Privacy policy

Data controller

The data controller is the site publisher, FoxVision (Vincent Thuillier).

See the legal notice for full contact details.

Data we collect

Depending on how you use the site, we collect:

• Account and identification: username, email address, password (stored in encrypted form), language and invitation code.
• Account security: email address verification and, if you enable it, two-factor authentication (2FA).
• Profile: avatar and information you choose to provide, along with your privacy settings (what you make public or not).
• Activity: game registrations, organizations and fields you create or manage.
• Field and organization pages: name, address, geographic coordinates and contact details (name, phone, email) you provide.
• Messages: the content you send through the contact forms.
• Technical data: IP address, connection and usage logs, and strictly necessary cookies.
• Analytics: pages viewed and key actions on the site, described in detail in the "Analytics" section below.

Purposes and legal bases

We use this data to:

• Provide and manage the service (account, profiles, registrations, pages) — legal basis: performance of the terms of use.
• Send you service-related communications and notifications — legal basis: performance of the contract and legitimate interest.
• Ensure security, prevent abuse and keep the service running properly — legal basis: legitimate interest.
• Respond to your requests through the contact forms — legal basis: legitimate interest.
• Understanding how the site is used in order to improve it: which pages are viewed, what visitors search for without finding it, at which step a form is abandoned — legal basis: legitimate interest. You may object at any time, see the "Analytics" section.
• Comply with our legal and regulatory obligations — legal basis: legal obligation.

Who receives the data

Your data is accessible to the publisher and the site administrators. It may be processed by our host (OVH), acting as a processor. The information you choose to make public (public profile, organization or field pages) is visible to other visitors. We do not sell your data and do not share it with third parties for commercial purposes.

How long we keep it

Your account data is kept for as long as your account is active. After you delete your account, it is erased or anonymized within a reasonable time, unless a legal retention obligation applies. Technical logs are kept for a limited period, for security purposes.

Hosting and transfers

The site and its data are hosted by OVH, in France (European Union). The analytics is hosted on the same server. Your personal data is not transferred outside the European Union.

One exception, which carries no personal data: when a public listing is published, changed or withdrawn, its web address is submitted to the IndexNow protocol, which relays it to search engines (Bing, Yandex, Naver, Seznam, Yep, Amazon), some of them outside the European Union. Only the address of the public page is sent — never the identity of whoever published it, and no account data.

Security

We implement appropriate technical and organizational measures: encrypted connections (HTTPS), passwords stored in encrypted form, protection against unauthorized access and optional two-factor authentication. As no system is infallible, we cannot, however, guarantee absolute security.

Audience measurement

We measure the site's audience with free software we host ourselves, on our own server. No data goes to an outside provider, and this measurement sets no cookie.

• What is measured: the pages you visit, a little technical information about your browser and screen, and a small number of significant actions — registering for a game, or sending a contact message, for instance.
• How a visit is recognised: with no cookie and no identifier left on your device. Your IP address is not kept; it only serves, at that moment, to tell visits apart and to derive an approximate location — country, region, city.
• If you are signed in, these statistics are linked to your account. That lets us tell members' use from that of passing visitors.
• The terms you type in the site and organization directories are recorded: they tell us what visitors look for without finding it. Player searches are not concerned.
• When you send a message through a contact form, we keep its subject and the page it was addressed to. The message itself is never recorded: it goes only to its recipient.

Worth knowing: while you are signed in, these statistics are pseudonymous rather than anonymous, since they are tied to your account. They stay anonymous the rest of the time.

What never reaches the audience measurement: your username, your email address, your invitation code, the content of your messages and the content of the pages you write.

Objecting: write to us through the form below, we act on every objection. You can also switch the measurement off yourself on a given device, by running localStorage.setItem('umami.disabled', 1) in your browser console; the setting applies to that browser and does not stop you using the service.

Cookies

The site only uses cookies strictly necessary for its operation: session and authentication, anti-CSRF security token, language preference, and your display preferences — a panel you chose to collapse, for instance. No advertising or third-party tracking cookies are set. The analytics described above sets no cookie either.

Your rights

In accordance with the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, object to, restrict and port your data, as well as the right to withdraw your consent at any time.

To exercise these rights, use the contact form below. You may also lodge a complaint with the CNIL (www.cnil.fr).

Minors

The service is not intended for children under 15. If you are under 15, the consent of a holder of parental authority is required to create an account.

Changes

This policy may be updated to reflect changes to the site or to regulations. The last updated date appears at the top of this page.