Privacy policy

Controller

[to be completed]. Processing is governed by the Swiss Federal Act on Data Protection (FADP) and, for players in the European Union, by the General Data Protection Regulation (GDPR).

Data processed and purposes

Account: username, email address, password (stored only as an irreversible hash, argon2), language, sign-up date and date of acceptance of the Terms — to create and secure the account and contact you about the service (performance of contract).

Game: cards, boosters, Footprints, auctions and bids, wishlist, friends, gifts, rankings, pioneer challenges, notifications — to run the Game (performance of contract). The username appears publicly in rankings, auctions and the Hall of pioneers.

Payments: Stripe customer and subscription identifiers, offers bought, amounts and dates — to deliver purchases, manage the subscription and meet accounting obligations (contract, legal obligation). Card data is processed only by Stripe.

Technical and security: IP address, browser type and access times in server logs, anti-bot proof (ALTCHA captcha, computed in your browser, no third-party service) — for security, abuse prevention and diagnostics (legitimate interest).

Browser notifications (if you enable them): the subscription address provided by your browser — to notify you (consent, which you can withdraw at any time in the Game or in your browser settings).

Diagnostics: when an error occurs or to measure how fast the Game is, a technical report (error message, page or feature concerned, device and browser type, loading times) linked to your player identifier, without IP address, email or username — to fix bugs and keep the Game fast (legitimate interest). Kept for 90 days at most.

No data is sold or used for targeted advertising or profiling. The Game uses no third-party analytics.

Cookies and local storage

The Game only uses a session cookie strictly necessary for logging in, and the browser’s local storage for your preferences (language, last map view). There are no advertising or analytics cookies, so no consent is required.

Recipients and transfers

Hosting: Infomaniak Network SA, in Switzerland. Payments: Stripe, as reseller of purchases, processes your payment and billing data as an independent controller under its own policy (stripe.com/privacy), including in the United States on the basis of standard contractual clauses and the Data Privacy Framework; the Publisher only receives the customer identifier, offer, amount and date. Network: Cloudflare, Inc., which routes and protects the site’s traffic (IP address, requests), including in the United States on the basis of the Data Privacy Framework and standard contractual clauses. Diagnostics: Sentry (Functional Software, Inc.), data hosted in the European Union (Germany). Notifications: your browser’s push service (Google, Mozilla, Apple or Microsoft) relays the messages. Any emails: the Publisher’s email provider.

Data is only disclosed to authorities where required by law.

Retention

Account and game data: as long as the account exists; deleted within 30 days of a deletion request (auctions and gifts involving other players are anonymised). Technical logs: limited period, deleted automatically by rotation (usually a few weeks). Payment data: 10 years (Swiss accounting obligation, Art. 958f CO). Notification subscriptions: until disabled or expired.

Your rights

You may request access to your data, its rectification, erasure or portability, restriction of or objection to processing, and withdraw your consent at any time, by writing to [to be completed]. You will receive an answer within 30 days.

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, in the European Union, your country’s data protection authority.

Minors

The Game is open from age 13. Minors’ data is processed like other players’ data, without advertising or profiling. A legal guardian may ask at any time for a minor’s account to be deleted.

Security

Encrypted connections (HTTPS), hashed passwords, restricted admin access, regular backups. As no measure is infallible, you will be informed of any data breach posing a high risk.

Changes

This policy may change; the current version is published on this page (version of 2026-10-06.6).