Privacy policy

01 — Data controller

The data controller is Mateus Lopes, a private individual who publishes the site.

For any question or request about your data: contact@in-evasion.com.

02 — Data collected

Account data: name, email address and profile picture sent by Discord or Google when you sign in, and your account id with that provider.

Game data: games created, teams joined, codes tried, steps solved, hints requested, credits, board items, and the ratings and reviews you publish about a game.

Messages: what you write in the global, team, faction and game master chats.

Files: the images and files you upload to a game or a board.

Connection data: the IP address and browser tied to your session, and the server’s technical logs.

No sensitive data is asked for. Do not put any in your games.

03 — Why, and on what basis

• Running the site (sign-in, creating, running and playing games): performance of the terms of use.
• Securing the site and preventing abuse, such as brute-forcing codes: legitimate interest.
• Answering your messages and your data requests: legitimate interest and legal obligation.
• Showing ads to pay for the site: your consent, which you can withdraw at any time.

Your game data is never sold or rented, and never used to target ads. The site uses no audience measurement tool.

04 — Who can see it

In a game, other participants see what the game needs: your name, avatar, team, progress, and your messages in the channels you write in. Game masters also see the events of the games they run.

Outside the site, only these are involved:

• The host of the server and database: IONOS SARL, 7 place de la Gare, BP 70109, 57201 Sarreguemines Cedex, France (groupe IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Allemagne).
• Discord or Google, only to sign you in, depending on which one you pick.
• Google Ireland Ltd (Google AdSense), only if you accept ads: Google then receives your IP address, the pages you visit and the advertising identifiers stored in your browser, to pick and measure ads. If you refuse, no ad script is loaded at all.

If a game embeds a YouTube video, your browser loads it straight from YouTube (see the cookie page).

The reviews you publish about a game are visible to everyone, with your name and profile picture. You can edit or delete them at any time from the game page.

No other third party receives your data.

05 — How long it is kept

• Account: as long as it exists, then deleted within 30 days of your request.
• Sign-in sessions (IP address, browser): until they expire, then erased automatically within the hour.
• Games, progress and messages: as long as the creator keeps the game, then deleted with it.
• Uploaded files: as long as the game uses them, and deleted on request to contact@in-evasion.com.
• Server technical logs: a few weeks at most, through automatic rotation.
• Database backups: 14 days, then erased.

06 — Where the data lives

The server, database, files and backups are hosted in the European Union.

Discord and Google, which you use to sign in, are US companies: the data they process on their side falls under their own privacy policies.

07 — Your rights

The GDPR lets you ask for:

• Access to your data and a copy in a reusable format.
• Correction of inaccurate data.
• Erasure of your data.
• Restriction of processing, or objection to processing based on legitimate interest.

Write to contact@in-evasion.com: you get an answer within one month. You can also complain to the CNIL (www.cnil.fr), the French data protection authority.

08 — Security

Traffic is encrypted (HTTPS), only the publisher can access the server, and the database is backed up every day.

If a data breach puts you at risk, the CNIL is notified within 72 hours and you are told as soon as possible.

09 — Minors

The site is not meant for children under 15. Below that age, creating an account needs a parent or guardian’s agreement.

If you think a child created an account without that agreement, write to contact@in-evasion.com: the account will be deleted.

10 — Changes to this policy

This policy evolves with the site. The date at the top of the page shows the latest revision.

Any change that significantly affects your rights is announced on the site before it applies.