Privacy Policy

Last updated: March 2026

1. Data controller

2. Data collected

User account

• Username (chosen by the user)
• Email address (if signing in via magic link)
• OAuth identifier (if signing in via Google, GitHub or Discord) — your password is never transmitted to us

Game scores

• Time, errors, selected string, game date
• The 10 best scores per string are retained

Country

Your country is inferred from your IP address at login time using DB-IP Lite (open source library, CC BY 4.0). The IP address itself is not retained.

Connection logs

Retained for 1 year as required by French law (LCEN).

3. Legal bases

• Performance of contract: user account, game scores
• Legitimate interest: country inference for leaderboard display
• Legal obligation: connection logs (LCEN)

4. Retention periods

• Account and scores: until account deletion
• Deletion: immediate and permanent (scores deleted by cascade)
• Connection logs: 1 year

5. Processors and transfers

Your data may be shared with the following processors solely for service delivery:

• Hetzner Online GmbH (hosting) — Germany, GDPR-compliant
• Google, GitHub, Discord (OAuth authentication) — subject to their own privacy policies
• Resend (transactional email) — United States, covered by Standard Contractual Clauses

We never sell or share your data for commercial purposes.

6. Cookies

FretMind uses a single session cookie (session_id) strictly necessary to maintain your login. No advertising or tracking cookies are set. No consent is required.

7. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Access and portability: obtain a copy of your data — contact@fretmind.app
• Rectification: update your username from the account menu
• Erasure: delete your account directly from your profile menu — all your data and scores are deleted immediately
• Objection and restriction: as provided under the GDPR

We respond to all requests within 30 days. You may also file a complaint with your local data protection authority (in France: CNIL).

8. Security

Data is hosted in Europe (Hetzner, Germany). Connections are encrypted via HTTPS. Session cookies are secured (HttpOnly, Secure, SameSite=Lax).

9. Minors

Creating an account on FretMind requires being 15 years of age or older. By creating an account, you confirm that you meet this requirement.