Privacy

PKWAT stores your email address, a name you choose, an avatar if you upload one, and the hands you play. There is no advertising and no analytics, and nothing is sold or shared beyond the processors listed below.

Controller

The controller is Nendo, 66 Boulevard Garibaldi, 75015 Paris, France — the company described in the legal notice. Write to hello@nendo.fr about anything on this page.

There is no data protection officer: PKWAT does not monitor anybody at scale and holds no special category of data, so the law does not require one.

Data stored, and why

• Your email address — to create the account, to send you the code that signs you in, and to confirm a change if you move the account to a different address. Nothing else is sent to it. Needed to provide the service you asked for.
• A display name, globally and optionally one per club. Chosen by you and visible to everybody in a club you are in. Needed to provide the service you asked for.
• An avatar, if you upload one. Optional, and stored only because you chose to add it. Your consent, which you withdraw by removing it.
• Sign-in codes — six digits, for ten minutes. Each is deleted as soon as it is used or expires. Needed to provide the service you asked for.
• The hands you play, and the chip movements in them, so a club has a history and a board. Visible to that club, and to anybody holding a link to a hand somebody in it chose to share. Needed to provide the service you asked for, and our legitimate interest in a club's record being complete.
• An audit log of what club hosts do — invitations, removals, chip grants — so a club can see how it got where it is. Our legitimate interest, and that of everybody in the club, in the club being accountable.
• Abuse reports — what was written, which club or member it concerned, and who sent it, so that a report can be acted on and a pattern recognised. Read only by the people who run PKWAT, never shown to the club or the member reported. Our legitimate interest, and that of everybody here, in the service being safe to use.
• Server logs — an IP address, a time, and what was asked for — kept briefly so that an attack can be recognised and stopped. Our legitimate interest in the service staying up and staying safe.
• The language you read in, on the account as well as in a cookie, because the five emails PKWAT sends are written by a server that cannot see a cookie. Needed to provide the service you asked for.
• What you have paid for, if anything — a customer and subscription reference, a renewal date, and the invoices themselves. No payment details ever reach PKWAT: you pay with PayPal, through Mollie, and your PayPal account stays between you and PayPal, under PayPal's own privacy policy. Needed to provide the service you asked for, and a legal obligation for the invoices.

Cookies

Two. One holds your session; the other remembers which language you read. Both are strictly necessary, neither is shared with anybody, and there is no analytics or advertising cookie.

The session cookie lasts thirty days and is cleared when you sign out. The language cookie lasts a year and holds nothing but a two-letter code.

Processors

• OVH (France) — the servers and the database.
• Cloudflare — CDN and firewall, outbound email, and object storage for avatars.
• Mollie (Netherlands) — payments and subscriptions, for the clubs and accounts on a paid plan. Payment itself is made with PayPal, which you sign in to directly.
• Sentry — error reports, which can incidentally include an account id. Not the contents of your hands.
• GitHub — source code and the container registry. No user data.

Each of them acts on our instructions and for no purpose of their own. Nobody else receives your data, and none of it is sold.

Transfers outside the European Union

The database and everything in it stay in France. Cloudflare, Sentry and GitHub are American companies whose processing can reach servers outside the European Union; each is engaged under the European Commission's standard contractual clauses. A copy of the current clauses is available on request.

Retention

• Your account — for as long as it exists. Deleting it removes your email address, your avatar and your membership of every club straight away; thirty days later the account record itself is gone.
• Hands — indefinitely, as part of their club's history.
• Invoices — ten years, an accounting obligation. They are the one record that survives the deletion of an account.
• Sessions — thirty days, or until you sign out.
• Invitations — seven days, then they expire and are swept away whether or not anybody used them.
• Server logs — a few days.
• Abuse reports — while they are being dealt with and for a year after, so that a pattern can be recognised.

Hand histories

A hand is a record shared by everybody who sat in it. Deleting your account therefore does not delete the hands you played, and your display name stays on them.

A history in which one seat has been anonymised is no longer a record of what happened. This retention rests on a legitimate interest rather than on your consent, and it is the one point on this page where what you can ask for is limited.

What stays is a pseudonym you chose and that the table already saw. Once the account is gone it is no longer linked to your address, and nothing here connects it back to you. You may object on grounds particular to your situation, at the address below.

Account access

There is no password and nothing to reset: signing in means entering a code emailed to you. Whoever can read your email can reach your account.

Security

Traffic is encrypted in transit, the database is not reachable from the internet, and no password is stored because there is none. A sign-in code lives ten minutes, works only alongside the address it was sent to, and dies after five wrong guesses. Images are decoded in a separate process from the one running live tables. A breach affecting you will be notified to you and to the CNIL, as the law requires.

No profiling

Nothing here scores you, ranks you outside your club's own leaderboard, or decides anything about you automatically. There is no advertising, no tracking across other sites, and no analytics of any kind.

Children

PKWAT is for adults and no account should belong to anybody under 18. Nothing on the site is aimed at children and no data is knowingly collected from one. If you believe a child has an account here, tell us and it will be closed and its data deleted.

Your rights

You can ask for a copy of everything held about you, have it corrected, have it deleted, have its use restricted, take it elsewhere in a portable form, object to the uses that rest on a legitimate interest, and withdraw a consent you gave — the avatar being the one thing that rests on consent.

Two of those need no request: export everything and delete your account from your account settings. For the rest, write to hello@nendo.fr. We answer within one month.

If you are the only owner of a club, you have to hand it over or close it before deleting your account. A club with no owner is a club nobody can run.

You may also lodge a complaint with the CNIL, the French supervisory authority — cnil.fr, 3 place de Fontenoy, 75007 Paris — or with the authority for the country you live in.

Contact

For anything about your data, write to hello@nendo.fr. To report something happening on PKWAT, use the abuse page.

The date at the top is the date of the last change. A change to what is held about you, or why, is announced in the app before it takes effect.