Privacy Policy — Party

Effective Date: August 21, 2026 Updated: October 24, 2026

1. Who we are

Party ("we", "our", or "us") provides a tabletop roleplaying game (TTRPG) matchmaking and scheduling platform, as an Android app and a web app. This Privacy Policy explains which personal data we process, why, who receives it, how long we keep it and what your rights are.

The data controller is Paragon, a sole proprietorship (entreprise individuelle) registered in France. For any question about your data or to exercise your rights, write to contact@findyour.party.

2. Who can use Party

Party is for people aged 16 and over. At sign-up you state your age range; an answer under 16 blocks the account and is not stored. Your age range (16–17, or 18 and over) is kept with your account so the app can apply its rules for minors: in-person seats only at public venues that accept minors, and no direct messages between an adult and a minor. Other users never see your age; an organiser only sees that an applicant is under 18.

3. Information we collect

Account and sign-in

• Account details: your e-mail address, your password (stored only as a hash by our hosting provider) and your user code, which serves as a sign-in identifier.
• Discord sign-in (optional): if you sign in with Discord or link a Discord account, Discord sends us your Discord user ID, username, e-mail address and avatar link. When a community organiser verifies with Discord that they own a server, the app asks Discord, once, for the list of servers they belong to, checks that they own that server, then revokes the access; that list is not stored.

Profile

• Your display name (alias), bio, profile picture, the city or area you indicate, preferred game systems, experience level, playstyle options, Lines & Veils (themes you refuse or only accept off-screen), time zone, language, display settings and friend code. Your display name, profile picture, bio, city or area and game preferences are visible to other users.

Location

• Home location: the point you set on the map in your profile, or your phone’s approximate position if you allow it (the app only asks Android for approximate location). It is stored at a precision of about 100 metres and is never shown to other users. It is used to show games and communities near you and to suggest a meeting point for the tables you belong to: other members see only that point, which is computed only when at least three members have set a location and is rounded to about one kilometre.
• Venue of an in-person table: if you organise an in-person game, its location is a public place you choose, a point you pin on the map, or your home. When it is your home, other users only see the city and a point drawn at random up to 100 metres away, shown as a 100-metre circle.
• Map and place search: city search, maps and venue search call OpenStreetMap-based services directly from your device (see §5). They receive your IP address, the text you search, and the coordinates or area around which the search is made (your home point or your phone’s approximate position). Party does not store these searches, except the ones you save as an alert (see “Table alerts”).

Games, communities and activity

• Campaigns and tables you create or join: listings, applications, invitations, membership, session dates, attendance records, scheduling polls and votes, venue votes, bookmarks, session recaps and anonymous veil requests.
• Reputation: reliability (karma) events and the reviews players write about Game Masters, which are shown on the Game Master’s profile.
• Member page: other signed-in users (never visitors without an account) see on your profile, besides your display name, picture, bio, city or area and preferred systems, the month you joined and, if you are a Game Master, your average rating and latest reviews and the public tables you run or ran. They also see the public tables where you held a seat, but only if you chose so. Each table shows only its title, system, format (online, in person or hybrid) and period: never where it plays, nor how your seat ended. Tables reserved to a community’s members are left out. Under 18, the page shows the profile only. Someone you blocked, or who blocked you, does not see it. You choose what shows in Me ▸ Public profile.
• Communities (clubs, shops, associations, Discord servers): listings you create or manage, gatherings and their attendance, and community ownership claims. A claim includes your role in the organisation and the contact details you give for the meeting with our team (a phone number or an e-mail address).
• Table alerts (optional): the searches you save as an alert, 3 at most: system, format, distance, keywords, length, level, and up to three search points (your search position and the towns you added) rounded to about 1 kilometre; and the list of new tables found for you, kept 30 days. If the alert keeps “When I’m free”, our server compares each new table with your availability. Alerts are only used to tell you when a new table matches and, if you choose so, to follow the full tables that match so you hear when a seat frees up; nobody else sees them. A table’s Game Master only sees how many people follow it. You can pause or delete them at any time (Explore ▸ Alerts); they are deleted with your account.
• Availability & Calendar Sync (optional): your weekly availability template, dated absences, and — only if you connect a personal calendar link or import an .ics file — the time ranges during which that calendar marks you busy or tentative, for the next 8 weeks. Event titles, descriptions, locations and attendees are discarded during processing and never stored; the calendar link itself is stored server-side, visible to no one, and can be removed at any time (its derived time ranges are deleted with it). Other members of your campaigns only ever see whether you are free, flexible or busy at a given hour.

Messages

• Table group chats and direct messages, visible only to the members of the conversation. Messages can be read by our moderators when they are reported.

Safety and moderation

• Reports you file or that concern you, blocks, child-safety reports, moderation decisions, suspension records and appeals.
• Device identifiers: when you create an account we record a device identifier — on Android, an app-scoped installation ID; in a browser, a hash derived from your browser and device configuration. It is used for one purpose only: enforcing suspensions, so that an account removed for harassment or child-safety reasons cannot immediately be recreated on the same device. It is never used for advertising, profiling or analytics, and it is never shared. Our legitimate interest in keeping the platform safe is the legal basis (GDPR art. 6(1)(f)); you can object by writing to the contact address above.
• Image safety screening: every profile picture and campaign banner you upload — the resized copy the app stores — is sent by our server to Shield, a service of the Canadian Centre for Child Protection (Project Arachnid). Shield compares it with known child sexual abuse material and returns a verdict. Shield keeps the images that match. It may also keep an image that closely resembles known material, so that one of its analysts can check it, even when the verdict it returns is “no match”; it keeps no other image. This is how Shield described its practice in October 2026; its terms of use and its data processing agreement govern it. On our side we keep, next to the image, a technical fingerprint (a short code summarising what the image looks like) and that verdict. The fingerprint also lets our moderators notice the same photo on several accounts, a sign of an impersonation or scam profile; that only alerts them. Fingerprints are deleted with your account, except for an image that matched. If an image matches, it is withdrawn from public view and kept as evidence, the account is suspended and the case is reported to the authorities (see §8). Legal basis: our legitimate interest, and our users’, in keeping the platform free of child sexual abuse material (GDPR art. 6(1)(f)). This involves a transfer to Canada (see §6).

Notifications

• Push notifications (Android app, optional): if you allow notifications on your phone, we store the token Firebase Cloud Messaging (Google) assigns to the app on that device, together with the device’s language. It is used only to send you the notifications you have turned on; their title and a short excerpt (for example the start of a direct message) pass through Google’s servers to be delivered. The token is erased when you sign out on that phone, when Google reports it invalid, or with your account. You can turn these notifications off in Me → Notifications or in Android settings. Legal basis: performing the service you ask for (GDPR art. 6(1)(b)).
• In-app notifications and the e-mails the service needs to send (account confirmation, sign-in codes, address change, community claim decisions).

What we do not collect

• No payment information, ever: Party is free and processes no payment. We do not ask for, collect, receive or store any card number, bank detail, billing address or other financial information, and no payment provider acts for us.
• No advertising, no advertising ID, no analytics or crash-reporting tool, no contacts, no precise GPS location, and no access to your photos other than the picture you choose to upload.

4. Why we use your data, and on what legal basis

• Providing the service you sign up for — account, profile, matchmaking, tables, communities, chat, scheduling, notifications (GDPR art. 6(1)(b), performance of the contract).
• Keeping the platform safe — age rules for minors, moderation, reports and blocks, device identifiers, image screening, preventing fake or scam profiles (art. 6(1)(f), our and our users’ legitimate interest; for minors’ protection also art. 6(1)(c)).
• Meeting our legal obligations — reporting child sexual abuse material to the authorities, keeping evidence under legal hold, answering lawful requests (art. 6(1)(c)).
• Optional features you switch on — your phone’s location, push notifications, a connected calendar, Discord sign-in. You can switch them off at any time; the app keeps working without them.

We never sell your data and never use it for advertising. One decision is automatic: when Shield recognises an uploaded image as known child sexual abuse material, the account is suspended at once. A moderator then reviews the case before any report to the authorities, and you can contest the suspension by writing to the contact address above (GDPR art. 22).

5. Who receives your data

• Other users: only what the app shows them — your public profile, your listings, your reviews of Game Masters, your messages in the conversations you take part in, and your availability as free, flexible or busy for the members of your tables.
• Service providers acting on our behalf: Supabase (database, authentication, file storage and the account e-mails), Vercel (hosting of the web app and these pages), Google Firebase Cloud Messaging (push notifications), Resend (e-mails about community claims), Discord (only if you use Discord sign-in or verification).
• Services the app calls directly from your device: OpenStreetMap services — Nominatim (place search), map tiles and Overpass (venue search, through the overpass-api.de, overpass.kumi.systems and overpass.nchc.org.tw servers) — and Photon by komoot (venue search). They receive your IP address and the search text or coordinates described in §3. The app also loads fonts from Google Fonts and images from cdnjs, GitHub and Unsplash, which receive your IP address like any website.
• Automatic translation: when you read reviews of a Game Master written in another language, the text of those reviews (not the names of their authors) is sent to MyMemory, a translation service run by Translated (Italy), so that the app can show a translation.
• Image screening: Shield, run by the Canadian Centre for Child Protection (see §3).
• Authorities: the French authorities (PHAROS), the NCMEC CyberTipline and law enforcement, in the cases described in §8 or when the law requires it.

6. Transfers outside the European Union

Some recipients are established outside the European Union: Supabase, Vercel, Google, Resend and Discord in the United States, the Overpass server overpass.nchc.org.tw in Taiwan, and Shield in Canada. Transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified, or on the standard contractual clauses in its data processing terms. Transfers to Shield are governed by the data processing agreement of the Canadian Centre for Child Protection, which we accepted when opening our Shield account; Canada also benefits from a European Commission adequacy decision (Decision 2002/2/EC). What Shield keeps is described in §3. The Taiwan Overpass server is only queried when the other Overpass servers do not answer; the query contains the search area and your IP address.

7. How long we keep your data

• Your account, profile and content: as long as your account exists. They are deleted when you delete your account (see §8).
• Calendar busy ranges: the next 8 weeks only, refreshed at each sync; the calendar link until you remove it.
• Push notification tokens: until you sign out on that phone, Google reports the token invalid, or you delete your account.
• Community claims: until you delete your account or the listing is removed.
• Reports and moderation records: as long as the accounts concerned exist, so that decisions can be explained and appealed; suspension records and the identifiers of a suspended device as long as the suspension applies.
• Child-safety reports and their evidence: one year after the report to the authorities, or longer at their request.

8. Data deletion

You can delete your account at any time in the app via Me → Account → Delete Account or through our web portal at Account Deletion Portal. Deletion removes your profile, messages, applications, friendships, availability, reputation history and uploaded images.

Two things are kept, and only these:

• Child-safety reports under legal hold, with the evidence they concern (such as an image flagged by the screening above), are retained for one year after the report to the authorities, or longer at their request, as required for cooperation with law enforcement, the French authorities’ PHAROS platform and the NCMEC CyberTipline.
• Suspension records for an account removed for a safety violation, so the suspension cannot be evaded.

Deletion is refused, with an explanation, in one case only: while you are running a campaign that other players have joined, because deleting your account would erase their sessions and conversations too. Hand the campaign over or close it, and the deletion proceeds.

9. Security

All data in transit is encrypted using TLS / HTTPS. All backend records in Supabase are isolated using Row-Level Security (RLS) policies, so that only authorised members of a table can read its chats and schedules. Home locations are stored apart from profiles, in a table no user can read.

10. Your rights

Under the GDPR and the French Data Protection Act, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, to withdraw your consent to an optional feature at any time, and to give instructions about what happens to your data after your death. Write to contact@findyour.party; we answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

11. Changes

When this policy changes, the "Updated" date above changes too. If a change affects how your data is used, we will tell you in the app or by e-mail before it applies.