Ludobeta

# Privacy Policy

Welcome to our website (hereinafter referred to as "the Site"). We are committed to protecting the privacy of your personal information. This Privacy Policy explains what information we collect, how we use, protect, and share it, and the choices you have regarding your personal information.

## 1. Information Collection

When you register on our Site, we collect the following information:
- **Email Address**: Used to create your account and for password recovery, never shared.
- **Password**: Encrypted and securely stored, never shared.
- **Photographs attached to your questions**: kept only if you choose to send one. They are used for the sole purpose of producing the answer to the question they accompany, and are transmitted for that purpose to the artificial intelligence providers used by the Site. They are visible to you alone (signed in to your account, or from the browser that asked the question when nobody is signed in there) — another reader opening the link to your answer is told only how many there are — unless you have expressly asked for the photographs of your own questions to be made visible to everyone. Their metadata (date, device model, geographic position) is removed on arrival. They are kept for as long as the question and its answer, are deleted at your request to contact@ludo.help, and are deleted automatically when you delete your account.
- **Games you ask for**: when you ask for a game the Site cannot answer about yet, with or without an account, the Site keeps the game, your account or, without one, your IP address, your language, how you want to be told (for a browser notification, the subscription your browser gives), and what you write about where its rules might be found (a hint). When you pay to have a game made askable, the Site keeps that payment, its progress and how it ended.

## 2. Use of Information

The information we collect is used to:
- Create and manage your user account.
- Allow you to recover your password if forgotten.
- Credit your account in US dollars to ask questions about board game rules.
- Produce the answer to a question, including from a photograph you have attached to it.
- Give you credits for an advertisement you chose to watch, within the limits set out in section 8.
- Tell you when a game you asked for becomes askable, and how a game you paid for is getting on: by a browser notification or an email if you chose them, or by a message on the Site while you are on it (the Site notices your visits in memory and never stores them).
- Have a game you paid for prepared.

## 3. Protection of Information

We implement various security measures to protect your personal information. These measures include:
- Encryption of your password.
- Restricted access to personal information only to employees who need it for operational purposes.

## 4. Information Sharing

Your personal information will never be shared with third parties, except in the following cases:
- To comply with a legal or regulatory obligation.
- With your explicit consent.
- With Cloudflare, which receives the technical signals described in section 7 in order to tell human visitors from automated ones.
- With the artificial intelligence providers the Site uses to write answers (DeepSeek, Google, OpenAI and Anthropic), which receive the text of your question and the photographs you attach to it, for the sole purpose of producing the answer.
- With TypeSafe, which receives the text of your question — never your email address nor your photographs — to check, before it is answered, whether it is about the rules of a board game, which language it is written in, and whether it asks exactly what an earlier question asked. Its terms exclude the use of your question to train models.
- With Google, if you choose to watch an advertisement for credits, as described in section 8.
- With Stripe, which processes payments when you buy credits: it receives your account's email address and the payment details you enter on its page, which the Site never sees.
- With Brevo, which sends the Site's emails (password recovery, notifications you chose): it receives your email address and the content of the message.
- With our own tool for collecting rulebooks, which receives the list of the games asked for with the hints written about them and the interface language of those who paid for them ahead — never your email address nor your account. For a game paid for ahead, the search is entrusted to a Claude session (Anthropic), which receives from the hints only the links they contain. Please put no personal data in a hint.

Transfers outside the European Union. Some of the providers listed above (Cloudflare, Stripe, Google, OpenAI, Anthropic and TypeSafe) process data in the United States. These transfers rely on the safeguards provided for by the GDPR: the European Commission's adequacy decision for companies that adhere to the EU–US Data Privacy Framework or, failing that, the European Commission's standard contractual clauses. DeepSeek processes the text of your questions and their photographs in the People's Republic of China, for which the European Commission has adopted no adequacy decision; this transfer takes place because it is necessary to produce the answer you ask for (Article 49(1)(b) of the GDPR). Please put no personal data in your questions or photographs.

## 5. Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- **Right of Access**: You can request a copy of the personal information we hold about you.
- **Right to Rectification**: You can request the correction of your personal information if it is inaccurate or incomplete.
- **Right to Erasure**: You can request the deletion of your personal information under certain circumstances.
- **Right to Restrict Processing**: You can request the restriction of the processing of your personal information under certain circumstances.
- **Right to Data Portability**: You can request that your personal information be provided to you in a structured, commonly used, and machine-readable format.
- **Right to Object**: You can object to the processing of your personal information under certain circumstances.

The data you can download from your profile includes your game requests, your hints and the games you paid for. Deleting your account deletes your game requests and your hints, and removes from the games you paid for everything that says who paid.

## 6. Cookies

We use cookies only for the workings of the site: your sign-in, the language the site is shown in, the draft of your question, and a random identifier of your browser. This identifier is created with your first question, kept 13 months after your last question, and stored with each of your questions. It serves only to recognise the browser that asked a question, to show you its photographs and to link you to your own answers when you are not signed in. It is passed on to no third party, and it is erased from your questions when you delete your account.
Cookies might be used by third party tools necessary to the website like robot detection and online payment, and by advertising only once you have chosen to watch an advertisement for credits (section 8).

## 7. Bot Protection

To tell human visitors from automated ones, the Site uses Cloudflare Turnstile on its signup and question forms. It runs invisibly: there is no puzzle to solve, and no widget appears on the page. To make that judgement, Cloudflare receives your IP address, your browser's TLS fingerprint and User-Agent header, and the identifier of the site you are visiting. Cloudflare states that it cannot identify you from those signals, and does not use them to build an advertising profile. How Cloudflare handles that data is set out in its Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

## 8. Advertising for Credits

Where the Site offers it, a signed-in user holding 10 credits or fewer may choose to watch an advertisement to receive 2 credits, at most 20 times a day and 100 times a week. Nothing to do with advertising is loaded before that button is pressed. Once it is, the Site loads Google's advertising service and, in the European Economic Area, the United Kingdom and Switzerland, Google's consent dialog, in which you accept or refuse personalised advertising; refusing still lets you watch an advertisement, which is then not personalised. Google receives your IP address and the technical signals of your browser, and may use cookies or similar identifiers as described in its own policy: https://policies.google.com/technologies/ads

The Site keeps the date of each advertisement it gave you credits for, to apply these limits and to check them against the reports of its advertising partner. These dates are part of the data you can download from your profile, and are deleted with your account.

## 9. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this page periodically to stay informed of any updates.

## 10. Contact

If you have any questions or concerns about this Privacy Policy or your personal information, please contact us at: [contact@ludo.help].

By registering on our Site, you agree to this Privacy Policy. Thank you for your trust.

---

This webpage is drafted in compliance with data protection regulations, particularly the GDPR, ensuring the privacy and security of our users' personal information.