Privacy policy

1. Who handles your data

KWET (kwet.eu, also called Warpaint) is a statistics dashboard for alliances of the game Last War: Survival. The data controller is the site's publisher: KWET, 7 rue Eugène Millon, 75015 Paris (domiciliation), SIRET 000 000 000 00000 [À COMPLÉTER : SIRET factice, à remplacer à la création de la micro-entreprise].

Contact for any question about your data: kwet@santorelli.fr.

Each alliance has its own space (<alliance>.kwet.eu) and its own database. The alliance's R4/R5 officers decide to send their members' data there.

2. Data we process

• Game data of an alliance's members: nickname, in-game player ID (uid), alliance rank, former nicknames, scores and rankings (VS, kills, donations, power, Storm attendance, trains). No real name, e-mail or address.
• R4/R5 accounts: Discord ID and Discord username (sign-in with the "identify" permission only: no e-mail, no server list), role, creation and last sign-in dates.
• Payment: we receive from Lemon Squeezy an order number, a number of months and the alliance credited. Never the buyer's name, e-mail or bank details.
• Technical data: IP address and connection logs, processed by the host to run and protect the site.

Players do not enter this data. A third-party tool (lwvs), used by alliance officers, passively captures the game's network traffic on their device and sends it to the alliance's space. The documents received are kept as they are, so they can be read again after the site evolves.

This page is the notice to players whose data is not collected directly from them (GDPR article 14).

3. Why, and on what legal basis

• Showing the alliance's statistics to its members and helping its officers organise: legitimate interest (GDPR article 6(1)(f)).
• Reserving the admin tools for R4/R5 (Discord sign-in): performing the service the alliance asked for, and the legitimate interest of security.
• Crediting the alliance after a payment and keeping accounts: performance of a contract and legal obligation.
• Backups, limiting abuse (sign-up quota): legitimate interest.

No advertising, no resale, no profiling, no audience measurement.

4. A publicly readable site

An alliance's pages (nicknames and scores included) can be read by anyone who knows the address, without an account. Only the admin tools require signing in.

Alliance pages load their fonts from Google Fonts: the visitor's browser then sends its IP address to Google. No other third-party service is called by the pages.

5. Cookies

KWET only uses cookies needed to operate or for a choice you made: language, the R4/R5 session (30 days), the shared admin access, a Discord sign-in token lasting a few minutes and, on the rewards page, the player you picked. No advertising or audience-measurement cookies, so there is no consent banner.

6. How long we keep it

• Game data and R4/R5 accounts: as long as the alliance exists. The free plan hides old history but deletes nothing.
• R4/R5 invitation link: 7 days, only its fingerprint is stored. Sign-in session: 30 days.
• Payment references (order, months, date, alliance): the statutory accounting retention period, 10 years in France.
• Backups: rolling copies live in the alliance's folder; the daily off-site copy expires after 7 days; the host's volume snapshots follow the host's own retention.
• Connection logs: as set by the host.

7. Who receives the data

An alliance's R4/R5 see their own alliance's data, and only that. Our providers:

• Fly.io (hosting, server in the Paris region): database and logs.
• Discord: R4/R5 sign-in.
• Lemon Squeezy: merchant of record, it takes the payment, handles VAT and refunds, and acts as a separate controller for that data.
• GitHub: keeps, for 7 days, the daily backup copy, in a private repository.
• Google Fonts: typefaces (see above).

Fly.io, Discord, Lemon Squeezy, GitHub and Google are based in the United States: transfers outside the European Union rely on the safeguards of GDPR chapter V (adequacy decision or standard contractual clauses).

8. Your rights

You can ask for access to your data, its rectification or erasure, restriction of processing, or object to it, and for portability of what you provided. A player who appears in an alliance's data can ask for it to be removed or pseudonymised: give your nickname and, if you know it, your player ID.

Write to kwet@santorelli.fr. We answer within one month. You may also lodge a complaint with the CNIL (cnil.fr) or your country's data protection authority.

9. Deleting an alliance

On request from an R5 (or from a player concerned, for their own data only) to kwet@santorelli.fr, we delete the alliance's folder: database, received documents, imported files, local backups, R4/R5 accounts, address and aliases. Only the payment references required by accounting remain, with no game data. Backup copies (off-site copy: 7 days; host snapshots: the host's own retention) disappear on their own when they expire.

10. Updates

This policy may change; the last update date is at the top of the page.