Privacy policy – Corrillo
Corrillo is offered by Marc Bernardo Ferré, from Spain. You can write to us at corrillo.game@gmail.com.
We keep this so you can play: - Your account: username (it is public: rankings, rooms and games show it), email, password (we only keep a hash), sign-up date, last sign-in, the hours in which you were online (one mark per hour), ranking points, credits and the picture you chose from the game's catalogue. - If you play as a guest: a random name and no real email until you save the account. - If you sign in with Google: your Google account id and the email Google confirms. We do not keep your Google name or photo. - Games: the rooms and games you play, your moves and results. We keep them so finished games can be replayed and ranked. Unfinished rooms and games are deleted when they have been idle for a while. Chat messages are not stored, only relayed. - Error reports: when the server fails, a report goes to Sentry (Functional Software Inc., USA) with the request, the IP address and, for a game socket, your user id and username. - We store no IP address in our database. Our host (Heroku, by Salesforce, EU region) keeps standard access logs.
We use your data for these reasons: - Contract: to give you the account and the games. - Legal obligation: to keep purchase records. - Legitimate interest: security, error reports and preventing abuse.
These services receive data so that Corrillo works: - Heroku (hosting and database, EU). - Sentry (error reports, USA), under Standard Contractual Clauses or the EU-US Data Privacy Framework. - Google (sign-in). We sell nothing, we show no ads and we use no analytics.
We use no tracking cookies. The app keeps in the browser's local storage your session (sign-in tokens), your language and your preferences, and its service worker caches the app so it opens offline. This is needed for the service, so there is no consent banner.
We keep your account until you delete it. Deleting your account (in your profile) anonymises it: your username, email and Google link are removed and you cannot sign in. Your finished games and purchase records stay with an anonymous name ("deleted-<number>"), because other players' games and the law need them. Purchase records are kept as long as Spanish tax law requires.
You have the right to access, rectify, erase, restrict and object to the use of your data, and to receive it in a portable format. Write to corrillo.game@gmail.com. If you think we handle it badly, you can complain to the AEPD, the Spanish authority: https://www.aepd.es
You must be 18 or older to use Corrillo.
The date at the top says when this policy last changed. If the change is important, we will announce it in the app.
- Rooms and unfinished games are deleted after 1 day without activity. - The app loads its fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so your browser contacts Google when it opens the app. - The confirmation that you are 18 or older for the adult packs is kept only in your browser. - A rule you write in La Ruleta is kept with that game.