1. What we collect
- What you submit to claim a seat: X handle, link, tagline, optional avatar. This content is public by design — that's the whole point of the Site.
- Your email address, collected by Stripe at checkout: used for your receipt (by Stripe) and for game notifications from us (seat confirmed, dethroned, refunded).
- Contact form data: your email and message, used only to reply to you.
- Technical data: our security logs store IP addresses only in irreversibly hashed form (for rate limiting and abuse prevention). Server logs are kept briefly for operations.
2. What we do NOT do
- No advertising trackers, no analytics cookies, no fingerprinting.
- No sale or sharing of your data with anyone, except the processors below.
- The only cookie is a technical session cookie required for the Site to function (security tokens).
3. Processors
- Stripe (payments) — sees your payment details; we never do. Stripe privacy policy.
- OpenAI (automated moderation) — receives the text and avatar you submit, solely to check them before payment.
- Mailjet (email delivery) — processes your email address to deliver our notifications.
- IONOS (hosting, EU).
4. Retention
Leaderboard history (handles, amounts, dates) is kept as long as the Site exists — it is the game's public record. Emails tied to transactions are kept for the duration of our legal accounting obligations. Moderation logs and hashed-IP rate-limit data are pruned regularly.
5. Your rights
Under the GDPR you may request access, rectification or erasure of your personal data (erasure of public game history may be balanced against our legitimate interest in board integrity — we'll anonymise where full deletion isn't possible). Write to us via the contact form. You may also lodge a complaint with the CNIL (France).