Privacy policy
Data controller and contact
Fingerspurt is run by Jeppe Sigaard, Halfdansvej 26, DK-5700 Svendborg. You can contact us at privacy@fingerspurt.app.
What data we process
Fingerspurt has no accounts and no cookies. We use Google Analytics 4 without cookies or local storage for anonymous traffic statistics (page views, device, approximate country). Your browser creates a random player id, which is how we know you. We process the following, depending on how you play:
- On your device (localStorage): your player id, player name, look, color and bib number, which side the dash meter is on, whether the guide line is on, your best practice time with its replay, the last room code you visited, your language choice, your graphics setting, whether you have seen the guide, and your music and sound effects choices (tapracer.sound.v1).
- Also on your device (sessionStorage, cleared when you close the tab): a token for getting back into a room after a dropout (tapracer.session.v1), your motion choice across a reload (tapracer.consent.v1), and a flag that prevents repeated reloads after an update (tapracer.reload.v1).
- The server: whenever the game is open and connected, even when you only practice, your player id, name, look, color, bib number and language choice are sent to Fingerspurt's server. They are held only in the server's memory, while you are connected and for a short while after. When you play in a room, your name and your position in the race are held in memory for as long as the room exists. The others in the room and spectators with the room code can see your name and your race. If the room is public, the host's name and the room code are shown in the list of public rooms, so anyone can watch.
- The leaderboard: every heat you finish online, and every practice time that beats your own record, is sent automatically to the public leaderboard. We store your player id, name, look, color, bib number, time, game mode, a film (replay) of the race and when it was set. Anyone can see all of it except the player id. A film from a heat also shows the other runners' names, looks, colors and bib numbers.
- Saved races: you can save your practice runs. When someone saves a heat, a film of the whole heat is stored with every runner's name, look, color and bib number, including yours, even if someone else saved it. The film belongs to the player ids that saved it, and anyone with the link can watch it.
- The alpha pass: your email, your language choice, your pass number and a link token are stored by Fingerspurt and by Brevo. The time of your consent is stored only by Fingerspurt.
- IP address: we read it briefly to limit how often anyone can submit to the leaderboard, saved races and the alpha pass. It is held only in memory and never stored.
None of this is sent to a third party other than the data processors listed below.
Purpose
We use your data to run the game itself (online play, leaderboard, saved races, settings) and to send the weekly email about what is new in Fingerspurt to alpha pass recipients.
Legal basis
Online play, the leaderboard, saved races and local settings are processed on the basis of our legitimate interest in running the game (GDPR Article 6(1)(f)). The weekly email is sent on the basis of your consent (GDPR Article 6(1)(a)), given when you sign up and confirmed with double opt-in.
Retention
- Server data about your connection is held only in memory, while you are connected and for a short while after. Room data is held only in memory, for as long as the room exists.
- The leaderboard: your best time stays until you beat it, or until you ask us to delete it.
- Saved races: each player keeps at most 50 saved races, and the oldest are removed from the list automatically. A film is deleted when no one has it on their list any more, or when you ask us to delete it.
- The alpha pass: your email, language, pass number, token and consent time stay with Fingerspurt, even if you unsubscribe from the email or never confirm the sign-up, because the pass later gives you the full game. We delete it when you ask us to.
- Data on your device stays there until you clear it in your browser. sessionStorage is cleared when you close the tab.
Data processors
Render (render.com) runs the server and the database. Render is a US company, so your data may be transferred to a country outside the EU. The transfer is covered by Render's data processing agreement.
Brevo (brevo.com), based in the EU, sends the weekly email and handles double opt-in and unsubscribing. Brevo is a data processor for the information we pass on, under a data processing agreement.
Unsubscribing
Every email from Brevo has an unsubscribe link. If you unsubscribe, Brevo stops sending you emails. Your alpha pass stays with Fingerspurt until you ask us to delete it.
Your rights
You have the right to access your data and to have it corrected or deleted. You can also ask us to restrict the processing, object to it, and receive your data in a machine-readable format (data portability). You can withdraw your consent to the email at any time. This does not affect the processing that took place before.
Send your request to the address in the Data controller and contact section above. Since we only know you by a random player id, include the name you used in the game and roughly when you raced. For the alpha pass, write from the email you signed up with.
Complaints
You have the right to complain about our data processing to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).