Privacy policy

TLF Studio is an independent studio. This page explains what data the site keeps, why, and how to have it deleted. The French version of this policy is the reference version.

Data collected

• Newsletter: your email address, the page you subscribed from, the branches you follow and the subscription / confirmation dates. Double opt-in: an unconfirmed subscription is erased after 7 days. One-click unsubscribe in every email.
• Account: email, username, password (never stored in plain text, only an argon2 hash), profile picture if you add one, and the list of browsers already used (to alert you about an unusual login). An account whose email is never confirmed is deleted after 7 days.
• Sign in with Google or Discord: only the account identifier, its email and, if you ask for it, its profile picture. Your Discord identifier is also used to give you the Tester role on the Discord server.
• Applications (tester, collaboration): username, email, reason and message. Only used to get back to you.
• Contact form: name, email, company if any, topic and message.
• Tester area and idea box: the feedback, screenshots, ideas and votes you send, linked to your account.
• Supporters: when you support the studio on Ko-fi, Ko-fi sends the site your username, the amount, the type of support, your message and your email. The site does not keep your email: only an encrypted fingerprint, used to recognise your later payments and to show the "Supporter" badge on your account if it uses the same email. Your message is only kept if your support is public. For Patreon, GitHub Sponsors and Tipeee, nothing is sent automatically: the studio only notes your username and the platform.

From the "My account" page, you can download all your data and delete your account: your details, connections and profile picture are then erased; your ideas, feedback and applications remain, no longer linked to your account (ask us to delete them if you wish).

What is public

Only your username and what you choose to publish appear on the site: accepted ideas, the testers' wall and the supporters' wall only with your consent (on Ko-fi, by ticking public support). For a new supporter, a thank-you may be posted on the studio's Discord server, with your username only if your support is public. Amounts and emails are never shown.

Cookies

The site uses no advertising or audience-measurement cookies, hence no banner.

• Session: if you log in, a cookie keeps your session for 30 days at most. It disappears when you log out.
• "I'm waiting for this": if you click this button, a technical cookie (random identifier, no personal data) remembers your vote for one year to avoid duplicates.
• Sign in with Google / Discord: a temporary 10-minute cookie protects the login.
• Language: if you use the FR / EN button, a cookie remembers your choice for one year.

Statistics

Visit statistics are measured by the site itself, without cookies or third-party services: your IP address is never stored, and the anonymous identifier computed to count visitors changes every day. They can't identify you. If your browser sends "Do Not Track", you aren't counted. Dev-log reactions are anonymous: a fingerprint of your IP address only prevents duplicates.

Security

To protect the site against abuse, your IP address may be recorded when an account is created (it is erased after one year) and used temporarily to limit repeated attempts (login, forms).

Services used

No reselling, no advertising. The site relies on:

• Resend to send emails (confirmation, newsletter, login). Resend tells us whether an email was delivered; this information is only used to check that sending works.
• Google and Discord, only if you choose to sign in with them.
• Ko-fi, Patreon, GitHub Sponsors or Tipeee, only if you support the studio: payment happens on their side, under their own privacy policy. The site never sees your payment details.
• Discord for announcements and the Tester role.
• YouTube: trailers use the youtube-nocookie.com domain and only load after a click.

Your rights

You can ask to access, correct or delete your data, or to remove your support from the wall, at: contact@tlfstudio.fr. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).