Your data

This describes what the Triple Triad Online server actually records. It is written from the database schema rather than from intent: every statement below matches a column, or the absence of one. The inventory it is drawn from is public, in the server’s repository, at docs/data-inventory.md.

What is recorded

Your player name. It is the account’s name, and other players see it in the lobby and on an invitation. You choose it. Nothing requires it to be your real name, and it is better if it is not.

A digest of your password, never the password. The calculation is one-way (bcrypt): nothing in this database can be turned back into what you typed. A reset replaces the password; it cannot reveal it.

Your email address, and the same address lowercased, which is what stops two accounts sharing one. It is required at registration. It is used for two things: confirming the account, and recovering a forgotten password. Nothing else — no newsletter, no advertising, no sharing.

When your address was confirmed, if it has been.

A digest of your confirmation codes, never the codes. They are gone on use and after ten minutes.

A digest of your session tokens, never the tokens. A copy of the database does not let anybody impersonate you.

Your game profile: cards, decks, purse, achievements, statistics. It is the game itself.

Your matches: opponent, format, score, payout. No free text, so nothing you could have written into one.

What is not recorded

No telephone number, no device identifier, no advertising id, no analytics service, no third-party SDK of any kind. The client’s crash report is a local file that goes nowhere until you send it.

Your IP address is not stored in any table. It appears in the web server’s access log, as on any server, and in the anti-abuse counters, which live in memory and are never written to disk.

The one third party

Brevo, the provider that sends the email. It receives your address and the six-digit code, each time one is sent, and nothing else: not your player name, not your profile, not your matches. Brevo is a French company and its sending platform is hosted in the European Union.

It is the first and only third party this service has. There was none before address confirmation existed, and this is what that feature cost.

For how long

Your address is kept for as long as your account is. There is no separate retention period for it, because it is not kept for a separate purpose: it is how an account is recovered, and an account that cannot be recovered is a different product.

Codes expire in ten minutes and are swept regularly.

A session expires after thirty days, and can be revoked sooner.

What you can do

Delete your account. Everything belonging to it goes with it: the profile, the matches, the address, the codes. The operation requires your password and not merely an open session — a stolen token must not be able to destroy an account. Your player name becomes available again.

Two consequences, said plainly:

• It is irreversible and there is no grace period. The row is gone when the request returns.
• Refereed matches disappear from your opponent’s history too, because a match row names both players. The alternative would have been keeping a record of somebody who asked to be forgotten in order to preserve a third party’s statistics.

Close your sessions. Resetting a password ends every session on the account, which effectively locks out anybody else who had obtained your password.

Today, deletion still goes through a request. The operation exists on the server but no screen in the game calls it: an irreversible action behind a mis-tap is worse than one behind an email. Until the confirmation screen exists, write to the address below and the request will be honoured.

Who to contact

The data controller is Lunatic Chimera, who runs the service in a personal, non-professional capacity.

Contact: lunaticchimera@gmail.com

Write to that address to see your data, have it corrected, or have it erased. An erasure request is honoured exactly as described above: the account and what hangs off it go, and nothing is kept “just in case”.

The legal notice, linked in the footer, gives the host’s identity.