Compliance Center & Legal Notices
Privacy policy
This policy covers the www.packetdominance.com portal and the game worlds (such as world01.packetdominance.com). No data is sold or used for advertising or profiling.
Data controller
Benjamin VINCENT, publisher of the site (full details in the legal notice). Contact for any question about your data: contact@vincentbenjamin.fr.
Data processed, purposes, legal bases and retention
Player account
- Data
- Username, email address, password (only a hash is stored), API access key, sign-up and last activity dates, avatar if you choose one.
- Purpose and legal basis
- Create and run your account, let you recover access, send the email alerts you turned on. Legal basis: performance of the service (contract); alerts rely on your choice, which you can change at any time.
- Retention
- As long as the account exists: an inactive account is never deleted automatically. When the account is deleted, this data is erased; the game's accounting history is kept in anonymous form. Resetting the game world erases all accounts.
Security and sign-in
- Data
- IP address, browser, pages requested, session identifier.
- Purpose and legal basis
- Limit abuse (sign-in attempts, mass sending), diagnose outages and keep you signed in. Legal basis: legitimate interest (security of the service).
- Retention
- Web server logs: 14 days. Sign-in limiters: in memory only, from a few minutes to one hour. Sessions: 30 days of inactivity.
Game and public information
- Data
- Username, avatar, companies and assets, ranking, decrees, last sign-in date and online status.
- Purpose and legal basis
- Run a shared world: this information is visible to other players, and the portal shows who is online (username, company, avatar). Legal basis: performance of the service.
- Retention
- As long as the account exists. The portal's list of online players is not kept as a history: it is replaced at each status update from the world (every 30 seconds) and emptied when the world has no online player left or goes offline.
Messaging
- Data
- Private messages, Packet Mail emails (including those exchanged with outside addresses), global chat.
- Purpose and legal basis
- Deliver your messages. They are stored unencrypted on the server, without end-to-end encryption. Legal basis: performance of the service.
- Retention
- Private messages: until the sender's or the recipient's account is deleted, or the game world is reset; they cannot be deleted one by one. Emails: a deleted email, even from the trash, is only erased from the server once the sender and the recipient, both players, have deleted it. Otherwise, a received email is kept until the recipient's account is deleted; an email sent to another player stays in their mailbox after the sender's account is deleted, under an anonymous sender name; an email sent to an external address is kept until the game world is reset. Global chat: last 200 messages, in memory only; an excerpt of each message is however kept for 30 days for reports (see below).
Reporting global chat messages
- Data
- For each global chat message, an excerpt: message identifier, author identifier, username, text and sending date.
- Purpose and legal basis
- Allow a message to be reported even after it has left the chat, and handle these reports as required by the EU Digital Services Act (DSA). Legal basis: legal obligation and legitimate interest in moderating the chat.
- Retention
- 30 days after sending, then automatic deletion. Deleted earlier if the author's account is erased, if the game world is reset, or if moderation upholds the report and removes the message.
Reports and requests
- Data
- Bug reports (description, browser, screen, optional screenshot); content reports (reported content and a copy of its text, author of the content, reporter and their language, reason, explanation, moderation decision and dates); deletion requests (email address, IP address, browser, fingerprint of the confirmation link, date and outcome of processing).
- Purpose and legal basis
- Fix game defects; handle content reports and keep a record of moderation decisions, as required by the EU Digital Services Act (DSA); prove and process your request. Legal basis: legitimate interest; legal obligation for content reports and for requests concerning your rights.
- Retention
- No automatic deletion. Bug reports: kept; when their author's account is deleted, the username and technical information (browser, screen, screenshot) are removed. Content reports: kept with no time limit as the register of moderation decisions, including after the game world is reset; the copy of the reported text stays in the report even when moderation removes the content. When an account is deleted, the identity of the reporter or of the author is removed, and the copy of a text written by the author is replaced with a neutral notice. Deletion requests: kept with no time limit, as proof of how they were handled.
Storage in your browser
- Data
- pd_last_server cookie (last world visited); local storage: session, profile, language, display and sound settings.
- Purpose and legal basis
- Make the site work. No advertising trackers or audience measurement, so no consent is requested.
- Retention
- Cookie: 1 year. Local storage: until you sign out or clear it.
Recipients and third-party services
Your data is not passed on to anyone else, except in the following cases:
- other players, for the game's public information;
- Esri (ArcGIS) and OpenStreetMap map tiles, and flags from flagcdn.com: your browser downloads them, so these services receive your IP address;
- the live streaming studio: the direct link between players (WebRTC) reveals your IP address to viewers and uses a Google server (STUN);
- the mail servers of your outside correspondents, for the emails you send them;
- the AI assistant you connect yourself to the MCP server with your key: it receives the game data it requests, under its own terms.
Transfers outside the European Union
The server is located in France. Esri, flagcdn.com and Google may process your IP address outside the European Union, notably in the United States, when your browser loads their resources. The AI assistant you choose is governed by its own terms.
Security
Traffic with the site is encrypted with HTTPS. Passwords are never stored: only their hash is (PBKDF2-SHA512, 210,000 iterations, random salt). Private messages and emails are not encrypted on the server.
Your rights
You can request access to your data, its correction, erasure, portability or restriction of processing, and object to processing based on legitimate interest, by writing to contact@vincentbenjamin.fr. You will receive an answer within one month. You can also delete your account yourself, from the game settings or the “Data Deletion” tab: deletion is carried out after confirmation through a link sent to the account's email address.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority): www.cnil.fr