Privacy Policy
This Privacy Policy explains what personal data the Carnevale Companion mobile and web application (the “App”) collects, how it is used, and the rights you have over it. The App is an unofficial companion tool for managing gangs and tracking games for the Carnevale tabletop miniatures game.
1. Who is responsible for your data
The App is operated by Anachrion (the “operator”, “we”, “us”). For any question about this policy or your data, contact us at contact@carnevale-app.com.
2. What data we collect
- Account information — the email address and username you provide when you register, and your password. Your password is never stored in readable form; only a secure one-way hash of it is kept.
- Content you create — the gang lists, rosters and game/encounter data you build and record in the App, so they can be saved and synced to your account across devices.
- Authentication data — security tokens that keep you signed in and let you stay logged in between sessions.
- Technical logs — our server may record standard technical information such as IP address, request time and error diagnostics, for the sole purpose of operating and securing the service.
We do not use any advertising, analytics or third-party tracking technologies, and the App contains no ads. We do not collect location data, contacts, photos or any device identifiers for tracking.
3. How and why we use your data
We use the data above only to:
- create and authenticate your account and keep you signed in;
- store and sync the gangs and games you create;
- let you recover access to your account (e.g. password reset);
- operate, secure and troubleshoot the service.
Under the EU General Data Protection Regulation (GDPR), our legal bases are the performance of our agreement with you to provide the service you sign up for, and our legitimate interest in keeping the service secure and functioning.
4. Who we share it with
We do not sell your data and we do not share it with advertisers, data brokers or analytics providers. Your data is stored on servers operated on our behalf by Hetzner Online GmbH, within the European Union, acting only as our hosting provider. We may disclose data if strictly required to comply with a valid legal obligation.
5. How long we keep it
We keep your account and the content you create for as long as your account exists. When you ask us to delete your account, your personal data and your content are removed from our systems. Technical logs are kept only for a short period needed for security and operation.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- request deletion of your account and data;
- receive a copy of your data in a portable format;
- object to or restrict certain processing.
To exercise any of these rights, email contact@carnevale-app.com. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).
7. Security
Traffic between the App and our servers is encrypted with TLS (HTTPS), and passwords are stored only as secure hashes. No method of transmission or storage is ever completely secure, but we take reasonable measures to protect your data.
8. Children
The App is not directed at children and is not intended for use by anyone under the age of 15. We do not knowingly collect personal data from children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date at the top of this page.
10. Contact
Questions or requests: contact@carnevale-app.com.