Privacy policy

Fishdle collects the minimum needed to let you play and to keep the lake fair. Nothing is sold, nothing feeds advertising, and there are no third-party trackers on the site.

1. Who is responsible

The data controller is the publisher of Fishdle, a natural person acting on a non-professional basis (see the legal notice). For any question, or to exercise your rights: thibaut.lefevre.dev@gmail.com.

2. What is collected, and why

Your account, through Discord or Google

Logging in goes through Discord or Google. Depending on the door you pick, Fishdle receives and stores your ID at that provider, your display name, your avatar URL, your e-mail address if the provider passes it on (Discord does when it knows it; Google always does, along with the proof that it is confirmed), and the date of your last login. Fishdle never sees your provider password and creates none of its own.

While the beta is closed, signing in through Google additionally requires an e-mail address invited by the editor: the address is kept in the invitation list, along with whether it has already been used to create an account, and can be removed from the list as long as no account was created with it.

Legal basis: performance of the contract — no account, no game.

Your progress

Everything the game has to remember between sessions: level, experience, gold, skills, owned gear and its wear, rigs, keepnet, records, collection cards, guild, tournament entries.

Legal basis: performance of the contract.

Chat

Messages you send in the in-game channels are stored with their author and timestamp, so they can be shown to their recipients and moderated.

Legal basis: performance of the contract, and the legitimate interest in moderating.

Technical logs and anti-cheat

The server records IP addresses, the browser's user agent and request timestamps, along with behavioural signals (inhumanly regular actions, abnormal yields) used to spot automation. Those signals feed a per-account score which never triggers an automatic sanction: it only flags an account for human review.

Legal basis: legitimate interest — keeping the game fair and the service secure. You may object at the contact address above; objections are considered case by case, and the security of the service may justify refusing one.

Usage statistics

To learn what works in the game and what to improve, the server counts, per account and per day, what happens in it: gold earned and spent and on what, fish caught and where, levels reached, fishing time, hours of activity. It also records, without knowing who was there, how long each cell of a lake was fished. It also records, each time you come back to the game, how long you were away and what your rods caught in the meantime. This data is only read by the team, as totals and averages; it feeds no advertising and never leaves the server.

At sign-up, the account also keeps how you arrived, as a plain label: the campaign name if you followed a tagged link (?ref=…), otherwise the kind of site that sent you (Discord, Reddit, a search engine…), otherwise “direct”. Never the full address of the page you came from. The label tells us which channels bring players who stay; only totals per channel are shown, and only for groups large enough that no player can be singled out.

Legal basis: legitimate interest — evolving the game on an informed basis. You may object at any time by writing to the contact address above: your counters and your arrival channel are deleted on the spot and nothing more is collected about you. The anti-cheat technical logs, which serve another purpose, are not affected.

3. Where it is stored

On an OVH server located in France, within the European Union. There is no transfer outside the EU: the third parties involved are the host (OVH) and the authentication providers (Discord, Google), the latter solely for authentication and under their own policies (Discord, Google). The fonts are served from our own servers: loading a page sends nothing to anyone but us.

4. For how long

• Account and progress — for as long as the account exists.
• After a deletion request — erased within 30 days, except what the law requires to be kept.
• Dormant accounts — may be deleted after 3 years without a login, after notice by e-mail where an address is known.
• Chat messages — 12 months.
• Technical logs — 12 months, the usual period for security purposes.
• Usage statistics — 12 months; the arrival channel, 12 months after sign-up.
• Session tokens — 30 days, then they expire on their own.
• Exchanges tied to a request (e-mail) — for as long as it takes to handle, then three years, the civil-law limitation period.

5. Cookies and local storage

Fishdle sets no advertising cookies and uses no third-party analytics. The site keeps only the following in your browser's local storage:

• your session token, without which you would log in again on every page;
• your language and display preferences;
• for one tab only (session storage, cleared when it closes), how you arrived — the campaign label and the name of the site that sent you, described above — while you log in. It is sent once when the account is created, then deleted from the browser.

The first two are strictly necessary for the service you asked for. The third serves only Fishdle's own audience measurement: it tracks nothing across sites, is shared with no one, lives for one tab and produces statistics only — the conditions under which the French regulator (CNIL) exempts audience measurement from consent. None of these therefore needs your agreement, which is why you see no cookie banner. Clearing your browser storage logs you out and loses nothing — your progress lives on the server.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection over your data. One address for all of it: thibaut.lefevre.dev@gmail.com. You will get an answer within one month. You may be asked to show the account is yours — in practice, by writing from the address linked to the account, or confirming from your Discord or Google account.

If the answer does not satisfy you, you can lodge a complaint with your national data protection authority — in France, the CNIL.

7. Minors

Fishdle follows Discord's minimum age of 13 (higher in some countries). The game is not intended for children below that age and knowingly collects no data about them. Any such account reported is deleted.

8. Automated decisions

No decision producing legal effects or significantly affecting you is taken on a purely automated basis. The automation detection described above flags an account; a human decides.

9. Changes

This policy will follow the game — opening the subscription, for instance, will add billing data handled by the payment provider. Any substantial change will be announced on the official Discord and the date at the top of this page updated.