TI4 Hidden Agenda helps groups play the agenda phase of Twilight Imperium 4 on their phones. It is made to need as little personal data as possible: there are no accounts for players, no advertising, no analytics and no tracking.
This site is run by Stefan Lenders, who decides what data is used and why (the "controller" under the General Data Protection Regulation, the GDPR). The data is stored on servers in the European Union.
What is stored when you play
- The game: its name, its code, and the map you load from a Milty draft, a TI4 Lab draft or a map string. A draft can contain the names of the players in that draft.
- You as a player: the name you enter, your faction, the influence you enter, and whether you are the Speaker. You can use a nickname; it doesn't have to be your real name.
- The agendas: the agendas, your votes and the influence you spent, your predictions, and the Star Chart tiles you draw.
Other players in your game see your name, faction and influence, and, depending on the game's settings, the results and how you voted. With Hidden Agenda on, which is the default, other players don't see how you voted, only the totals.
A game is deleted automatically, with its players, agendas and votes, after 60 days without any activity.
Cookies and storage on your device
Only the cookies and storage the site needs to work are used. They are never used to track you or for advertising.
- Session cookie: keeps you connected while you use the site and protects forms against misuse. It expires 1440 minutes after your last visit.
- Games cookie: remembers which games this browser plays in, so you get back into your game. It is encrypted, kept for 30 days and renewed when you open a game. You can remove a game from the list on the homepage.
- Browser storage: remembers the tab you had open in a game and whether you closed the "install the app" hint. This never leaves your device.
- Offline page: if you install the site as an app, it keeps a page to show when your phone is offline.
Technical data
To run the site and protect it against abuse, your IP address and browser type are stored with your session, and your IP address is used to limit how often games can be created, joined or loaded from a draft. Sessions are deleted after they expire, and the limits are forgotten within an hour.
The site keeps a log of what happens in games, such as who joined and how they voted, to fix problems. The log is deleted after 180 days. Only the admin of this site can see the log and the games, including votes, and only looks at them to fix problems. To help a player or fix a game, the admin can open a game as one of its players; this is logged.
Feedback
When you send feedback, your message, the name or contact you choose to add, the page and game you sent it from, and your browser type are stored. It is only read by the admin of this site to improve it, and deleted when it is no longer needed.
Other services
When a game loads a Milty draft (milty.shenanigans.be) or a TI4 Lab draft (tidraft.com), this server fetches the draft from that site. Your browser doesn't contact those sites unless you open the draft link yourself; then their own privacy policy applies. Fonts and all other files are served by this site itself. Your data is not sold or shared with anyone else.
Why this data may be used
The data is used because it is needed to provide the game you ask for, and because of the legitimate interest in keeping the site working and safe (Article 6(1)(b) and (f) GDPR). Feedback is only stored because you choose to send it.
Your rights
You have the right to see the data about you, to have it corrected or deleted, to object to its use, and to receive it in a usable format. As there are no accounts, it helps to tell us the game code and your player name. Most data is deleted automatically within days, and the Speaker can remove a player from a game at any time.
To use your rights or ask a question, open an issue on GitHub asking to be contacted about privacy. Issues are public, so don't post personal details in them; you'll be contacted to continue privately.
You can also file a complaint with your data protection authority. In the Netherlands, that is the Autoriteit Persoonsgegevens.
Changes
This policy may change when the site changes. The date at the top shows when it was last updated. The source code of the site, including this page, is public on GitHub.