Privacy policy

Your Panache Blanc account is kept by the Panache Blanc platform at panacheblanc.com, and signs you in to every Panache Blanc game. Contact for anything here: contact@panacheblanc.com.

What we keep, and why

• Your e-mail address: to sign you in, send you the sign-in e-mails you ask for and notices about your account's security, and keep one account per address. No other player ever sees it, and no game ever receives it; only the designer sees it, in the admin console (below).
• If you sign in with Google: Google's identifier for your Google account, to recognise it next time. Never your Google name, picture or any Google token; we ask Google for your e-mail address only.
• Your Panache Blanc name: it is public, the same in every game. If it is offensive, the designer may refuse it: a provisional name (Joueur- and six characters) replaces it at once, and you choose a new one at your next sign-in. The refused name, and the provisional one once you have chosen another, stay reserved for good, each recording the account it was taken from while that account exists.
• Your language and your time zone: the language you want (English, French or Spanish; the platform's own pages exist only in English and French) and a time zone such as Europe/Paris, guessed from your browser when you sign up and changed on your account page, so that the platform and every game speak your language and give times in your time zone. Every Panache Blanc game receives them, each time it signs you in and in its daily check of the accounts it holds; deleting your account erases them, here and in every game.
• Your country: the country you choose, as a two-letter code such as FR, guessed from your browser when you sign up, from its time zone or, failing that, the region of its preferred language, with no lookup of a postal address or of your IP address; you pick or correct it on the same form, and change it on your account page. An account created before the platform asked for it holds none until its player chooses one, and is asked for it on its account page. It is public: your profile shows it under your name, and every Panache Blanc game receives it, each time it signs you in and in its daily check of the accounts it holds. A game may show it to other players, beside your name or on a leaderboard by country (a game that ranks by country records it with each score); deleting your account erases it, here and in every game.
• When you declared being 15 or older, the version of this policy you accepted, and when your account was created.
• Your profile: a page at panacheblanc.com/players/ and your account's id, which only signed-in players can open and search engines are told not to index. It shows your Panache Blanc name, your country (when your account holds one) and, for each game, the lines the game sends for you (each character's name, its world, one score, a link to its sheet, and the date the game last changed them, never an hour), then a « Palmarès » of the characters that ended, with their final score, the game's word for why and the date they ended. Never your e-mail address, a ban or its reason, your language or your time zone. You cannot hide any of it. While your account is banned, it says only that it is not available.
• The accesses your account holds: for a game, a named access that the designer gives or withdraws (for instance « bêta space », to play a game's beta), with when it was given, so that the game opens to you what it opens. The platform sends each game its own accesses only, each time it signs you in, in its daily check of the accounts it holds, and as soon as one changes; no other player sees them. A game decides what an account without an access sees; deleting your account erases them here, and each game erases its copy.
• Which games you play: for each game, that it once signed you in (no time of sign-in), the version of the last lines it sent and when they last changed, so that a game writes only on the profile of an account it signed in. Kept also in the record that survives a restore, with no character's text.
• Your sessions: for each device you are signed in on, a fingerprint of its secret, when you signed in, when you last came (to the hour), a label made only of your browser's family and operating system (for instance « Firefox/Windows »), and how it was opened: by a sign-in e-mail, or with Google, then which Google account and when Google last proved it.
• Sign-in e-mails: for each one, the address, fingerprints of its link and its code, its state, and when it was asked for and expires.
• Rate-limit counters: keyed fingerprints, never in clear, of the address asked for, of the browser and of your network address, with the time of each request, to stop floods of sign-in e-mails.
• Account events: when an account is deleted, banned or unbanned, signs out everywhere, or changes its name, or when an access of a game is given or withdrawn, so that every game applies it and shows every name as it is now; an access's event goes to its game alone, with the accesses the account then holds for it.
• The admin console: the designer alone, signed in with Google, can read an account's sheet: its name, id, creation date, standing (with a ban's reason and date), whether Google is attached, its e-mail address in clear, the names refused from it, the accesses it holds for each game, and the admin journal's entries about it. Nothing is listed: an account is found by its exact name or its exact address. It serves to ban, lift a ban, refuse an offensive name or give or withdraw an access, and to answer your requests.
• The admin journal: each grant or revocation of the superadmin role, ban, unban, forced rename and new name chosen after one, and each access given or withdrawn (with its game and its access), with its time, the account's id, where it came from (the console, the platform's machine or the player), and a ban's reason or the old name; and each consultation: a search (the name searched for; for a search by address, only the account found, never the address typed), a sheet read, the list of accounts or the list of bans read.
• A console action waiting for Google: the designer's and the target account's ids, the action, a ban's reason, the game and the access of an access given or withdrawn, and the state of the account the designer saw, to apply it once after the designer signs in with Google again.

Our logs name an account by its id only, never by its address. Legal bases: providing the service you sign up for, your country, your profile and your accesses included (GDPR 6.1.b); protecting you and the games, the admin console and its journal included (legitimate interest, 6.1.f).

How long we keep it

• Your account: as long as it exists. Deleting it deletes it at once, with its sessions, its language, its time zone and its country; your name stays reserved, linked to no account, so that no one can pass for you (only the form in which names are compared is kept, lower case with look-alike letters merged, not the name as you wrote it), and a record that the account id was deleted is kept so that a restored backup deletes it again.
• Your profile: each game's current lines until it stops sending them; the palmarès until you delete your account, with no limit on its length. Deleting your account erases your profile and every line at once. If a backup is ever restored, characters that ended after it and that a game no longer keeps may be lost.
• Your accesses: until the designer withdraws them or you delete your account; deleting it erases them at once, with the events that named them.
• Which games you play: until you delete your account, then erased everywhere.
• Sessions: they end after 30 days without a visit, and are erased then, with how they were opened.
• Refused and provisional names: reserved for good; the account each was taken from only while that account exists.
• Sign-in e-mails: each works 15 minutes; its record is erased about an hour later.
• Rate-limit counters: erased within the hour.
• Account events: kept 30 days, then erased.
• The admin journal: consultations are kept 12 months, then erased, and at once when the account they found or read is deleted; a search that found no account keeps the name searched for those 12 months. Actions are kept with no time limit; once the account is deleted, by its id only, its names, a ban's reason and the game and access an action named erased (accesses given or withdrawn are actions).
• A console action waiting for Google: at most 10 minutes (10 more once Google has proved the session again), erased with the designer's session or the target account.
• The record of deletions, bans, unbans, renames, the superadmin role and the accesses: for each account id, what happened, when and from where, kept with no time limit so that a restored backup applies them again, never brings back a refused name, a revoked role or a withdrawn access, and tells each game the accesses the account then holds; a ban's reason only while the account exists, and likewise a rename's names, the game and the access of an access given or withdrawn, and the Google account a grant binds.
• Backups: kept 30 days, then deleted; those of each game our server hosts too, each in a copy of its own.

Where it is kept

In the European Union: on our server at Fly.io in Paris, and its backups at Cloudflare R2 in the EU jurisdiction.

Who processes it for us

• Fly.io: hosts the platform's server, in Paris.
• Cloudflare: stores the backups (R2, EU jurisdiction) and answers for the domain name.
• Scaleway (Transactional Email, France): delivers sign-in e-mails and notices; it sees your address and the e-mail.
• Google: only if you choose to sign in with Google.

No advertising, no analytics, no tracking. Your data is never sold. The only cookies are those the platform needs to work: your session, a sign-in or sign-up in progress, and for an hour the profile you asked to see before signing in.

Age

Accounts are for players aged 15 or older. You declare your age; we do not verify it. If you declare being under 15, no account is created and nothing you typed is kept.

If you lose your e-mail address

You cannot change your account's address yet. If you lose access to it and have not attached Google to your account, you lose your account.

Your rights

You may ask to see, correct, receive or erase your data, or object to or limit its use, by writing to contact@panacheblanc.com. You can delete your account from your account page. You may complain to the CNIL, France's data protection authority.