Privacy policy

Last updated

This policy covers the tools listed on tools.atlesque.dev and the websites they run on (subdomains of atlesque.dev and atlesque.com, and semina.be). Among Us Detective is not covered here and has its own privacy information. It explains what data is processed when you use them and what you can do about it.

Who is responsible

Atlesque Media VOF is the controller for the personal data described here. For any privacy question or request, email [email protected].

Visit analytics (only with your consent)

When you first open a tool, it asks whether it may count your visit. Only if you choose Allow does the tool load Cloudflare Web Analytics. If you choose No thanks, or your browser sends a Global Privacy Control signal, nothing is loaded.

With your consent, Cloudflare records for each page view:

  • the page address and the page you came from (referrer);
  • your browser, operating system and device type, taken from the user-agent;
  • your country, derived from your IP address;
  • how quickly the page loaded (performance timings and Core Web Vitals).

Cloudflare Web Analytics sets no cookies, stores nothing in your browser and, according to Cloudflare, does not fingerprint visitors or track them across websites. We only see aggregated statistics, such as visits per page and per country; we cannot see who you are. We use them to learn which tools are used and to fix slow pages.

Legal basis: your consent (Article 6(1)(a) GDPR, and the consent rule for reading information from your device in the ePrivacy Directive as implemented in Belgian law). You can withdraw it at any time with the small shield button in the corner of each tool, or a Privacy settings link where a tool has one. Withdrawing does not affect visits counted before. Your choice applies to that one tool and is asked again after 12 months.

Hosting and security

All tools are delivered and protected by Cloudflare. To send you a page, Cloudflare necessarily processes technical data such as your IP address, the requested address and your browser's request headers, and may use them to block attacks and abuse. Legal basis: our legitimate interest in running secure, working websites (Article 6(1)(f) GDPR). We do not use this data to identify or profile visitors.

Data stored in your browser

Many tools save your settings and work, such as theme, volume, progress or the text you entered, in your browser's local storage so it is still there next time. That data stays on your device and is not sent to us, unless a tool explicitly saves it online (see below). Your analytics choice is stored the same way, under the key atlesque-consent. These items are needed for the function you ask for, so they do not require consent. You can delete them at any time by clearing the site data in your browser.

Tools with accounts or online features

Most tools run entirely in your browser. The ones below need a server, and process only what the feature needs:

  • Atlesque Play (play.atlesque.dev, the optional sign-in for our games and for Chordstand, including Wingrid and MBP Scrum City): your email address, when you signed up and were last seen, the emailed sign-in codes and links (with your IP address, to limit sign-in attempts), your sessions (stored only as a hash), your saved game progress and Chordstand song library, a log of the sign-in emails we sent, and the state of multiplayer rooms you join.
  • BillSplit: your email address for the sign-in code and your sessions; your name and, only if you add them, your IBAN and BIC so others can pay you back; the groups, members, expenses, payments and invites you create; receipts and invoices you attach; and a log of changes with the email address and IP address of whoever made them, so group members can see who changed what.
  • Wingrid: a random player ID with your credits, play statistics and spins, so a guest can keep playing; if you sign in with Atlesque Play, also your Play account ID and email address.
  • Radio Lessons: your email address for the sign-in link, your account and your lesson progress, stored in the EU. Expired sign-in links and sessions are deleted daily.
  • Scrum Poker: the display name and votes you enter, kept in memory only while the room is in use and never written to storage.
  • Semina Pini: the name and score you submit to the leaderboard. To keep the leaderboard fair and stop abuse, each score is stored with your IP address, approximate location (country, region, city, time zone), network, browser user-agent and a browser fingerprint. The IP address and fingerprint are deleted after 90 days.
  • Junk Desk: works with your Microsoft mailbox after you sign in with Microsoft; its own privacy notice in the app explains what it stores and does.

Legal basis: providing the feature you asked for (Article 6(1)(b) GDPR); for the Semina Pini anti-abuse data, our legitimate interest in a fair leaderboard (Article 6(1)(f) GDPR). We keep account data while you use the tool and delete it when you ask us to, unless a shorter period is stated above. Where a tool shows its own privacy notice, that notice adds to this policy.

Browser features

Tools that read text aloud or take voice input use your browser's built-in speech features. Depending on your browser and the voice you pick, the text or audio may be processed by your browser's vendor, such as Google, Apple or Microsoft.

Who processes the data

We use Cloudflare, Inc. as our processor for hosting, content delivery, security, analytics and storage, under its Data Processing Addendum. Sign-in emails are sent through Cloudflare as well. Cloudflare may process data outside the European Economic Area, including in the United States; such transfers are covered by Cloudflare's certification under the EU-U.S. Data Privacy Framework and by the European Commission's Standard Contractual Clauses.

We do not sell your data, show ads, build profiles or make automated decisions about you.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Email [email protected]; we reply within one month. Because analytics are aggregated and contain no identifiers, we usually cannot link them to you.

You can also lodge a complaint with a data protection authority. In Belgium that is the Gegevensbeschermingsautoriteit / Autorité de protection des données; you can also contact the authority in the EU country where you live.

Changes

We update this policy when the tools change how they handle data. The date at the top shows the latest version.