Security and privacy
Your camera and your account stay yours.
Your video and voice never touch CamTable's servers. Games run in an isolated frame that can't reach your Discord page, your session or your token. Here is what we touch, what we never touch, and what we keep for how long, in plain words.
- No audio or video passes through CamTable's servers
- Discord gives us only your basic identity; your token is never kept
- A game can't use a permission it didn't declare
Never
What CamTable never touches
By design, we never see or keep any of these.
-
Your Discord password and token
CamTable never reads your Discord session token and never asks for your password. When you sign in with Discord, only your basic identity is requested; the tokens Discord hands over are discarded the moment sign-in completes and never written to our database.
-
Your messages
It doesn't read or send your chat messages or DMs, and it doesn't look at your friends list or your message history.
-
The call's audio and video
Your camera and microphone are never sent to or recorded on CamTable's servers. Discord carries the call as usual; camera overlays are drawn on your own device.
-
Your email address
Never requested, collected or stored, not even when you sign in with Discord.
-
Your IP address and browser details
Your sessions are stored without an IP address or browser details.
-
Ads and tracking
No analytics, no tracking scripts, no telemetry. We never sell your data or use it for advertising.
What we do touch, plainly
To bring a game into your call, CamTable touches three things on Discord Web. All of it happens in your own tab.
-
The call's context
It reads the call's channel and server IDs, the people in the voice channel and your own Discord user ID from the page, to tie rooms to the call and find the video tiles.
-
Your own camera and microphone
From the moment Discord Web loads, it sits between your outgoing camera and microphone and the call. It changes nothing unless you mute, or the game, with the permissions you accepted when joining, sets an effect or closes your camera to the call. Whatever a game changes is lifted when the match ends or you leave the room.
-
The table's sound while you whisper
While you're in a whisper, it turns the table's sound off in your own tab only, and back on when the whisper ends. Your voice doesn't reach the call meanwhile either. Nothing is sent anywhere, and nothing is recorded.
Discord's terms
Discord's terms restrict modifying its client. Discord may limit or suspend an account that uses CamTable, and CamTable can't prevent or reverse that. Terms of Use, section 3
What it asks Chrome for
When you add CamTable, Chrome asks you to allow five permissions: running on discord.com, this site's install page, saving in your browser, whisper audio and signing in with Discord. It asks for no camera or microphone access: you turn your camera on in Discord, and CamTable never turns it on; Chrome asks for microphone access itself on your first whisper. It doesn't ask for your tabs, your browsing history, your downloads or other sites either.
What each one is for
-
discord.comRunning on Discord
It runs only on discord.com and its subdomains. It puts the CamTable panel, the tile badges and the game layer on the page, reads the call's context, and wraps your own outgoing camera and microphone.
-
camtable.app/installThe addon install page
A small script runs on this site's install page: when you click an addon link, it passes the addon to CamTable and opens the install consent. It runs on no other page.
-
storageSaving in your browser
Keeps your session token, installed addons, join approvals, recently played games and whether the CamTable panel is open, in this browser.
-
offscreenWhisper audio
Runs whisper audio in a hidden extension page, without touching Discord's call. It records nothing in the background.
-
identitySign in with Discord
Opens Discord sign-in in Chrome's own sign-in window. It has no access to your Google account or your browser sign-in.
Data flow
What goes where, and how long it stays
During a game, four separate paths leave your browser. On none of them do audio or video pass through CamTable's server.
Your browser
Chrome, on desktop
Your browser has Discord Web open, CamTable inside it, and inside that the sealed-off game frame.
-
Discord and everyone in the call
The call's video and audio
Carried by Discord, as always. CamTable's server never sees it.
-
Players in your whisper browser to browser
Whisper audio, and your camera when needed
A direct connection. No relay server in between.
-
CamTable server on Cloudflare
Room state: moves, turns, scores, whisper text
No audio, no video. Whisper text is deleted when the room closes.
-
The addon's site the game's author
The game's page
Opens in an isolated frame. The site sees your IP address and browser type, never your Discord identity.
For games whose rules run on the addon's server, CamTable's server shares moves and game state with that server, server to server. To set up a whisper, Google's and Cloudflare's public connection (STUN) servers see your IP address too. Third parties
What we keep, and for how long
We keep what it takes to run a game, and no more.
- While you play
- The open room record (channel and server ID, the host's name) and whisper text are deleted when the room closes. When you start a room on a Discord server with the Community plan, the fact that the check passed is kept for 10 minutes; your roles are never kept.
- After the game
- Move logs are kept for 30 days and match history (your account ID, display name, scores and results) for 1 year, then deleted automatically.
- Your account
- Your Discord identity (user ID, display name, avatar address) or guest name, and your addon collection, stay until you delete your account. A guest account is deleted after 30 days without activity, or when you sign out.
- Your browser
- Your session token, installed addons, one-time join approvals, recently played games and whether the CamTable panel is open stay in this browser only. If you sign in on this site, its session token stays in this browser too, until you sign out. Games can't read any of it.
This is a summary; the Privacy Policy is what binds us. The detail is there: Information We Collect, Data Retention Periods.
When you delete your account, your account, sessions and installed addon list are permanently deleted, and your name in other players' match history becomes “Deleted player”. Account deletion and your rights
Games
Every game in its own box
A game is an ordinary web page from its author's site. CamTable opens it in your browser, inside a frame sealed off from everything else.
-
A frame with no origin
The game's page runs in a sandboxed frame with an opaque origin. It can't reach the Discord page, your Discord session, cookies, CamTable's browser storage or Chrome's extension APIs.
-
One door
The game talks to CamTable only through the SDK's checked message bridge. If it tries a permission it didn't declare, the bridge refuses.
-
It never sees your camera or hears you
The game says where cameras go; CamTable draws the picture. Your camera's pixels and your voice never reach the game's page.
-
It doesn't know who you are
The game sees you under a new random player ID every match. Your Discord ID, server and channel never reach it. It sees your name and avatar only if it declared the profile permission.
The six permissions a game can ask for
Seeing players' names and avatars, drawing on the video tiles, putting you in a whisper, changing the picture your camera sends, closing your voice to the call, and closing your camera to the call while showing it to the players you whisper with. The addon declares its permissions and a game can't use one it didn't declare; whatever closes your voice or camera is lifted when the match ends or you leave the room. Each permission in detail, in the developer docs.
A game can close your microphone or camera, but it can never open one you closed. Neither does CamTable: it never turns your camera on.
Whispers
The game sets up whispers, and can't listen in
A whisper is a private chat the table can't hear: handy in hidden-role and team games.
-
Only the game starts one
A game with the whisper permission sets them up: its rules group some players together, or one player sends another a request. Only the players in a whisper hear about it; the table doesn't know unless the game makes its whispers public.
-
Voice goes player to player
Your voice goes straight to the players in your whisper, browser to browser. If the game has closed cameras to the table, your camera goes the same way, to them alone. CamTable's server only helps the browsers find each other; it never hears a word. Because the connection is direct, the player you whisper with sees your IP address, and on very strict networks a whisper may fail to connect.
-
The game never knows what's said
The game knows who whispers with whom, never what they say. Whisper text goes from the server to the panels of the players in the whisper only, never to the game's page or engine. It stays on the server only while the room is open and is deleted when it closes.
-
You hold the switches
In a whisper you can close your microphone, close your camera to the whisper and turn the whisper down. Push-to-talk (the V key) is the default. When a game closes your camera to the table, your own tile tells you who can still see it. On your first whisper CamTable opens a small tab where Chrome asks for microphone access; say no and you still stay in the whisper, listening and writing.
Addons
Who brings the games, and who can stop them
CamTable is a platform: games arrive as addons.
-
Addons by other authors
Each one runs on its author's own site and loads from there. CamTable doesn't host, review, endorse or promote community addons; you install one only when someone gives you its link. Only install addons from people you trust.
-
The Official Addon
Published and hosted by CamTable itself: CamTable Official Games. It carries the Resmî (Official) badge in the panel, and CamTable is responsible for it. Today it offers 15 games.
-
The blocklist
To stop an addon everywhere, CamTable keeps a public blocklist. A listed addon stops for new installs, new rooms, joins and remote engine calls, usually within a few minutes of the list being updated. A game already open in a running room may keep going until that room ends.
Join a blocked addon's room and you see Bu oyun açılmadı (this game didn't open) with the reason; you stay in the call, and the game never loads for you.
Report an addon
If an addon infringes your rights, email the notice address with the details the Terms of Use list: takedown@camtable.app. CamTable reviews every notice and, if it accepts one, adds the addon to the blocklist.
Your controls
Change your mind any time
No email needed. It's all in the CamTable panel, a few clicks away.
-
Delete your account
In the CamTable panel, press your avatar, pick Hesabımı sil (Delete my account) and confirm.
Your account, sessions and installed addon list are permanently deleted. In other players' match history, your name becomes “Deleted player”.
-
Close your guest account
In the CamTable panel, press your avatar and pick Çıkış yap (Sign out).
Your guest account and its session are deleted. Connecting Discord deletes the guest account too.
-
Remove an addon
In Eklentilerim (My addons), press Kaldır (Remove) on its row.
It leaves your collection and its approval goes with it, so its next room asks you again.
-
Withdraw an approval
In Eklentilerim, under Onayladığın eklentiler, press Onayı geri al.
It applies from your next join; a match in progress carries on.
-
Don't join at all
On the join prompt, press Vazgeç (Cancel).
You stay in the call, the game never loads for you, and the host isn't told.
-
Leave the room
Press Odadan ayrıl (Leave room) in the game's top bar.
Whatever the game changed on your microphone and camera is lifted.
Set up the table. Your camera stays yours.
Joining is free, even as a guest. Your voice and video never reach our servers. Remove CamTable whenever you like.
Today it runs on Discord Web in Chrome, on desktop.
The legal text
This page is a summary. What binds us is the Privacy Policy and the Terms of Use, published in Turkish and in English.
Read on