Privacy

The Short Version

• I collect what each feature needs, and nothing to sell. I don't sell or share anyone's data for advertising, and none of the sites shows ads.
• Analytics on this site runs only if you accept it. You can change your mind any time with Cookie Settings.
• To get a copy of your data, fix it, or delete it, use the contact form.

Cookies and Analytics

This site (uncleversace.com) uses these cookies:

• A session cookie, only when a page needs one: signing in, or the contact form's security token. It expires after 12 hours without use.
• A "remember me" cookie, only if you tick that box when signing in (only I have an account here). It lasts a week.
• analytics_consent, which remembers whether you accepted or rejected analytics, for 180 days.
• Google Analytics cookies (_ga and _ga_...), only if you accept. Until you do, nothing from Google loads at all.

If you accept, Google Analytics records which pages you view, which games you start and finish, whether you sent a message (never what it said), and general facts about your visit: browser, device type, approximate location, and how you arrived. Google Analytics doesn't keep your IP address, and I keep this data for 14 months. Game codes are removed before anything is sent. Google processes it under its own terms: how Google uses information from sites that use its services.

If your browser sends a Global Privacy Control signal, I treat it as "reject" and don't ask; you can still opt in with Cookie Settings. The older "Do Not Track" setting is no longer supported by browsers, so it isn't used separately.

What Every Site Keeps

• Server logs. The web server logs each request: your IP address, the page, the time, and your browser. These logs are deleted after 14 days.
• Error logs, kept up to 60 days, can include the page and your IP address when something breaks.
• Security logs. Failed sign-ins are logged with the IP address and kept 90 days (uncleversace.com, theysaidit.app, and accumulatedknowledge.app), to spot and block password guessing.
• Hosting. All four sites run on servers I rent from DigitalOcean, in New York, in the United States.

uncleversace.com (This Site)

• Contact form: your name, email address, message, and IP address (the IP is kept to deal with abuse of the form). Messages are stored in this site's database, where I read them. Messages filtered as spam are deleted after 30 days, and every message after a year.
• Games: no account needed. The names you type for a game are stored with that game, and the game is deleted after 48 hours without activity. Your own device keeps your seat in a game and the names you used last time, in its local storage; nothing else is stored about you.
• Accounts: visitors can't create one. The only account is mine.
• Analytics: Google Analytics, only if you accept (see above).

theysaidit.app

• Searches: what you search for is stored with your IP address, to count popular searches. A separate search log (the search, your IP address, browser, and the page you came from) is kept 30 days, to tell people from bots.
• Contact form: your email address, message, and IP address. There's no automatic deletion yet; I delete messages by hand, or when you ask.
• Accounts: visitors can't create one.
• Analytics: this site currently loads Google Analytics for every visitor. A consent banner like this site's is on its way.
• Other services your browser contacts: Google Fonts, jsDelivr, and cdnjs (for fonts, icons, and styles), plus The Movie Database (for movie images). Each one sees your IP address when your browser fetches from it.

accumulatedknowledge.app

• Your account: your email address, a hashed password (I can't read it), and your time zone. Sign-up needs an emailed verification link; password resets are sent by email too.
• What you log: your events, decks, matches, and games, including the names you type for your opponents. It's kept for as long as you have an account.
• Feedback you send from the site, with the IP address it came from.
• IP addresses: the IP address that created or last changed each record is stored with it.
• Cookies: a session cookie, an optional "remember me" cookie (30 days), and a timezone cookie (a year) that saves your time zone to your account. Drafts of a quick-log entry stay in your browser.
• Deleting your account: there's no button yet. Ask through the contact form, and I'll delete your account and everything you logged.
• Analytics: this site currently loads Google Analytics for every visitor. A consent banner like this site's is on its way.
• Other services your browser contacts: Google Fonts.

uncleversacebot.com

• Streamer accounts: created by me, not by sign-up. An account holds an email address, a hashed password, a time zone, and the linked Twitch channel.
• Twitch and Spotify connections: when a streamer links Twitch (and, optionally, Spotify), the site stores the sign-in tokens those services issue, so the bot can act for the channel. Unlinking Twitch from your profile removes its tokens; ask me to remove Spotify's, or anything else.
• Chat in channels the bot is in: the bot records chat messages, usernames, display names, and name changes, to power its commands, check-ins, quotes, auctions, and history. That includes viewers who chat there, not just the streamer.
• How long: this history is kept. Free accounts see only the last 12 months, but older entries aren't deleted yet. Ask through the contact form to have your chat history removed.
• IP addresses: the IP address that created or last changed most records is stored with it.
• Analytics: none.
• Other services your browser contacts: Google Fonts, and cdnjs on the auction widget.

Who Else Sees Your Data

• DigitalOcean hosts all four sites.
• Google: Analytics (where described above) and Fonts.
• Twitch and Spotify, for uncleversacebot.com's connections.
• An email provider, to send accumulatedknowledge.app's account emails.
• jsDelivr, cdnjs, and The Movie Database, as described in the site sections.

I'd only hand data to anyone else if the law required it.

Why I'm Allowed to Keep It

Analytics runs on your consent. Account and game data is kept because you asked a site to do something with it. Logs, security records, and contact messages are kept because running a safe, working site needs them (what privacy law calls "legitimate interests").

Your Rights

Wherever you live, you can ask me for a copy of your data, to correct it, to delete it, or to stop using it. Use the contact form and say which site; I'll reply within a month. If you're in the EU or the UK and think I've handled your data wrongly, you can also complain to your data protection authority.

Children

None of the sites are meant for children under 13, and I don't knowingly collect their data. If you think a child has sent me something, tell me and I'll delete it.

Changes

When a site starts collecting something new, or keeps it differently, this page changes in the same update, and the date at the top moves. Security problems go to the security page.