Privacy
Who is responsible
Marc Villain runs this site and is the controller of your data. Reach us through the contact form.
What we use your data for
Only to run the service: signing you in, keeping and showing your games and statistics, sending the emails you ask for, and keeping accounts secure. No advertising, no profiling, and nothing is sold or shared with third parties. The legal basis is the service you sign up for, and for the security log our legitimate interest in protecting accounts.
Who processes it
Your data stays with our host, and the emails we send go through our email provider. Both act only on our instructions and are in the European Union.
Accounts
An account stores your email address, your display name, your preferences and the games you save. There is no password: you sign in with a code or link sent by email, which works once, expires quickly and is deleted after one day.
Quick scores
A quick score stays in this browser until you start a new game. Nothing about it is sent to us unless you ask for the results by email or save the game.
Emails
Every email we send, sign-in codes and results included, is deleted from our sending queue 7 days after it goes out, or after its last failed attempt. An address entered to receive the results of a quick score is used for that email only, and the game itself is not kept.
Live games
A live game is deleted one hour after it ends, and at the latest 12 hours after it starts. Before then, a signed-in player can save it to their account. Starting one without an account records a keyed fingerprint of your network address, never the address itself, deleted after 24 hours.
Photos
Photos are re-encoded, which removes their location and camera data. A photo is deleted with its game, and with the account that added it.
Shared links
A read-only link to a game works until its owner revokes it or the game is deleted. We keep only a fingerprint of the link, not the link itself.
Inactive accounts
We note the day you last used your account. After 23 months without use we send one warning email, and signing in once keeps the account. Otherwise it is deleted at 24 months, never less than one month after the warning.
Deleting your data
You can delete your account at any time from your profile, and an inactive account is deleted the same way. Your games, their photos and links, your friendships and your seat requests are erased. Games owned by other players keep your pseudo as plain text, without a link to you.
Security log
Sign-ins and changes are recorded in a security log with the account id and network address. Entries are deleted after 12 months, including after the account itself is gone.
Cookies
Your sign-in session, your language choice and, during a live game, a cookie that remembers your seat or host role for up to 12 hours. No advertising or tracking cookies.
Your rights
Under the GDPR you can access your data, correct it, delete it, get a copy in a portable format, and restrict or object to its use. Your name and preferences can be changed and your account deleted from your profile. For anything else, including a copy of your data, write to us and we answer within one month. You can also complain to your data protection authority (the CNIL in France).