update changelog and privacy text

WebContent/game.jsp

@@ -96,58 +96,22 @@ boolean allowBlankCards = injector.getInstance(Key.get(new TypeLiteral<Boolean>(
   <h3>A <a href="http://cardsagainsthumanity.com/">Cards Against Humanity</a> clone.</h3>
   <p>
     This webapp is still in development. There will be bugs, but hopefully they won't affect gameplay
-    very much. To assist with development, <strong>all traffic on this server <em>may</em> be
+    very much.
-    logged.</strong>
   </p>
   <p>
     If this is your first time playing, you may wish to read <a href="index.jsp">the changelog and
     list of known issues</a>.
   </p>
-  <p tabindex="0">Most recent updates: 1 June 2018, 5 April 2018, and 27 March 2018:</p>
+  <p>
+    Your computer's IP address will <strong>always</strong> be logged when you load the game client.
+    It is not tied in any way to your username, except possibly if a server error occurs. Gameplay
+    results are logged permanently, but without information identifying you.
+  </p>
+  <p tabindex="0">Most recent update: 3 September 2018:</p>
   <ul>
-    <li>Play history links are now provided for users and games. Assuming you have not opted out
+    <li>All chat and fill-in-the-blank cards have been disabled. If you're still out of the loop,
-    from persistent play history logging and still have your persistent ID cookie, you can view
+    <a href="https://gist.githubusercontent.com/ajanata/07ededdb584f7bb77a8c7191d3a4bbcc/raw/e76faacc19c2bb598a1a8fd94b9ebcb29c5502e0">
-    every game you've played on the device you are connecting from since the beginning of March.
+    here's why.</a></li>
-    Regardless of opting out or not, you can view every game you've played in the current session,
-    or every round in a game, with the links provided when you log in or join a game.</li>
-    <li>Bugfixes from last week's release (most notably, no more "undefined" before your name if you
-    reload the page).</li>
-    <li>Minor updates to the chat filter settings to make it less strict, and an additional chat
-    filter (you cannot use the same word too many times in the same message).</li>
-    <li>Back-end support for other features which will be enabled soon.</li>
-    <li>You may now provide a password-like identification code when connecting to positively
-    identify yourself and make it difficult for someone to impersonate you. Details are on
-    <a href="https://github.com/ajanata/PretendYoureXyzzy/wiki/Identification-Codes">the GitHub
-    wiki.</a><ul>
-      <li><strong>This is optional, and if you choose to not do so, everything will work the same as
-      it always has.</strong></li>
-      <li><strong>Do not use a password you use on any other site.</strong></li>
-      <li>The value you enter in the identification code box will be combined with your username
-      and a server secret and converted into an 11 character code.</li>
-      <li>Users that have an identification code will have a + in front of their name in chat.
-      Hover your mouse over their message to see their 11 character code.</li>
-      <li>You may also use the <span style="font-family:monospace">/whois</span> command in the chat
-      to view information about a user, including their 11 character code.</li></ul></li>
-    <li>Images on CardCast cards is now supported in a safe manner. Cards will need updated to work
-    with this format. Information on how to use it is on the
-    <a href="https://github.com/ajanata/PretendYoureXyzzy/wiki/Cardcast#images-on-cards">GitHub
-    wiki.</a></li>
-    <li><strong>Automatic chat moderation has been added.</strong> This is fairly crude, and limits
-    the following behavior:<ul>
-      <li>(Global only, if enabled) Messages may not contain large amounts of non-Latin characters
-      (emoji spam, etc.).</li>
-      <li>(Global only, if enabled) CAPS LOCK IS NOT ALLOWED EITHER.</li>
-      <li>(Global only, if enabled) Once your message is a certain length, you have to actually use
-      multiple words.</li>
-      <li>Global and game chats now have different messages-per-unit-time settings and counters.
-      </li>
-      <li>You may not repeat the same message multiple times in a row.</li>
-      <li>Certain characters and words will cause a message to be silently dropped (that is, instead
-      of returning an error message to the person who typed it like all of the previous things will,
-      the server will just ignore the message altogether so that user does not know their message
-      was ignored). There are currently two things on this list, and no, I'm not telling you what
-      they are, and no, they're not actually in Git either.</li>
-    </ul></li>
   </ul>
   <div id="nickbox">
     <label for="nickname">Nickname:</label>

WebContent/index.jsp

@@ -52,75 +52,19 @@ to, for instance, display the number of connected players.
 <h3>A Cards Against Humanity clone.</h3>
 <p>
   This webapp is still in development. There will be bugs, but hopefully they won't affect gameplay
-  very much. To assist with development, <strong>all traffic on this server <em>may</em> be
+  very much.</strong>
-  logged.</strong>
 </p>
 <p>
-  The name you enter and your computer's IP address will <strong>always</strong> be logged when you
+  Your computer's IP address will <strong>always</strong> be logged when you load the game client.
-  load the game client. Chat and gameplay may also be logged.
+  It is not tied in any way to your username, except possibly if a server error occurs. Gameplay
+  results are logged permanently, but without information identifying you.
 </p>
 <p>Recent Changes:</p>
 <ul>
-  <li>1 June 2018:<ul>
+  <li>3 September 2018:<ul>
-    <li>Play history links are now provided for users and games. Assuming you have not opted out
+    <li>All chat and fill-in-the-blank cards have been disabled. If you're still out of the loop,
-    from persistent play history logging and still have your persistent ID cookie, you can view
+    <a href="https://gist.githubusercontent.com/ajanata/07ededdb584f7bb77a8c7191d3a4bbcc/raw/e76faacc19c2bb598a1a8fd94b9ebcb29c5502e0">
-    every game you've played on the device you are connecting from since the beginning of March.
+    here's why.</a></li>
-    Regardless of opting out or not, you can view every game you've played in the current session,
-    or every round in a game, with the links provided when you log in or join a game.</li>
-  </ul></li>
-  <li>5 April 2018:<ul>
-    <li>Bugfixes from last week's release (most notably, no more "undefined" before your name if you
-    reload the page).</li>
-    <li>Minor updates to the chat filter settings to make it less strict, and an additional chat
-    filter (you cannot use the same word too many times in the same message).</li>
-    <li>Back-end support for other features which will be enabled soon.</li>
-  </ul></li>
-  <li>27 March 2018:<ul>
-    <li>You may now provide a password-like identification code when connecting to positively
-    identify yourself and make it difficult for someone to impersonate you. Details are on
-    <a href="https://github.com/ajanata/PretendYoureXyzzy/wiki/Identification-Codes">the GitHub
-    wiki.</a><ul>
-      <li><strong>This is optional, and if you choose to not do so, everything will work the same as
-      it always has.</strong></li>
-      <li><strong>Do not use a password you use on any other site.</strong></li>
-      <li>The value you enter in the identification code box will be combined with your username
-      and a server secret and converted into an 11 character verification code.</li>
-      <li>Users that have an verification code will have a + in front of their name in chat.
-      Hover your mouse over their message to see their 11 character verification code.</li>
-      <li>You may also use the <span style="font-family:monospace">/whois</span> command in the chat
-      to view information about a user, including their 11 character verification code.</li></ul></li>
-    <li>Images on CardCast cards is now supported in a safe manner. Cards will need updated to work
-    with this format. Information on how to use it is on the
-    <a href="https://github.com/ajanata/PretendYoureXyzzy/wiki/Cardcast#images-on-cards">GitHub
-    wiki.</a></li>
-    <li><strong>Automatic chat moderation has been added.</strong> This is fairly crude, and limits
-    the following behavior:<ul>
-      <li>(Global only, if enabled) Messages may not contain large amounts of non-Latin characters
-      (emoji spam, etc.).</li>
-      <li>(Global only, if enabled) CAPS LOCK IS NOT ALLOWED EITHER.</li>
-      <li>(Global only, if enabled) Once your message is a certain length, you have to actually use
-      multiple words.</li>
-      <li>Global and game chats now have different messages-per-unit-time settings and counters.
-      </li>
-      <li>You may not repeat the same message multiple times in a row.</li>
-      <li>Certain characters and words will cause a message to be silently dropped (that is, instead
-      of returning an error message to the person who typed it like all of the previous things will,
-      the server will just ignore the message altogether so that user does not know their message
-      was ignored). There are currently two things on this list, and no, I'm not telling you what
-      they are, and no, they're not actually in Git either.</li>
-    </ul></li>
-  </ul></li>
-  <li>1 March 2018:<ul>
-    <li>Added reconnection to the card database server after it restarts. This really should have
-    been done years ago... This is what caused all of the errors while trying to start a game with
-    locally-stored decks.</li>
-    <li>The "view cards" page has been re-enabled.</li>
-    <li>Full games sort to the bottom of the game list.</li>
-    <li>Added more metrics logging. Sounds boring, but it's important for the long-term viability
-    of these servers.</li>
-    <li>All official CAH cards through Q3 2017 have been added, and deck names and contents have
-    been shuffled accordingly. Any cards not currently in any official decks are now removed.
-    The PAX panel sets have also been removed.</li>
   </ul></li>
   <li><a href="changelog.html">Older entries.</a></li>
 </ul>

WebContent/privacy.html

@@ -14,16 +14,9 @@ policies.</p>
 <h1>Temporary logs</h1>
 <p>There are two kinds of temporary logs.</p>
 <h2>Server monitoring logs</h2>
-<p>Logs which contain your chosen user name and IP address (and, on rare occasion, things you say in
+<p>Logs which contain your IP address are collected and kept for a period of a few weeks, to assist
-chat) are collected and kept for a period of a few weeks, to assist with monitoring the server.
+with monitoring the server. These logs do not correlate to your username and are not willingly
-These logs are not willingly shared with third parties, and to date have not been shared with third
+shared with third parties.</p>
-parties.</p>
-<h2>Automatic moderation logs</h2>
-<p>If the automatic moderating software takes action against you, your user name, IP address, and
-the chat message that triggered said action are logged. These logs are retained for approximately
-one month for evaluating the performance of the automatic moderation. These logs are not willingly
-shared with third parties, and to date have not been shared with third parties. <strong>You may not
-be informed that the automatic moderating software has taken action against you.</strong></p>
 <h1>Permanent logs</h1>
 <p>Game play details are kept on a permanent basis, to analyze which cards are the most and least
 popular. The data in these logs may be made publicly available once an interface is completed, and
@@ -44,8 +37,8 @@ tracked between multiple sessions.</p>
   <li>Information about your device including its operating system (Windows, Android, etc.) and type
   (phone, tablet, PC, etc.).</li>
 </ul>
-<p><strong>At no point is your IP address, chosen user name, or chat shared with anyone for any
+<p><strong>At no point is your IP address, chosen user name, or chat willingly shared with anyone
-purpose. Fill-in-the-blank card text is, however, logged and shared.</strong></p>
+for any purpose. Fill-in-the-blank card text is, however, logged and shared.</strong></p>
 <h1>Google Analytics</h1>
 <p>Yeah, who doesn't use that these days? I honestly don't look at it very often. It's cool to see
 where people are getting linked to this from. You can block it if you really want to, but I'd prefer