discord page, your Discord session, cookies, CamTable's browser storage or Chrome's extension APIs.

  • One door

    The game talks to CamTable only through the SDK's checked message bridge. If it tries a permission it didn't declare, the bridge refuses.

  • It never sees your camera or hears you

    The game says where cameras go; CamTable draws the picture. Your camera's pixels and your voice never reach the game's page.

  • It doesn't know who you are

    The game sees you under a new random player ID every match. Your Discord ID, server and channel never reach it. It sees your name and avatar only if it declared the profile permission.

The six permissions a game can ask for

Seeing players' names and avatars, drawing on the video tiles, putting you in a whisper, changing the picture your camera sends, closing your voice to the call, and closing your camera to the call while showing it to the players you whisper with. The addon declares its permissions and a game can't use one it didn't declare; whatever closes your voice or camera is lifted when the match ends or you leave the room. Each permission in detail, in the developer docs.

A game can close your microphone or camera, but it can never open one you closed. Neither does CamTable: it never turns your camera on.

Whispers

The game sets up whispers, and can't listen in

A whisper is a private chat the table can't hear: handy in hidden-role and team games.

Illustration: your own tile. When a game closes your camera to the table, your tile says so and tells you who can still see it; in a whisper, it also names who you're with.
  • Only the game starts one

    A game with the whisper permission sets them up: its rules group some players together, or one player sends another a request. Only the players in a whisper hear about it; the table doesn't know unless the game makes its whispers public.

  • Voice goes player to player

    Your voice goes straight to the players in your whisper, browser to browser. If the game has closed cameras to the table, your camera goes the same way, to them alone. CamTable's server only helps the browsers find each other; it never hears a word. Because the connection is direct, the player you whisper with sees your IP address, and on very strict networks a whisper may fail to connect.

  • The game never knows what's said

    The game knows who whispers with whom, never what they say. Whisper text goes from the server to the panels of the players in the whisper only, never to the game's page or engine. It stays on the server only while the room is open and is deleted when it closes.

  • You hold the switches

    In a whisper you can close your microphone, close your camera to the whisper and turn the whisper down. Push-to-talk (the V key) is the default. When a game closes your camera to the table, your own tile tells you who can still see it. On your first whisper CamTable opens a small tab where Chrome asks for microphone access; say no and you still stay in the whisper, listening and writing.

Addons

Who brings the games, and who can stop them

CamTable is a platform: games arrive as addons.

  • Addons by other authors

    Each one runs on its author's own site and loads from there. CamTable doesn't host, review, endorse or promote community addons; you install one only when someone gives you its link. Only install addons from people you trust.

  • The Official Addon

    Published and hosted by CamTable itself: CamTable Official Games. It carries the Resmî (Official) badge in the panel, and CamTable is responsible for it. Today it offers 15 games.

    See the official games

  • The blocklist

    To stop an addon everywhere, CamTable keeps a public blocklist. A listed addon stops for new installs, new rooms, joins and remote engine calls, usually within a few minutes of the list being updated. A game already open in a running room may keep going until that room ends.

    Join a blocked addon's room and you see Bu oyun açılmadı (this game didn't open) with the reason; you stay in the call, and the game never loads for you.

Report an addon

If an addon infringes your rights, email the notice address with the details the Terms of Use list: takedown@camtable.app. CamTable reviews every notice and, if it accepts one, adds the addon to the blocklist.

Your controls

Change your mind any time

No email needed. It's all in the CamTable panel, a few clicks away.

  • Delete your account

    In the CamTable panel, press your avatar, pick Hesabımı sil (Delete my account) and confirm.

    Your account, sessions and installed addon list are permanently deleted. In other players' match history, your name becomes “Deleted player”.

  • Close your guest account

    In the CamTable panel, press your avatar and pick Çıkış yap (Sign out).

    Your guest account and its session are deleted. Connecting Discord deletes the guest account too.

  • Remove an addon

    In Eklentilerim (My addons), press Kaldır (Remove) on its row.

    It leaves your collection and its approval goes with it, so its next room asks you again.

  • Withdraw an approval

    In Eklentilerim, under Onayladığın eklentiler, press Onayı geri al.

    It applies from your next join; a match in progress carries on.

  • Don't join at all

    On the join prompt, press Vazgeç (Cancel).

    You stay in the call, the game never loads for you, and the host isn't told.

  • Leave the room

    Press Odadan ayrıl (Leave room) in the game's top bar.

    Whatever the game changed on your microphone and camera is lifted.

Set up the table. Your camera stays yours.

Joining is free, even as a guest. Your voice and video never reach our servers. Remove CamTable whenever you like.

Today it runs on Discord Web in Chrome, on desktop.