Privacy Policy

⚖️ Legal Information & Data Controller

This Privacy Policy describes how we collect, use, process, and protect your information when you use our Service. By using OpenFront.app, you agree to the collection and use of information in accordance with this Privacy Policy.

GDPR Compliance: As we operate from France and serve users in the European Union, this Privacy Policy complies with the General Data Protection Regulation (GDPR) and French data protection laws (Loi Informatique et Libertés).

📋 Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

• Service refers to the OpenFront.app website, web application, and any associated Discord Bot functionality.
• Personal Data means any information relating to an identified or identifiable natural person under GDPR.
• Usage Data refers to data collected automatically through the use of the Service or from the Service infrastructure.
• Cookies are small files placed on your device by a website.
• Data Controller refers to the operator of OpenFront.app who determines the purposes and means of processing Personal Data.
• Data Processor refers to third parties who process data on behalf of the Data Controller.
• You means the individual accessing or using the Service.
• Device means any device that can access the Service such as a computer, mobile phone, or tablet.

📊 Information We Collect

Personal Data

While using our Service, we may collect the following types of personally identifiable information:

• Email address (if you create an account or contact us)
• Discord User ID and username (if using Discord Bot integration)
• Discord Server information (when the Bot is added to a server)
• Game progress and statistics (stored locally or on our servers)
• Usage Data (see below)

Usage Data

We automatically collect Usage Data when you use the Service, including:

• IP address (may be anonymized or processed by Cloudflare)
• Browser type and version
• Pages visited and time spent
• Device information (type, operating system)
• Referral source
• Game interactions and session data
• Error logs and diagnostic information

Discord Integration Data

If you use our Discord Bot, we may collect:

• Discord User ID (permanent identifier)
• Username and discriminator
• Server ID and server member information
• Message content related to bot commands
• Bot interaction logs

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for the Service to function (authentication, session management)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use the Service
• Advertising Cookies: Used by our advertising partner Playwire (if applicable)

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality.

🎯 How We Use Your Data

Legal Basis for Processing (GDPR)

We process your Personal Data under the following legal bases:

• Consent: When you explicitly agree (e.g., creating an account, accepting cookies)
• Contractual Necessity: To provide the Service you requested
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws

Purposes of Data Processing

We use your information for:

• Providing the Service: Operating the game, saving progress, managing accounts
• Communication: Responding to inquiries, sending updates (only with consent)
• Improvement: Analyzing usage patterns, fixing bugs, developing new features
• Security: Detecting and preventing fraud, abuse, and technical issues
• Legal Compliance: Meeting legal obligations and protecting our rights
• Discord Bot Functionality: Providing bot commands and server integrations

We do NOT:

• Sell your Personal Data to third parties
• Send unsolicited marketing emails without your consent
• Share your data with advertisers for targeted advertising (except through Playwire)
• Use your data for purposes other than those stated here

🔗 Data Sharing and Third-Party Services

Third-Party Service Providers

We share data with the following categories of third parties who act as Data Processors:

Hosting and Infrastructure

• Hetzner Online GmbH (Germany)
  Purpose: Server hosting and data storage
  Data Shared: All data stored on our servers
  Privacy Policy: https://www.hetzner.com/legal/privacy-policy
• Cloudflare, Inc. (USA - EU Standard Contractual Clauses)
  Purpose: CDN, DDoS protection, performance optimization
  Data Shared: IP addresses, request data, cookies
  Privacy Policy: https://www.cloudflare.com/privacypolicy/

Communication Platforms

• Discord Inc. (USA)
  Purpose: Bot functionality and user authentication
  Data Shared: Discord User ID, username, server information
  Privacy Policy: https://discord.com/privacy
  Note: When you use our Discord Bot, you are also subject to Discord's Terms of Service and Privacy Policy

Advertising (if applicable)

• Playwire LLC (USA)
  Purpose: Advertising services
  Data Shared: Anonymized usage data, cookies
  Privacy Policy: https://www.playwire.com/privacy-policy

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). For transfers to countries not recognized by the EU Commission as providing adequate protection:

• We use Standard Contractual Clauses (SCCs) approved by the EU Commission
• We verify that adequate safeguards are in place
• We ensure compliance with GDPR requirements for international transfers

Other Disclosures

We may disclose your Personal Data:

• Legal Requirements: To comply with legal obligations, court orders, or government requests
• Protection of Rights: To protect our rights, property, or safety, or that of others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• With Your Consent: For any other purpose with your explicit consent

🗄️ Data Retention

We retain your Personal Data only as long as necessary for the purposes set out in this Privacy Policy:

• Account Data: Until you delete your account, plus a reasonable period for backups
• Usage Data: Typically 12-24 months, or as required by law
• Legal Records: As required by applicable law (e.g., tax records for 10 years in France)
• Cookies: See cookie settings; typically session to 12 months

After the retention period, we will securely delete or anonymize your data.

✅ Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

Right of Access

You can request a copy of all Personal Data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your Personal Data when:

• The data is no longer necessary for the purposes collected
• You withdraw consent and there is no other legal ground for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we limit processing in certain circumstances.

Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:
France: Commission Nationale de l'Informatique et des Libertés (CNIL)
Website: https://www.cnil.fr

How to Exercise Your Rights

To exercise any of these rights, contact us at: [email protected]

We will respond within one month (extendable by two months for complex requests).

📢 Advertising (Playwire)

If we use advertising services on this website, they are managed by Playwire LLC. Playwire may collect and use aggregated and anonymized data for advertising purposes.

Data Collected by Playwire: May include IP address, device information, browsing behavior, and cookies.

Your Choices: You can opt out of personalized advertising through:

• Playwire's privacy settings: https://www.playwire.com/privacy-policy
• Your browser's "Do Not Track" settings
• European Interactive Digital Advertising Alliance (EDAA): http://www.youronlinechoices.eu

🔐 Data Security

We implement appropriate technical and organizational measures to protect your Personal Data:

• Encryption: HTTPS/TLS for data in transit
• Access Controls: Limited access to Personal Data on a need-to-know basis
• Secure Hosting: Professional hosting with Hetzner (ISO 27001 certified)
• Regular Updates: Security patches and updates
• Monitoring: Logging and monitoring for security incidents

Important: No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

👶 Children's Privacy

Our Service is not intended for children under the age of 16 (or the minimum age required by local law).

We do not knowingly collect Personal Data from children under 16. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us immediately. We will take steps to delete such information.

🔗 Links to Other Websites

Our Service may contain links to third-party websites not operated by us. We are not responsible for the privacy practices of these sites. We strongly advise you to review their Privacy Policies.

🔄 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

For significant changes, we will notify you via:

• A prominent notice on our website
• Email (if you have provided one)
• Discord announcement (if applicable)

You are advised to review this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance.

🎮 Open Source and Independence Notice