Privacy policy

01 Who is in charge

The data controller is Voltane’s publisher: Maxime MONTEIRO, entrepreneur individuel (sole trader) trading as Borderline Agency, 693 Avenue Pierre Lacans, 34310 Montady, France. Contact: [email protected].

No data protection officer has been appointed: the activity falls under none of the cases in which article 37 of the GDPR requires one.

02 What is kept

Your account: email, driver name, password (hashed, never readable), language, sign-up date, last sign-in, whether your email is confirmed. The 6-digit codes sent by email (confirmation, forgotten password) are kept as a fingerprint (a hash), with their expiry date.

Your game: online races (track, car, finishing position, time), Voltage and leaderboards, levels and experience, garage, bolts and their transactions, crates, inventory, challenges, badges, records and ghosts (your car’s path over a lap), friends, friend requests, blocked drivers, the reports you make (reason and optional note).

The Paddock: your threads and posts, with their creation and edit dates, your reactions, what you have read (the “unread” markers) and the threads you follow, your notifications (reply, mention, chosen solution, moderation action), reports, and where applicable the sanctions (duration, reason, author) and the moderation log.

Your purchases: product, amount, date, status, the receiving driver in the case of a gift, the date on which you asked for immediate delivery, and what Stripe sends back to us about the payment (including the email given when paying). Never your card: Stripe is the one that keeps it.

Technical: your IP address is used only, in memory, to limit abuse (bursts of password attempts). It is written neither to the database nor to any log.

We do not ask for your name, your date of birth or your address. Voltane shows no advertising and does not measure its audience.

03 Why

Running your account and the game (races, progress, friends, Paddock, purchases): this is the performance of the terms and conditions you accept (article 6(1)(b) of the GDPR).

Protecting the game and its players (limiting abuse, fighting cheating, moderation, handling reports): our legitimate interest (article 6(1)(f)).

Keeping records of sales: a legal accounting obligation (article 6(1)(c)).

Your data is never used for marketing. It is not sold, rented out or passed on to anyone. No automated decision-making and no profiling takes place.

04 What is public

Your driver name, level, car and Voltage on the leaderboard (that’s the competition), and your driver card (/en/pilotes/your-driver-name) with your stats and records. You can make your card private in Settings: only the leaderboard then keeps your driver name.

Founders and supporters appear by their driver name on the Founders’ wall. A track’s best ghost (driver name, time, path) can be loaded by other drivers to race against it.

What you write in the Paddock can be read by everyone, with your driver name.

Your email is never shown. The time of your last sign-in is only visible to your friends, in the game, and “Appear offline” hides it.

05 Cookies and browser storage

Two necessary cookies: volt_session, which keeps you signed in (30 days if you check “Stay signed in”, otherwise until you close your browser), and volt_lang, which remembers the language you chose on the website or in the game (one year). Cloudflare may add a technical cookie (__cf_bm) to tell a visitor from a bot. No advertising or audience measurement cookies: no banner to click.

The game also keeps in your browser (local storage) its settings (graphics, sound, controls, camera), the language you chose (volt.lang, a copy of volt_lang), your offline records and ghosts, the drafts of your Paddock posts, and, for the length of a race, what it needs to reconnect you to your spot. None of this is for advertising; you can erase it from your browser’s settings.

06 Who else handles it

Everything is stored on the publisher’s own machine, in France. Only these service providers receive part of the data, and only as much as their work requires:

Cloudflare, Inc. (United States): network, tunnel, DNS, abuse protection, and forwarding the emails you write to us. Resend, by Plus Five Five, Inc. (United States): sending the account and purchase emails. Stripe Payments Europe Ltd (Ireland): payments. Google Ireland Ltd: the game’s fonts, loaded from Google Fonts (which therefore receives your IP address), and the inbox where the emails you send us arrive.

The resulting transfers outside the European Union are covered by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework. Authorities may obtain data through a lawful order.

07 How long

Your account and your game: as long as the account exists.

When you delete your account (Settings › Account, in the game or on the website), the following are erased at once: your email, your password, your driver profile, your garage, your bolts, your crates, your records and ghosts, your friends, your email codes.

What remains, without your email: your driver name in the results of past races and in the leaderboards of finished seasons, the reports you made (without your name), and your Paddock posts, signed “a former driver”.

Orders (product, amount, date, payment email) are kept for 10 years, an accounting obligation (article L123-22 of the Code de commerce, the French Commercial Code), even if the account is deleted.

08 Your rights

Access, rectification, erasure, restriction, objection, portability, and instructions on what happens to your data after your death: write to [email protected], answered within one month. You can also erase your account yourself, from Settings › Account.

You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).