Privacy Policy

1Account data

• Display name, emoji and interface theme, used to identify and personalise the account.
• Password: it is never stored in plain text; only a non-reversible cryptographic hash is retained.
• Gender, optional: used only to adapt some wording and select relevant questions. “Prefer not to say” remains available.
• Application language: the player's French or English choice is stored in their account preferences.
• Recovery email address, optional but recommended: used to verify the address, recover the account and, if the player chooses, receive L'Îlot notifications.
• Recovery code, when this method is selected: only its hash is stored on the server.

2Game data

To provide crossings and gatherings, L'Îlot stores island membership, answers and predictions, scores, kiffs, wishes, personal questions, card choices, progress information and game history. Intimate content such as answers, predictions, kiffs and wishes is encrypted at rest on the server.

Personal Talismans are awarded from counters calculated from the player's history: correct predictions, gatherings won and distinct days of use. This calculation does not create an extra copy of answers. The reward register stores only the milestone, Talisman type, player, destination cave and whether a milestone had already been reached before this feature was introduced. This last item is used only to explain retrospective rewards at first login and prevent duplicate awards.

Gathering analysis

After a completed gathering, L’Îlot may generate a short bilingual sentence using the configured Mistral service. Played questions, answers and predictions, theme counters and a limited result history of the same two players are sent under the aliases [A] and [B]. Account identifiers are excluded; recognized usernames, email addresses and links are removed from the texts. Free text may still contain other personal information. Wishes, kiffs and photos are excluded. Question and answer texts are not duplicated in the analysis table; the generated sentence is encrypted at rest and stored with the gathering. Analysis of older gatherings uses only their preceding history. Observations concern game choices and predictions, not the quality of the relationship.

3Photos and location

When a player adds photos, L'Îlot stores the original, a display version and a thumbnail in private storage outside the public Web directory. Access requires a valid session and island membership check.

When a photo contains EXIF GPS coordinates, L'Îlot may retain them to display memories on a map. Exact coordinates are encrypted in the database. To obtain a place name, the server may send the coordinates to Nominatim / OpenStreetMap. Displaying the map also loads OpenStreetMap tiles, which sends the usual technical data from a Web request, including the IP address, to the map service.

During registration, a language is first suggested from the country optionally supplied by the hosting infrastructure or, if unavailable, the device language. If the player chooses to refine this suggestion using their location, the coordinates are sent once by the server to Nominatim / OpenStreetMap to obtain a country code. L'Îlot does not store those coordinates, and the player can always choose another language.

4Notifications and email

Push notifications are optional. If enabled, L'Îlot stores the technical subscription details supplied by the browser and uses the Push service associated with the browser or operating system.

The “Send a conch reminder” button uses a recent-presence indicator to display an in-app dialog only when the partner is already using the application. This indicator contains only the account, island and time of the latest active signal; it is deleted within 24 hours. The system notification contains no question or answer.

Verification, recovery and player-enabled notification emails are sent through a dedicated Gmail account. The recipient's address and message content therefore pass through Google's email infrastructure. Game emails do not contain the player's private answers.

5Optional cloud backup

A player may choose to back up their photos to their own WebDAV or Nextcloud space. In that case, the server address, user name and necessary configuration are stored. The WebDAV secret is encrypted at rest. Transferred data is sent to the provider selected by the player.

6Purchases and subscriptions

Plans, subscriptions and add-on packs are purchased in the L'Îlot Android app through Google Play. Payment is handled entirely by Google: L'Îlot does not receive or store any card number, payment method, billing address or Google account email address.

To grant purchased rights to the island, the server verifies each purchase with Google Play and stores, for each purchase: the product, its state (purchased, active, cancelled, refunded, expired…), the purchase and expiry dates, the island concerned, the person who bought it, and a purchase identifier supplied by Google Play (the “purchase token”), encrypted at rest and needed to query Google for a renewal or a refund. Google Play also sends the server technical notifications (renewal, cancellation, refund) that contain no personal data.

Purchased rights belong to the island and benefit both members. A subscription is managed and cancelled in Google Play; deleting your L'Îlot account does not cancel it.

When an account is deleted, the purchase record is detached from the person. It may remain in the partner's island history and, if no member remains, be kept without any link to an island or a person, so that rights that are still valid can be honoured and the buyer can recover them with “Restore my purchases”. You can ask for this record to be erased at mes.ilots@gmail.com; obligations relating to the payment itself remain governed by Google Play.

7Technical and security data

L'Îlot uses the technical data required for security and operation: session data, login-attempt limits, notification state and minimal technical logs. Login throttling does not store the raw IP address; it uses a hash of the technical context.

During a debate, a player can start or answer an audio call. The microphone is enabled only after this explicit action. Audio is transmitted directly between both devices using WebRTC: L'Îlot does not record, transcribe or retain it. The server temporarily keeps the encrypted technical signalling data needed to connect the devices, then deletes it when the call ends. Google's STUN service may receive standard network information, including the IP address, solely to help the devices establish the connection.

8Administration and data sharing

To operate the service, assist players and check that essential features are correctly configured, the administration account can view limited metadata: display names, island and crossing names, partner status, dates and general crossing settings, and usage counts such as numbers of gatherings, photos or personal questions. The administration dashboard does not display the content of answers, predictions, kiffs, wishes, personal questions, shared rewards or the details of other islands' gatherings.

The person operating the server nevertheless has privileged technical access to the system and its backups. They could therefore access photo files, which are not individually encrypted, and unencrypted metadata. They also control the key the application needs to decrypt authorised sensitive content. Encryption at rest protects, in particular, an isolated copy of the database when the key is kept separately; it is not end-to-end encryption against the server operator. Passwords are different: they are hashed irreversibly and cannot be read, even by the operator, who can only reset them.

L'Îlot does not sell personal data or use it for targeted advertising. Data is shared only when required to provide the service or chosen by the player: Gmail for email, Web Push providers, OpenStreetMap/Nominatim for maps and geolocation, Google Play for purchases and purchase verification, and the player's selected WebDAV/Nextcloud provider for optional backup. Sharing to WhatsApp or another application occurs only when the player initiates it.

9Retention and deletion

Main data is retained while the account exists or for as long as it is needed to operate the shared island. Temporary verification codes expire automatically. When an account is deleted, data directly associated with that account is deleted or anonymised. Some strictly shared items may remain in the partner's history without retaining the deleted player's personal content. Purchase records follow the rule described in section 6.

Deletion can be requested from Profile or from the public Delete my account page.

10Security

The service is available over HTTPS. Passwords are hashed, cloud secrets and intimate content are encrypted at rest, photos are stored outside the Web root, and sensitive actions use session and CSRF protections. No technical measure removes all risk; protections are reviewed regularly.

11Your choices and requests

Profile lets players change account information, application language, recovery email address, gender and notification preferences. For privacy questions or to exercise applicable rights, contact mes.ilots@gmail.com.