Privacy policy
What Fallegro keeps, why, for how long, and what you can do about it.
This is a translation. Fallegro is published from France and the French version is the one that governs: if the two ever disagree, the French text prevails.
Who handles your data
Fallegro is published by Germain Lecourtois, an individual publishing on a non-professional basis. Contact details are on the legal notice.
The short version
- You can play without giving anything: no account, no email, no name.
- No ads, no analytics, no tracker, no request to any third-party site. Nothing is sold or passed on.
- No cookie is set for players.
- What the server keeps is listed below, field by field. An automated check fails if the code starts keeping a piece of data that this page does not list.
In your browser
The game keeps your progress in your browser’s local storage, which never leaves your device unless stated below. Clearing the site’s data in your browser erases all of it.
| Stored as | What, and why |
|---|---|
| Progress | Stars per phrase, composers you have met and biographies read, pieces listened to, number of shares, badges and their dates. To unlock the course and collections. Sent to the server only once you have a player there (see below), to keep it across devices. |
| Constructions | Where you placed each key, per phrase, so you find your construction again. |
| Best runs | Your best successful construction per phrase, replayed when your balls play a whole piece. |
| Player key | A random key created the first time a run is sent to the leaderboard. It is what identifies this device to the server — nothing else does. |
| Nickname, email | A copy of the nickname and email address you chose, if any, to show them in the game. |
| Tutorial seen | So the “How to play” screen is not shown again. |
| Opened replays | Replays opened from a link, kept only until the tab is closed (session storage). |
On the server
The server only learns about you when you send a successful run to the leaderboard, ask for a hint, link a device or ask for an email sign-in link. Until then, it knows nothing.
| Data | Why |
|---|---|
| Your player, and one key per linked device | To recognise your devices. Only a fingerprint (hash) of each key is stored, never the key itself. |
| Nickname | Optional. Shown on the leaderboards and on your replays. Without one, you appear as “Guest” followed by a number. |
| Progress | The same progress as in your browser, merged from all your devices so none overwrites another. |
| Your runs | For each run sent: the phrase and its version, your construction, the score, stars and a fingerprint of the result, whether the server confirmed it, whether help was used, and the date. Runs make the leaderboard and the replay links: they are public, under your nickname. |
| Help used | Each hint or solution you ask for, on which phrase and when: runs played afterwards on that phrase are kept off the leaderboard. |
| Device code | The one-time code for linking another device: a fingerprint only, valid for ten minutes, replaced by the next one. |
| Email address | Optional, and only once you have opened a sign-in link sent to it. Used solely to send you sign-in links when you ask for one. No newsletter; never shown to anyone. |
| Sign-in links | The address a link was sent to, a fingerprint of the link, the player who asked and the dates. Valid for thirty minutes, single use, then erased. |
| Request counters | Your IP address, and a fingerprint of an email address, counted for one hour to limit the number of link requests and code attempts. Then forgotten. |
| Server logs | Like any web server: IP address, date, address requested and browser name, to keep the service running and investigate abuse. Kept two weeks. |
Who else is involved
- OVH SAS (France) hosts the server and sends the sign-in emails.
- Cloudflare, Inc. carries the traffic to the site, to protect and speed it up. Like any network intermediary it sees your IP address; it is bound by the EU–US Data Privacy Framework.
No one else. There is no third party to sell to, and none is used for analytics or advertising.
For how long
- Your player, progress, runs and help used: as long as the game is online, unless you ask for them to be erased. Runs are part of public leaderboards, which have to stay verifiable.
- Sign-in links: thirty minutes. Device codes: ten minutes. Request counters: one hour. Server logs: two weeks.
Your rights
You can ask to see the data held about you, to correct it, to have it erased, or to receive a copy, by writing to the contact address on the legal notice. As players have no password, say which nickname or email address you use and, if possible, send the request from that email address. You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.