← Back to the game

This translation is provided for convenience: the French version, Confidentialité, prevails.

Privacy

In short

The game runs entirely in your browser, and is played with an account: it keeps your username, your email address, your password (in an unreadable form) and your games, so you can get them back on all your devices; and, only if you ask, it lets you know about major news about the game. You can try it without an account, for one season: nothing is then collected or kept. Nothing is kept on your device, apart from the login cookie. No advertising, no analytics, no reselling.

Controller

The data controller is Jeremy Pernes, author and publisher of the game. Contact: contact@agent-trouble.fr.

What is kept on your device

Nothing, apart from the login cookie (below): your games are kept in your account, not in your browser. A trial game, without an account, is kept nowhere: it disappears when you close the page, unless you create an account to keep it. If your browser still held games from a previous version of the game, they move to your account when you log in, and are then erased from the device.

The account

The game is played with an account: it keeps your games, and you find them on all your devices. Here is what is processed, why, and for how long.

The data

• your username and your email address;
• your password, in hashed form: nobody can read it back, not even the publisher;
• your games: the current game and the ones you set aside;
• the date the account was created and the date of your last login;
• whether or not you chose to receive news about the game, and the date of your consent;
• the date of your last day of play;
• for security: the number of recent login attempts, linked to a fingerprint of your IP address (the address itself is never stored).

Why, and on what basis

• Running your account and keeping your games online: this is the service you ask for when you accept the terms of use (performance of a contract, article 6.1.b of the GDPR).
• Writing to you for the service: a welcome message, the link to choose a new password when you ask for it, an alert when your password or address changes. Same basis.
• Letting you know about major news about the game (its release on another platform, a new version), only if you asked for it by ticking the box provided, unticked by default: your consent (article 6.1.a of the GDPR; article L. 34-5 of the French Postal and Electronic Communications Code). A few messages a year at most, never advertising for anyone else. You can withdraw this consent whenever you like, in one click: the link at the bottom of each message, or “Your account” in the game.
• Protecting accounts against intrusion attempts (limiting password attempts): the publisher's legitimate interest in securing the service (article 6.1.f of the GDPR).
• Following the life of the game to improve it: how many players per day, weeks played, careers started or completed, trial games started and later moved to an account (totals, which identify no one), and where each account's current game stands (season, status, roster size, under its username), to see how the game is played and to help a player who asks. This data comes from the games kept online and is not combined with any other data: the publisher's legitimate interest (article 6.1.f of the GDPR).

For how long

• the account and its games: until you delete it. An account with no login for three years is deleted automatically, along with its games;
• your consent to news about the game: until you withdraw it, or the account is deleted;
• a login session: six months without a visit;
• a link for a new password: one hour, and it only works once;
• security traces (login attempts, IP address fingerprint): 24 hours;
• the game's daily totals (without any account): 90 days.

Who has access

Nobody but the publisher. The data is hosted by IONOS SARL, the publisher's processor, in the European Union; the service's emails are sent through its mail system. No data is sold, transferred to third parties, or transferred outside the European Union.

The login cookie

Once you are logged in, a cookie (“at_session”) keeps you logged in. It is only set if you log in, it is strictly necessary for the service you ask for, and therefore does not require consent (article 82 of the French Data Protection Act). It disappears when you log out, and at the latest after six months without a visit. It is the site's only cookie.

Security

Encrypted connections (HTTPS); hashed passwords; an enforced wait after several wrong passwords; an alert email when the account's password or address changes. In the event of a data breach that poses a risk to you, you would be notified, and so would the CNIL (the French data protection authority).

Minors

The game is not recommended for under-16s. A child under 15 must not create an account without their parents' consent.

Hosting

The game runs on a server rented from IONOS SARL, in the European Union, and administered by the publisher. This server keeps no visitor log: no IP address is stored on it, apart from the account security traces described above (a fingerprint, never the address, for 24 hours).

Technical components

All the game's files, including its engine (Pyodide), are served by the site's host. Only if your browser fails to load this engine does the game download it as a fallback from the jsDelivr content delivery network (cdn.jsdelivr.net): your IP address is then passed to it, as with any download. No other resource is loaded from a third-party service.

Donations

The “Support the game” link leads to a third-party site (ko-fi.com), which has its own privacy policy and collects donations through its payment providers. Nothing is passed to it until you click. What it passes to the publisher for a donation (for example the name and message you choose to leave there) is only used to thank you and to keep the accounts: nothing is reused for any other purpose, or linked to your game account.

Your rights

You have the right to access, rectify and erase your data, to restrict and object to its processing, and to data portability. The main ones can be exercised directly in the game, at any time (“Your account”):

• “Download my data”: everything your account keeps, games included, in a readable file (access and portability);
• “Change email address”, “Change password” (rectification);
• “Stop receiving news about the game” (withdrawal of consent, also via the link in each message);
• “Delete my account”: the account and all its online games are erased immediately (erasure).

For any other request, or if you no longer have access to your account: contact@agent-trouble.fr — reply within one month at most. You can also lodge a complaint with the CNIL (www.cnil.fr).

Last updated: 04/10/2026.