Privacy policy

Data controller

Actiward, reachable at legal@actiward.gg. The legal notice has its own page.

What is collected

• Account: Discord id, display name and profile picture, sent by Discord when you sign in (the "identify" scope only — never your e-mail address).
• Game: games played, scores, Daily attempts, XP, level, badges, current streak, chosen name and portrait.
• Technical: your IP address is read on each request to limit abuse, but it is never stored in the database.
• Audience measurement: Google Analytics sets cookies and records page views, referrers and device type.

Purposes and legal bases

• Running the games, leaderboards and your progression: performance of the service you asked for by creating an account.
• Detecting cheating and protecting the site from abuse: legitimate interest.
• Understanding how the site is used: legitimate interest in improving the service.

Cookies

• Session cookie (Auth.js): required to stay signed in. Lifetime: 30 days.
• Language cookie (NEXT_LOCALE): remembers the chosen language. Lifetime: 1 year.
• Google Analytics cookies (_ga): audience measurement. Lifetime: up to 13 months. You can refuse them in your browser settings, or with Google's opt-out add-on.

Recipients

Discord (sign-in), Google (audience measurement, with possible transfers outside the European Union covered by standard contractual clauses) and the site's host. No data is sold or handed to anyone else.

Retention

Your data is kept as long as your account exists. Deleting the account immediately erases the account, games, scores, XP and badges. Only the Discord id of a banned account is kept, so that the ban cannot be worked around.

Your rights

You have the right to access, correct, erase and port your data, and to object to its processing. Name and portrait are changed directly in the account settings, where deletion also lives. For anything else, write to legal@actiward.gg. You may also lodge a complaint with your data protection authority (in France, the CNIL).