Legal notice

Who is responsible. OpenPhantom is the controller for this website and for the multiplayer relay described below, and can be reached at contact@swopenphantom.org.

Visiting this website. To deliver a page, your browser sends your IP address and ordinary request details, such as the page asked for and your browser type, to our server. Without them the page cannot be delivered to you. The legal basis is our legitimate interest in running the website (Art. 6(1)(f) GDPR). The server keeps no access log of these requests.

Errors. When a request fails on the server, the web server's error log can record the IP address that made it. That log is deleted after seven days at the latest.

No cookies and no tracking. This website sets no cookies, runs no analytics and loads nothing from other servers. Fonts, styles, scripts and videos all come from this server.

Hosting. The web server and the multiplayer relay are operated for us by Hetzner Online GmbH in Germany under a data processing agreement.

Email. If you write to us, we use your address and your message only to answer you, and delete them once the matter is settled. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Mail to contact@swopenphantom.org is handled by Hetzner Online GmbH in Germany. Mail to openphantom@proton.me is handled by Proton AG in Switzerland, a country the European Commission recognises as providing an adequate level of data protection.

Links. The links to GitHub and Discord lead to websites run by those services, where their own privacy policies apply.

What the relay does. In online multiplayer games, each player's game connects to our relay at relay.swopenphantom.org instead of connecting to the other players. The relay passes the game traffic between the host and the other players. LAN games and single player games never use the relay.

What it processes. The IP address and port of each connected PC, the player names, the name and settings of each session, and what happens in the game, such as joins and leaves, levels, defeats, scores and round results. Chat messages that players type in a session pass through the relay like the rest of the game traffic. The connection between your PC and the relay is encrypted. The relay itself decrypts each packet to pass it on and to write the session log.

Why. To connect players to sessions and pass their traffic on, to show publicly listed sessions, to find and fix errors, and to stop abuse. The legal basis is our legitimate interest in running the relay reliably and safely (Art. 6(1)(f) GDPR).

Who receives what. The other players in your session receive your player name, your chat messages and your actions in the game. That is how multiplayer works. They do not receive your IP address, and you do not receive theirs. If the host lists a session publicly, anyone who opens the public game list can see its name, its join code, the number of players, the game mode and whether it has a password. Hetzner Online GmbH processes the data as our processor. None of it is transferred outside the EU/EEA.

Where the data comes from. Most of it comes from your own game. Some entries about you are reported by the host's game, for example that you joined or were defeated.

How long it is kept.

• Full IP addresses and ports are kept only in the relay's memory. They are never written to disk and never shown. The admin view shows only shortened addresses. The relay needs them while you are connected. After you leave, it keeps the address of your last connection to recognise packets that were still on their way, until newer sessions replace it or the relay restarts.
• The session log is one file per session with the session code and name, the player names, shortened IP addresses and the game events listed above. A shortened address keeps only the first three parts of an IPv4 address or the first 56 bits of an IPv6 address. Session logs are deleted automatically after eight days at the latest.
• The text of chat messages is never stored. The relay passes chat messages on without evaluating or showing their content, and the session log records only how many chat messages a session carried and their size in bytes.
• The system journal records only that a session was opened or closed, with its code, and contains no names and no addresses. It is deleted after eight days at the latest.

Because session logs are deleted after eight days at the latest, a request about your entry has to reach us within that time for us to find it.

Is providing the data required? Without your IP address and a player name, the relay cannot connect you to a session. Online multiplayer is optional.

Your player name. Other players and the session log see it. Use a nickname, not your real name.

Your rights. You can ask us for access to your data, for its correction or deletion, and for its processing to be restricted. The right to data portability does not apply here, because the processing rests on legitimate interest. You can also complain to a data protection supervisory authority, for example the Belgian Data Protection Authority (dataprotectionauthority.be).