privacy

what we keep, why, for how long, and who sees it. operator: impressum.

what we keep, why, and for how long

what	why, and on what basis	kept for
your account: username, when you joined, the ways you sign in, and the email address GitHub or Google shared	to run the account you asked for (Art. 6(1)(b) GDPR)	until you delete it
if you sign in with an email: the address and a hash of your password, never the password	to let you sign in and reset it (Art. 6(1)(b))	until you delete it or remove that login
if you sign in with 42: your 42 user id, login, display name and the link to your 42 profile picture. your campus is checked at each sign-in, to decide which rounds you can play, and not kept	to run your account and the 42 round (Art. 6(1)(b))	refreshed at each sign-in; login, name and picture link until you delete your account. the 42 user id stays with your past 42 rounds, so 42's coalition points for them stay correct
your guesses, one per round, and when you made them	to play the game; they are secret until the round closes, then counted into its results; shown with your name only if it won (Art. 6(1)(b))	for good, so past results stay true; a deleted account's rounds, in both the global and the 42 round, stay under deleted- and a number
your points and bets: every credit and charge in the global round, and each bet with its odds and result	to keep score in the game (Art. 6(1)(b)). points are only for fun and can't be bought, sold or exchanged	for good, so pots stay correct; a deleted account's history stays under deleted- and a number
a keyed hash of the network you signed up and guessed from, never the address	to spot one person, or one script, playing many accounts, together with when accounts sign in and guess (Art. 6(1)(f), our interest in a fair game). the hash mixes in the month, so hashes from different months cannot be matched to each other	a guess's hash: 90 days. the sign-up hash: as long as the account. both go when you delete it
if a moderator warns or bans an account: why, and when	to keep the game fair and know who was warned (Art. 6(1)(f))	until the account is deleted; the reason goes with it
your network address, in memory only	to slow down password guessing and floods of sign-ups (Art. 6(1)(f))	up to 1 hour, never written down
sign-in sessions	to keep you signed in (Art. 6(1)(b))	30 days, or until you sign out
emailed links (confirm, reset)	to prove the address is yours (Art. 6(1)(b))	24 hours (confirm) or 1 hour (reset), then deleted
a count of mails sent	to stay within the mail service's limits (Art. 6(1)(f))	2 days
server logs: errors, sign-ins, warnings and bans, by account number and sometimes username or 42 login. no network addresses and no record of the pages you visit	to keep the site running and safe (Art. 6(1)(f))	overwritten as they fill: at most 30 MB, usually a few days

what

why, and on what basis

kept for

your account: username, when you joined, the ways you sign in, and the email address GitHub or Google shared

to run the account you asked for (Art. 6(1)(b) GDPR)

until you delete it

if you sign in with an email: the address and a hash of your password, never the password

to let you sign in and reset it (Art. 6(1)(b))

until you delete it or remove that login

if you sign in with 42: your 42 user id, login, display name and the link to your 42 profile picture. your campus is checked at each sign-in, to decide which rounds you can play, and not kept

to run your account and the 42 round (Art. 6(1)(b))

refreshed at each sign-in; login, name and picture link until you delete your account. the 42 user id stays with your past 42 rounds, so 42's coalition points for them stay correct

your guesses, one per round, and when you made them

to play the game; they are secret until the round closes, then counted into its results; shown with your name only if it won (Art. 6(1)(b))

for good, so past results stay true; a deleted account's rounds, in both the global and the 42 round, stay under deleted- and a number

your points and bets: every credit and charge in the global round, and each bet with its odds and result

to keep score in the game (Art. 6(1)(b)). points are only for fun and can't be bought, sold or exchanged

for good, so pots stay correct; a deleted account's history stays under deleted- and a number

a keyed hash of the network you signed up and guessed from, never the address

to spot one person, or one script, playing many accounts, together with when accounts sign in and guess (Art. 6(1)(f), our interest in a fair game). the hash mixes in the month, so hashes from different months cannot be matched to each other

a guess's hash: 90 days. the sign-up hash: as long as the account. both go when you delete it

if a moderator warns or bans an account: why, and when

to keep the game fair and know who was warned (Art. 6(1)(f))

until the account is deleted; the reason goes with it

your network address, in memory only

to slow down password guessing and floods of sign-ups (Art. 6(1)(f))

up to 1 hour, never written down

sign-in sessions

to keep you signed in (Art. 6(1)(b))

30 days, or until you sign out

emailed links (confirm, reset)

to prove the address is yours (Art. 6(1)(b))

24 hours (confirm) or 1 hour (reset), then deleted

a count of mails sent

to stay within the mail service's limits (Art. 6(1)(f))

2 days

server logs: errors, sign-ins, warnings and bans, by account number and sometimes username or 42 login. no network addresses and no record of the pages you visit

to keep the site running and safe (Art. 6(1)(f))

overwritten as they fill: at most 30 MB, usually a few days

who else sees it

everyone, signed in or not, sees your username next to the global rounds you won, on the leaderboards (points and wins) and in shared links. the 42 round, with your 42 login, is only shown to signed-in 42 students. what you picked is only ever shown as a count per number. your username is public; pick one you are happy to show, and change it on your account page.
moderators, named by the operator, see the patterns above for the global round: shared networks as hashes, when accounts sign in and guess, what was picked in rounds that have closed, and your points history line by line, as on your points page. never today's guesses.
42 (42 intra, EU), GitHub (GitHub Inc., USA) and Google (Google LLC, USA) learn that you signed in here, when you choose them. GitHub and Google transfer data to the USA under the EU-US Data Privacy Framework.
42 Vienna's coalition points service, for the 42 round only: the 42 user ids of who played each round and who won it, so 42 can award coalition points.
Resend (Plus Five Five, Inc., trading as Resend, USA) delivers the mails we send: confirming your address, password resets, “you already have an account”, and a moderator’s warning. it sees your address and the mail, and stores them in the USA as our processor (Art. 28 GDPR), under the EU-US Data Privacy Framework and the EU standard contractual clauses.

the site runs on our own server, with no hosting company in between. the robot check on the sign-up form is our own: a small puzzle your browser solves, checked here. no outside service sees it. nothing is loaded from other sites: no outside fonts, scripts or images. we don't sell or share anything else, and there are no ads, analytics or trackers.

age

you need to be 14 or older to sign in or make an account: younger than that, Austrian law (§ 4 DSG, Art. 8 GDPR) needs a parent’s consent, which we don’t collect. if we learn an account belongs to someone younger, we delete it.

fair play

one person, one account, played by hand. accounts run by a script, or several accounts used to take numbers so another one wins, are not allowed. moderators look for the patterns above. a flagged account gets one warning by email; if it goes on, it is banned and marked, and rounds it bent can be called off or have their points taken back.

cookies and storage

ig42_session: keeps you signed in. set when you sign in; strictly necessary.
ig42_oauth_state: set when you start signing in with 42, GitHub or Google, so the sign-in only finishes in the browser that started it. gone after 15 minutes at most; strictly necessary.
ig42_held: holds a number you picked before signing in, for up to an hour, so it can be locked once you do. strictly necessary; only set if you pick a number while signed out.
your browser's local storage remembers that you dismissed the result of a round, so it doesn't pop up again.

nothing is set before you start signing in or pick a number, so there is no cookie banner. the sign-in providers set their own cookies on their own sites, not on this one.

your rights

you can see, correct, take with you or delete what we hold about you, and object to what we do on the basis of our interests. most of it is on your account page: rename, remove a login, or delete the account, which removes your username, logins, email, password, 42 login and name, network hashes and any warning or ban reason straight away. your rounds and points stay, under deleted- and a number, so past results and pots still add up. for anything else, write to the contact in the impressum.

you can also complain to the Austrian data protection authority: Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at.