A plain accounting. No lawyer wrote this, and it asks nothing of you but a moment's reading.
Summon is a private board for a Commander pod, kept by Kyle for the people who play at the table. It is free to use. Nothing here is sponsored or advertised, and nothing on this page promotes a business — ours or anyone else's.
If Summon ever charges for anything, it will be said here first, in plain words. Nobody will be charged for something they are already using without being told and asked beforehand. What this page promises about your data does not change with it.
It used to live at riddlehere.com under the name Convoke. It is the same board with the same records, moved to its own address; nothing was copied anywhere to make the move.
It is not indexed by search engines and was never built for an audience beyond the handful of people who were told about it.
Two things, and a third only if you want it. The pod's password, which you are given once and your browser keeps, and a name to put your answers under — whatever you like, a first name, a nickname, two letters. Nothing checks the name and nothing is verified. No account, nothing to sign up for.
You can also say what time you can get there and whether you have a table. Both are optional, both are visible to the rest of the pod, and both are blank until you fill them in.
The third is an email address, and it is entirely optional. Give one and you get a message when a game fills and another if it falls apart. Give none and everything else works exactly the same.
On a small program of ours running on Cloudflare: the name you typed, the days you marked, the time you said you could start, and whether you said you could host. Each person gets their own record, so no two of you can write over one another.
And if somebody has put up an event — a prerelease, a draft night — the board keeps its name, day, time and place, who added it, and whether each person said they were going. All of that is visible to the pod, which is the point of it.
The last two are optional and blank until you set them. A host flag is only ever the word yes or no beside your name — no address is asked for, stored, or shown, because the people who would come already know where you live.
Because of that, the board cannot tell you whether you personally are on the email list. Each device only knows whether it was the one that gave an address — so your phone may say the address is not set up while your laptop says it is, and both are telling the truth about themselves. The shared number beside it is the one fact the board does hold: how many addresses are on the list, never whose. Entering an address that is already on gets you a note saying so, and changes nothing.
If you gave an email address, it is kept separately from all of that — not attached to your name, not attached to your row, not attached to anything on the board. It is encrypted where it sits, so reading the storage on its own does not reveal it.
On your own device, the browser remembers five things and no more: the pod's password, which name you joined as, which filled days it has already shown you, the address you gave if you gave one, and — if you are the one who sets up the board — the admin password. Nothing else is written there, and none of it is a cookie. Clearing this site's data clears all of it, but note that it does not unsubscribe you; see below.
Beside the board there is now The Ledger, where a night gets written down: how many games were played, who won each one, and what each person was playing. It sits behind the same password, uses the same names and the same colours, and is the same handful of people.
It is worth being plain that this is a different kind of record from the board. The board keeps what might happen and forgets it once the day passes. The Ledger keeps what did happen, on purpose and for as long as you keep it — that is the entire point of a record book, and it would be dishonest to add one without saying so.
What it holds is still only three things: a date, who played, and what they called their deck. Deck names are whatever somebody types. No card database is consulted, nothing is looked up anywhere, and no request leaves for anyone else's server — the same as every other page here.
While a night is in progress it is also kept on the phone keeping score, so the sheet still works where the signal does not. It goes up when the connection returns.
Ask and a night goes altogether, or the whole record does: kyle@summonmtg.com.
Nobody using this board. Not the pod, not whoever set it up, not you. The board is never sent an address by the program that holds them — not yours, not anyone's, not a masked or partial one. There is no password that reveals them and no screen that lists them. The address shown back to you on the board is remembered by your own browser, not by the board.
The board will say how many people get email. It cannot say who, because it is never told.
Two parties can, and it would be dishonest not to name them.
Kyle, who runs the board, holds the key that decrypts them and could look.
Resend (resend.com), which delivers the mail. Nothing can deliver a message without knowing where to send it, so Resend is given your address and the text of the message at the moment one goes out. Two things follow, and they are worth saying out loud:
That is the whole list. Nobody else is sent an address, for any reason.
Every message has a link at the bottom. It opens a page with a single button; press it and the address is deleted — not marked, not hidden, removed. No password, no account, no question asked. It works from any device, whether or not you still have the browser you signed up from.
The button is there for a reason. Mail programs and company security scanners often fetch the links in a message before you ever see it, to check them — so a link that acted on its own could take somebody off the list who never touched it. A scanner will follow a link; it will not press a button.
Clearing your browser data does not unsubscribe you. It only makes this board forget the address you gave, so it can no longer show it back to you — the emails carry on. That is on purpose: being able to stop them should never depend on still having the browser you signed up from. The link in any message is how you actually stop, and it always works.
An address that is never confirmed is thrown away within a week. If somebody typed yours by mistake, doing nothing at all is the whole remedy.
When enough people mark the same slot, an email goes out to whoever asked for one, carrying the date and the first names of whoever is in. Another follows if the game later falls apart. Nothing else is ever sent anywhere.
Those emails are sent one at a time, one message per person. Nobody's address appears in anybody else's copy — deliberately, because that is the easiest way in the world to spill a list of addresses and it is done by accident constantly.
If you subscribe a calendar to this board, your calendar app fetches the list of filled days directly. Those requests go to our program on Cloudflare and nowhere else.
The pod, and no one else. The board is behind a shared password — you type it once and your own browser remembers it, so finding the address on its own shows you a password box and nothing more. Reading the board needs it just as much as marking a day does.
Inside the pod there is no separation, and that is deliberate: anyone who knows the password can mark a day under any name on the board. It is a shared whiteboard among friends, not a set of private accounts.
Email is the one exception, and it is the reason addresses are kept away from the names. Because anyone here can act as anyone, an address sitting on a person's row could be read by the pod — or quietly pointed somewhere else. Kept apart, there is no row to open, so there is nothing to read and nothing to repoint.
Treat the password the way you would a house key. If it ever gets somewhere it shouldn't, tell Kyle and it can be changed in a minute — nobody has to reinstall anything, they just type the new one once.
Cloudflare carries the requests, and like every host on earth it sees the address your device is calling from. That is the plumbing of the internet, not a choice of ours. We do not log it, read it, or keep anything derived from it.
The service that delivers the email sees the message it is asked to carry — the date and the first names in it — and the address it is carrying it to, because nothing can deliver a message without knowing either.
Clear your marks and your row goes empty. Ask and the record goes altogether, name and days together: kyle@summonmtg.com. If you gave an address, the link at the foot of any message removes it on the spot without asking anyone.
Everything here is offered as it is, for the ordinary business of working out when four people are free. No promise is made that it is correct, current, or fit for anything in particular, and it is not a contract or an agreement of any kind. Do not lean on it for anything that matters — a flight, an appointment, a commitment you would be sorry to miss. It is a board for arranging card games, and a game that does not happen is the worst it can cost you.
Summon, the Ledger and the keyword book are made by people who like the game, for people who like the game. They are not made by, endorsed by, or connected to Wizards of the Coast in any way.
Summon is unofficial Fan Content permitted under the Fan Content Policy. Not approved/endorsed by Wizards. Portions of the materials used are property of Wizards of the Coast. ©Wizards of the Coast LLC.
The keyword book is written in our own words as a quick reference. It is not the official rules and should never be used to settle an argument — for that, the comprehensive rules are the only thing that counts.
Playfair Display, DM Sans and Press Start 2P, all under the SIL Open Font License 1.1, and all served from this site rather than from anybody else's. Nothing on this page calls out to a third party for anything — no font, script or image is fetched from anybody else's server. (The mail service named above is a separate matter: it is used by the program that sends email, not by this page in your browser.)
Tell us, and it will be put right: kyle@summonmtg.com.