We ask for a name and we do not want anything else

There are no accounts, no advertising, no analytics and no tracking. This page is the whole of it, and it is short on purpose.

Last updated 24 August 2026

Who is responsible

Hera, Rue Juge, 75015 Paris, France, is the data controller for the processing described here. Registration number [SIREN / RCS]. Write to contact@provenancethegame.com about anything on this page.

We have not appointed a data protection officer. Given how little we hold, we are not required to, and the address above reaches a person rather than a department.

What we collect in the app

Display name

The name you type, up to twelve characters. You choose it; it need not be your own. It is shown to the other people in your room and stored with the room.

Device identifier

A random identifier that the app generates on your device and keeps in the keychain, so we can tell players apart within a room. It is not your device's advertising identifier, we do not ask Apple for one, and it is not shared with anybody.

Play within a room

Your votes, your score, and which room you are in, for as long as that room exists.

Push token

Only if you turn notifications on: the token Apple issues so a message can reach your device.

Purchases

Handled entirely by Apple. We ask Apple what your Apple ID is entitled to; we never receive your name, your email address or your payment details.

What we collect on this website

This site sets no cookies, runs no analytics, and loads no scripts, fonts or images from anyone else. Nothing here follows you.

What remains is unavoidable: our host records ordinary server logs when a page is requested — the IP address, the time, the page, the browser — in order to deliver the site and to protect it from attack. We do not use those logs to identify anyone, we do not combine them with anything from the app, and we do not build profiles from them.

What we never collect

No email address. No phone number. No contacts. No photographs. No location, coarse or precise. No advertising identifier. No analytics events. No crash reports containing personal data. We do not track you across other apps or websites, and we do not have an advertising business to do it for.

Why we process it, and on what legal basis

To run a game

Display name, device identifier, votes and scores. Legal basis: performance of the contract between us — you asked to play, and a game cannot be played without knowing who voted what. GDPR Art. 6(1)(b)

To notify you

Push token. Legal basis: your consent, given when you allow notifications, and withdrawable at any moment in iOS Settings without losing any part of the game. GDPR Art. 6(1)(a)

To keep it working

Server logs, and blocking a device that is used to harass people. Legal basis: our legitimate interest in a service that stays up and is not abused. GDPR Art. 6(1)(f)

We do not profile you, we do not build audiences, we do not sell or share anything with anyone for advertising, and no decision about you is made automatically.

How long we keep it

Room data — names, votes, scores — is deleted six hours after the room is created. Not archived: deleted.
Push tokens are deleted when you turn notifications off, or after ninety days without use.
Server logs are kept by our host for a short period, currently no longer than thirty days, and then discarded.
Purchase entitlements are held by Apple, under Apple's own retention rules, not by us.

Who else touches it

Three parties, and this is the complete list.

Supabase

Hosts the room database and the real-time connection, in the European Union, as our processor and on our written instructions under a data processing agreement.

Vercel

Hosts this website and serves its pages. It sees the server logs described above and nothing from the app.

Apple

Processes purchases and delivers push notifications, under its own terms and as its own controller for those activities.

Each of them is contractually bound to protect your data to a standard at least equal to the one described in this policy, and none of them is permitted to use it for their own purposes. We do not sell personal data, and we have never disclosed any to an advertiser, because we have none to disclose.

Where it is stored

Room data is stored in the European Union. Some of our providers are established in the United States and may process data there — principally the delivery of this website and of push notifications. Where that happens we rely on the appropriate safeguards under Chapter V of the GDPR, being the European Commission's standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. A copy of the relevant safeguards is available on request.

Your rights

Under the GDPR you may ask for access to your data, its correction, its erasure, the restriction of its processing, or its portability, and you may object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting what was done beforehand.

Because we hold so little, and none of it is linked to an identity, the fastest route is inside the app:

Forget this device, in the app's settings, clears the identifier and the local library cache, and cuts the link between you and any room data still alive.
Notifications are switched off in iOS Settings, which withdraws that consent immediately.
Deleting the app removes the identifier with it. Any room you were in expires within six hours regardless.

For a formal request, write to contact@provenancethegame.com. We answer within one month, as the GDPR requires. We may need to ask which room you were in, since we have no other way to find you — and if the room has already expired, there is nothing left to act upon, which we will say plainly.

You also have the right to complain to a supervisory authority. In France that is the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr. If you live elsewhere in the EU or the EEA, you may complain to your own authority instead.

Children

Provenance is rated 12+ and is not directed at children under twelve. We do not knowingly collect data from them. In France, where consent is the basis for processing, a person under fifteen needs the authorisation of a parent or guardian; this affects notifications only, which are optional. If you believe a child has given us data, write to contact@provenancethegame.com and we will delete it.

Security

Traffic between the app and our servers is encrypted in transit. Access to the room database is restricted by row-level security, so a device can read only the room it is in and write only its own vote. Nothing about a room is readable without its four-letter code. The identifier that represents you is generated on your device and stored in the keychain.

Changes

A material change is posted here with a new date and announced in the app before it takes effect. We will not quietly begin collecting something that is not on this page.

Contact

contact@provenancethegame.com · Hera, Rue Juge, 75015 Paris, France