THE FINE PRINT · NO TRICKS

PRIVACY

What Yamraj Plays keeps about you, why, for how long, and how to make it vanish. Short version: as little as possible, and you can delete it yourself any time.

Last updated 22 October 2026

TL;DR

We store as little as possible. No email, no password, no DMs, no server list.
Discord tokens are used once at login and never stored. Discord keeps our app on your Authorized Apps list (so CHECK AGAIN is a quick hop): remove it any time in Discord → User Settings → Authorized Apps.
Your soul file stays until you delete it. One button, instant: SOUL FILE → DELETE MY DATA.
Not logging in is completely fine. Browse, play, find eggs: progress just stays in this browser.
Logged in and in YamaLok? You're on the Hall of Souls leaderboard on the home page (display name, avatar, level, achievements). One switch in your soul file hides you.

Who we are

Yamraj Plays, the YouTube gaming channel and this website. Questions, requests or complaints about your data: send us Instagram DM (@ig_yamrajplays).

What we store and why

What	Exactly	Why
Discord login	Your Discord id, username, display name, avatar reference, whether you're in YamaLok (plus when you joined), when you last logged in, and when (and how: at login, by our bot, or by the team) we last checked YamaLok.	One soul per entry, your soul file, the YamaLok quest, and keeping giveaway tickets fair.
Session	A random session id (stored only as a hash) and when it expires.	Keeps you logged in: until 30 days after your last visit (each visit renews it), and never longer than 180 days after you logged in with Discord.
Giveaway entries	Your Discord display name and handle, the quests you ticked, your referral code, the code of the friend who referred you (if any), and a hashed version of your IP address. The IP itself is never stored or shown.	Running fair draws: the team sees your name and handle (so does everyone, on the winners board and on stream, if you win), plus anti-bot limits and spotting alt-account farms.
Fan art	The image (re-encoded, metadata stripped), title, artist name, the optional contact you type, its review status, and a hashed version of your IP address.	Moderation, the corkboard, and anti-spam limits on uploads.
Progress	Achievements, XP, sections seen and easter eggs found.	Syncing your soul file across devices, and the leaderboard.
Hall of Souls (leaderboard)	Your board entry: achievements counted on the board and your level (worked out from your progress), the day your soul file opened, legendary badges, when each achievement reached our server, whether you hid yourself, anti-cheat flags and moderation notes if the team reviewed your entry, and which secrets our server checked for you (which egg, when, how).	The leaderboard, and keeping it fair.
Not stored, worked out when needed	Your Discord account's creation date (it is encoded in your Discord id).	Spotting brand-new alt accounts.

What we never get: your email, password, messages or your list of servers. We only ask Discord for two things: who you are (identify) and whether you're in YamaLok (guilds.members.read). Discord's access token is used once during login and then thrown away: we never store it, and nothing of ours can use it again. We no longer revoke it at Discord, because revoking also removes our app from your Discord account, and then every CHECK AGAIN would ask you to approve the app from scratch. So Discord lists Yamraj Plays under User Settings → Authorized Apps; press Deauthorize there whenever you like (your next login simply asks again). Your Discord name and avatar refresh when you log in. Between logins we only look up one thing: whether you're still in YamaLok (and since when), through our own bot in that server, when you open your soul file or a vault, when you enter, when you press CHECK AGAIN (or come back from joining YamaLok), when the friend who recruited you opens their soul file, at a giveaway draw, or when you open the leaderboard. Nothing else about your Discord account is read, and Discord data is used for nothing but the features on this page.

Codes you whisper to the Ledger or the console, and the paths of pages that don't exist, are checked by our server and not stored anywhere (not even in logs).

What's public, and what the team sees

Public: approved fan art (its title and artist name). If you win a giveaway: your Discord username in the Hall of Winners and on stream.
The Hall of Souls (home page): while you're logged in, in YamaLok and not hidden, your Discord display name, avatar, level, achievement count, legendary badges and the date your soul file opened are public there. Your Discord id is never shown, and your @username only stands in for the name if you haven't set a Discord display name (avatars are passed through our site). Hide yourself any time: SOUL FILE → HALL OF SOULS → Hide me from the board. Leave YamaLok and you're off the board at your next YamaLok check (a login, CHECK AGAIN or our membership check), and at the latest a week after the last check that saw you in YamaLok; your achievements stay in your soul file. If a soul file looks tampered with, that soul is hidden from the board until a moderator has a look.
The channel team (admin) sees, next to your entries and submissions: your Discord id, username, display name, avatar, YamaLok status and join date, your Discord account's age, the fan-art contact you typed, and anti-alt hints such as "same connection as the friend who referred you" (the hashed IP itself is never shown). For each draw the team also sees the draw log: which tickets were pulled and whether each YamaLok check passed. For the leaderboard, the team sees when your achievements reached us and the anti-cheat's flags; the team can hide an entry or restart its count. That's for running the draw, contacting winners, keeping the board fair and stopping alt farms.

In your browser

yp_member your login session (HttpOnly: page scripts can't read it), until 30 days after your last visit (at most 180 days after you logged in).
yp_mh a "maybe logged in" hint with no data in it, so logged-out pages never ask the server.
yp_oauth exists for 10 minutes while you log in (it ties Discord's answer to your click).
yp_flash one message for the next page ("welcome back"), gone after 60 seconds.
yp_boot remembers you saw the boot screen this week.
Local storage: your settings, progress and giveaway receipts. It never leaves the browser unless you log in.
yp:eggs:proofs (local storage): signed proofs of secrets our server checked, so they count in your soul file at your next sync while logged in. yp:eggs:board: the last rank this browser saw (for an egg). Neither leaves the browser except the proofs, at that sync.

Where it lives

Supabase: the database and private file storage.
Vercel: hosting, and cookieless Vercel Web Analytics (page views, no profiles).

No ads, no selling, no other trackers. Analytics events never carry your id or name. These providers may store data outside India.

How long

Your soul file stays until you delete it.
Sessions end 30 days after your last visit, and 180 days after your Discord login at the latest; expired ones are purged automatically.
Entries of past giveaways stay as the record of the draw, until you delete your data.
Your board entry, its flags and notes, and your checked secrets stay with your soul file.

Delete everything

Log in, open your soul file, press DELETE MY DATA and type the confirmation. It is instant. Or ask us by Instagram DM (@ig_yamrajplays).

Active giveaways: your entry disappears at once (no tickets, can't be drawn), with the bonus tickets friends earned you. Friends you referred keep their entries.
Past wins: the Hall of Winners keeps the slot but shows "A soul who moved on". A prize not yet delivered is forfeited.
Fan art: files and records are gone; a pinned piece leaves the corkboard within about 15 minutes. Anything already shown on stream can't be un-streamed.
Also gone: your progress copy, your Hall of Souls entry (with its review notes and checked secrets) and every session (you're logged out everywhere). The leaderboard drops you at once; copies cached on the way to visitors catch up within about two minutes, and a cached copy of your avatar picture within about 15 minutes.
On Discord's side: we hold no Discord token to cancel, so Yamraj Plays stays in your Discord account's Authorized Apps until you remove it there (User Settings → Authorized Apps → Deauthorize).
Not deleted by the button: progress and secret proofs stored in this browser (unless you tick "also wipe this browser"), short-lived rate-limit counters, hosting logs kept by Vercel and Supabase for their usual short periods, database backups until they roll over, and entry lists the team already downloaded for a past draw (ask us and we delete those by hand).

Logging in again later starts a new soul file. If this browser still holds progress (you didn't tick "also wipe this browser"), that progress is merged into the new soul file on that login.

Not logging in is fine

Browse, play, find eggs, watch videos: all of it works without an account. Your progress just stays in this browser. Logging in is only needed to enter giveaways and pin fan art (one soul, one Discord: that's what keeps draws fair).

Kids

Discord requires its users to be 13 or older. Under 18? Check with a parent or guardian before you log in. Each giveaway states its own age rule. The leaderboard shows your Discord display name: if it's your real name, consider hiding yourself from the board (Soul File).

Changes

If what we store changes, this page changes first, and the date at the top moves. Last updated 22 October 2026.

Open my soul file Ask on Instagram