Terms & Privacy
Terms of use
1. Play money only
- Chips are play money. They have no monetary value and cannot be bought, sold, transferred, withdrawn or exchanged for anything, and there are no prizes.
- BJ21 is not a gambling service. Nothing you win or lose here is real.
- We may reset balances, for example after a bug or when the seed chain rotates.
2. Who can use BJ21
- You must be at least 18 years old, or the age of majority where you live if that is higher.
- Do not use BJ21 where play-money casino games are not allowed.
3. Your account
- Use a real email address you control; it is used to activate the account and to reset your password.
- Keep your password to yourself. You are responsible for what happens under your account.
- Usernames must not be offensive, misleading, or impersonate staff or other people. We may rename or remove such accounts.
4. Fair use
Do not:
- attack, overload or try to break into the service or other accounts;
- create accounts in bulk, automate play, or abuse the chip refill;
- exploit bugs — please report them instead (see Contact);
- harass other players.
We may suspend or delete accounts that break these rules.
5. Provable fairness
Every dealt round can be checked with the in-app verifier, the public round pages
(/g/<hash>) and the offline verifier. These tools let you check
the cards yourself; they are not a promise that the service is always available or error-free.
6. No warranty
BJ21 is provided free and "as is", without any warranty. We may change, pause or shut down the service at any time. To the extent the law allows, we are not liable for any loss arising from its use — and since chips have no value, there is nothing of value to lose.
7. Changes
If these terms change, the new version is posted on this page with a new date. Continuing to use BJ21 means you accept the updated terms.
Privacy policy
What we store
| Data | Why | How long |
|---|---|---|
| Username, email address, chip balance | Your account; email only for activation and password reset | Until the account is deleted |
| Password | Login. Stored only as a salted scrypt hash, never in plain text | Until the account is deleted |
| Login sessions | Keeping you logged in. Stored only as SHA-256 hashes | 7 days, or until you log out or reset your password |
| Activation / reset links | Email verification and password reset. Stored only as SHA-256 hashes, single use | 48 hours (activation) / 30 minutes (reset) |
| Unactivated accounts | Registration that was never confirmed by email | Deleted automatically after 48 hours |
| IP address and username of login / registration attempts | Rate limiting and abuse prevention | 90 days |
| Web server logs (IP address, requested page, browser) | Security and troubleshooting | Rotated automatically, kept for a short time |
| Round history: usernames, seats, bets, cards, seeds and results | Provable fairness — anyone must be able to re-check every round | Permanent and public |
In your browser
BJ21 sets no cookies. It uses your browser's local storage for your login token, your table session, your client seeds and the fairness "pins" (commitments the verifier checks against). Clearing site data removes them.
Who else processes data
- Cloudflare — sits in front of the site (TLS, DDoS protection) and sees your IP address and requests. Its Web Analytics script counts page views, referring sites, countries and page load times without cookies or a personal identifier.
- Brevo — delivers our emails, so it receives your email address and the email content.
- Our hosting provider, which runs the server and database.
Apart from those cookieless visit counts we use no analytics, advertising or tracking services, and we never sell or share data for marketing.
Your choices
- You can ask us to delete your account (see Contact). Your email, password hash and balance are then removed. Rounds you already played stay in the public history, because removing them would break the fairness proofs.
- You can ask what data we hold about your account.
Contact
Questions, feedback, bug reports and deletion requests: [email protected]. For a round that fails verification, include its game hash (from History). For account deletion, write from the email address of the account.
You can also reply in the BJ21 announcement thread on Bitcointalk.