Your play, your privacy.

Saffron Draw requires no account name, email address, wallet or payment information to play. One essential HttpOnly cookie, saffron-session, lets the server find your free points and saved hand. The server stores a hash of the random token, shuffled decks, dealt and final cards, kept positions, points played, returned points and stop status. Records are separate from other Forty Dept. games. Undealt cards are never sent to the browser.

Unsubmitted keep choices are saved in sessionStorage in your current tab, linked to the visible hand reference. They are only preferences until you press Draw. Storage may be unavailable or cleared by your browser; check the KEEP labels before drawing. Sound and motion controls apply to the current page; sound starts off.

Clearing the essential cookie can remove access to your saved hand. There are no advertising trackers, third-party analytics or automatic support uploads. The game briefly uses IP information in memory to limit excessive requests. Hosting providers may process connection information to deliver and protect the site.

If you contact support, your email, message and information you choose to include are used to answer and follow up. Closed support cases are reviewed for deletion after 90 days unless needed for an unresolved issue, transaction record or security investigation. Brand email uses Plunk. Game records and private support records are not published.

For questions or deletion requests, email support@fortydept.com. Include only a visible hand reference if relevant. We verify ownership before sharing or changing private records. Do not send cookies or other secrets.