What data we hold and why
Updated
This is a summary. The privacy policy is the full and binding text.
What we hold, and for how long
| When you | We hold | For how long |
|---|---|---|
| Play as a guest | A random token, your rounds, answers and timing. No name, email or IP stored with them | 90 days if no account claims it, or until you delete it |
| Have an account | Email, name, password hash, language, marques, club, your acceptances, sessions | Until you delete it. Unconfirmed accounts: 30 days |
| Play with an account | A pseudonym, XP, level, streak, rating and results | Until you delete it |
| Read the newsletter | Email, language, marques, consent records with IP, delivery records, referral counts | Until you leave. Then the address alone stays on a suppression list |
| Buy a plan | Plan, status, Stripe reference, purchase consent, invoices. Card details go to Stripe, never to us | Six years after purchase. Issued invoices stay at Stripe |
What we do not do
No advertising trackers and no analytics cookies. We do not sell your data, and newsletter sponsors receive none. No automated decision with legal or similarly significant effects on you. See cookies and storage.
Who helps us
DigitalOcean (hosting, in Amsterdam), SendGrid (email), Stripe (payments, once on sale), and Google Gemini (drafting the newsletter from public news, with no data about you). Some are based in the United States. Where data leaves the EEA, it goes under the safeguards the GDPR allows.
Who is responsible
Aurum Imperium, S.L.U., tax ID B19947407, Carrer Consell de Cent 415, Principal 2n, 08009 Barcelona. There is no data protection officer. Write to [email protected].