Privacy Policy

This policy explains what personal data DiceKeepr collects, why, and what your rights are. It applies to the DiceKeepr website and application.

Data controller

The data controller is the publisher of DiceKeepr, a non-professional publisher, reachable at contact@dicekeepr.com.

For any question regarding your data, write to contact@dicekeepr.com.

Data we collect

• Account: email address, username, display name, password (managed and encrypted by our identity provider — we never have access to it in clear text).
• Profile: bio, avatar, favourite game systems and factions, country and region if you provide them.
• Content you publish: games, paint jobs, army lists, comments, reactions, photos.
• Technical data: IP address, connection and activity logs, kept for security purposes and in line with our obligations as a host.
• Playing area: the town you pick and its geographic coordinates (the town centre, never your address). It is used to suggest players near you; distances shown to others are rounded into bands. You can clear it at any time from your profile.
• Announcement measurement: when you click a link in a DiceKeepr announcement email, we record that your account clicked that link, and how many times. OPENS are not tracked (no tracking pixel). This count only tells us whether our announcements are useful; it is deleted with the campaign and with your account, and you can unsubscribe from announcements in one click from any such email.

Purposes and legal bases

• Providing the service (account management, publishing, social feed) — performance of the contract.
• Security, abuse prevention and moderation — legitimate interest and legal obligation.
• Sending service emails and, with your consent, recaps — consent / legitimate interest.
• Improving the product through aggregated usage statistics — legitimate interest. Click measurement in our announcement emails is tied to your account (see above) and relies on the same legitimate interest, limited to recipients who opted in.

Recipients and processors

We do not sell your data. The platform is self-hosted: authentication and media storage run on our own infrastructure, with no third-party provider. The only external recipients strictly necessary to run the service are:

• OVH SAS (server hosting, in France, within the European Union).
• Resend (delivery of transactional emails: address verification, recaps). As Resend is based in the United States, delivery involves a transfer of your email address outside the European Union, framed by standard contractual clauses.
• API Géo (Etalab / DINUM, a French public service): when you look up a French town, the search is relayed by our server — only the typed text is sent, never your identity, and the call never leaves your browser. Towns elsewhere are searched in our own directory, so nothing is sent to anyone.

Retention

Your account data is kept for as long as your account is active. When you delete your account, it is erased or anonymised, except for information we must retain for legal reasons (connection logs in particular).

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data.

• You can edit your profile and delete your account directly from the app settings.
• For any other request, contact us at contact@dicekeepr.com.
• You may lodge a complaint with the CNIL (www.cnil.fr) or your local supervisory authority.

Cookies

DiceKeepr only uses strictly necessary cookies: a session cookie to keep you signed in and a cookie remembering your language. We do not use advertising cookies or third-party trackers.

Security

Connections are encrypted (HTTPS/TLS), passwords are handled by our identity provider and never pass through our application servers in clear text, and access to data is restricted.

Minors

DiceKeepr is not intended for people under 15. We do not knowingly collect data about minors under 15.

Changes

We may update this policy. The last-updated date is shown at the top of the page; significant changes will be notified to you.