Last updated: March 2026
1. Data Controller
Darts Community is a community platform dedicated to darts players, operated as a personal project. The data controller can be reached at: [email protected].
2. Data Collected
We collect the following categories of data:
- Account data: email address, password (hashed), username
- OAuth data: Google or Facebook identifier (if signing in via social network)
- Player profile data: nickname, photo, city, biography, walk-on song, skill level
- Equipment: dart components, dartboards, game setups
- Tournaments: participations, results, scores, match statistics
- Venues: created or managed establishments, hours, equipment
- Technical data: session cookies, language preference, browsing data (via Google Analytics)
- Reviews and content: product reviews on the catalog
3. Legal Basis for Processing
Your data is processed on the following legal bases:
- Consent: analytics cookies (Google Analytics), newsletter subscription
- Contract performance: account management, access to features (profile, tournaments, equipment)
- Legitimate interest: platform security, abuse prevention, service improvement
4. Purposes of Processing
Your data is used to:
- Create and manage your user account
- Display your public player profile
- Manage your darts equipment inventory
- Organize and participate in tournaments
- Calculate rankings and statistics
- Send transactional emails (account confirmation, password reset)
- Analyze site usage to improve the service
- Ensure security and prevent fraud
5. Data Sharing
Your data may be shared with the following service providers, solely for the purposes described:
- DigitalOcean (Amsterdam, Netherlands): server and database hosting
- Cloudflare (USA): CDN, DDoS protection and SSL certificate
- Brevo (France): transactional email delivery
- Google Analytics (USA): audience analytics (anonymized data)
We never sell your personal data to third parties.
6. Data Retention
Your data is retained for the following periods:
- Account data: as long as your account is active
- After account deletion: 30-day grace period, then permanent deletion
- Technical logs: 12 months maximum
- Analytics data: per Google Analytics retention policy
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct your personal information
- Right to erasure: delete your account and data
- Right to data portability: export your data in a structured format
- Right to object: object to the processing of your data
- Right to restriction: restrict the processing of your data
To exercise your rights, use the data export feature in your account settings, or contact us at [email protected]. You also have the right to lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.
8. Cookies and Similar Technologies
We use the following cookies:
- Session cookie (required): maintains your login session
- Language preference cookie (required): remembers your language choice (FR/EN)
- CSRF cookie (required): protection against cross-site attacks
- Google Analytics (optional): audience analytics, enabled only with your consent
You can manage your cookie preferences via the consent banner displayed on your first visit.
9. Security
We implement technical and organizational security measures to protect your data: SSL/TLS encryption, password hashing (bcrypt), protection against SQL injection and XSS attacks, rate limiting, and access monitoring.
10. Contact
For any questions about this privacy policy or your personal data, contact us at: