Your data
PRIVACY
Last updated 11 August 2026
The short version: we collect what an account needs and nothing else. There are no analytics, no advertising, no trackers, and no third-party scripts anywhere on this site. Nothing about you is sold or shared for marketing, because there is no marketing.
1. Who is responsible
The data controller is the publisher of Oinkscape, identified in full in the legal notice along with contact details. Given the size and nature of the project there is no Data Protection Officer, which the GDPR does not require here.
2. What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Username | Identifies you in game, in chat and on the leaderboard. Public. | Contract |
| Email address | Sign-in, password reset, security notices. Never shown publicly. | Contract |
| Password | Stored only as an Argon2id hash. We cannot read it. | Contract |
| Two-factor secret | Only if you enable 2FA, to verify your codes. | Contract |
| Google account id | Only if you choose to sign in with Google, to recognise you. | Consent |
| Skin, cape, bio, name colour | Things you upload or choose, shown on your public profile. | Contract |
| Game statistics | Points, wins, games, rounds, streaks — the leaderboard. | Contract |
| IP address | Recorded briefly when the game asks to link to your account, and used transiently for rate limiting and abuse prevention. | Legitimate interest — keeping the service up and secure |
We do not collect your real name or your date of birth. We ask you to confirm you meet the minimum age rather than asking for your birth date, so that no extra personal data is created.
We do not carry out any automated decision-making or profiling that produces legal effects for you.
3. Cookies
Two, both strictly necessary: oink_at and
oink_rt, which keep you signed in. They are httpOnly, so no
script can read them, and SameSite=Lax, so they don't travel
to other sites.
There are no analytics, advertising or tracking cookies, so there is no consent banner — strictly necessary cookies are exempt. Signing out removes them.
4. Who else sees it
- o2switch (France) hosts the site and database, and therefore processes the data on our behalf. See the legal notice.
- Our email provider, only to deliver account emails to you.
- Google, only if you personally choose to sign in with Google, and only for that sign-in.
That's the complete list. Nothing is sold, rented or shared for advertising. Account data is stored in the European Union. Transfers outside the EU/EEA only happen through Google, if you use Google sign-in, under its own terms and safeguards.
We may disclose data where the law requires it — a court order or a valid request from an authority.
5. What is public
Your username, profile picture (your skin's face), bio, name colour,
statistics, division and leaderboard position are visible to anyone,
including people who aren't signed in, at
/u/<username>. Your email address, your IP address and
your security settings never are. If you don't want something public,
don't put it in your bio or your skin.
6. How long we keep it
- Account data — while your account exists.
- After you delete your account — 14 days, so you can change your mind by signing back in. After that it is permanently erased, automatically: email, password hash, 2FA secret, skin, bio and statistics all go.
- Sign-in links and email confirmation tokens — deleted once used or expired, within 30 minutes at most.
- Game-link records, including the IP address — deleted once used or expired, within 24 hours at most.
- Server logs — kept only as long as our host retains them.
7. Your rights
Under the GDPR you can, at any time:
- See your data — there's a one-click export in account settings that gives you everything we hold, as a JSON file;
- Correct it — username, email, password, bio and skin are all editable there too;
- Delete it — also in account settings, and it really deletes;
- Object to or restrict processing based on legitimate interest;
- Withdraw consent where consent is the basis (unlink Google);
- Take it elsewhere — the export is machine-readable JSON.
Anything you can't do yourself, write to the address in the legal notice and we'll do it within one month.
If you think we've handled your data badly, you can complain to the CNIL (www.cnil.fr), the French supervisory authority, or to the one in your own country.
8. How it is protected
- Passwords are hashed with Argon2id at OWASP's recommended parameters and are never stored or logged in readable form.
- Sessions use short-lived signed tokens in httpOnly cookies, and can be revoked everywhere at once.
- Optional two-factor authentication.
- Traffic is served over HTTPS, with a strict Content-Security-Policy that forbids third-party scripts entirely.
- Sign-in attempts are rate limited.
No system is perfect. If a breach ever puts your data at risk, we will notify the CNIL within 72 hours and tell affected players directly where the law requires it.
9. Children
The minimum age is 13, and below the age of digital consent where you live a parent or guardian's permission is required — see clause 2 of the terms. We don't knowingly keep data belonging to anyone younger; tell us and it goes.
10. Changes
If this policy changes, the date at the top changes with it and anything material is announced in the news feed.