Privacy notice
Draft: written to match what the software does; to be checked by someone who knows data protection law before Peela opens to the public.
Who is responsible
[name and address of whoever runs this site], contact: [privacy contact email]. The site runs on Cloudflare (Workers, D1 database, R2 storage), which processes the data on our behalf.
Peela works without this site
A Peela board scores and keeps stats on its own, without an account or a connection. Everything below only happens if you create an account.
What is stored, why, and for how long
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Your player name (chosen by you), password and recovery code (only as hashes), when the account was made | Your account | Contract | Until you delete the account |
| Boards you link: the name, when linked and last seen, Peela version | Sync, updates | Contract | Until you remove the board or the account |
| Boards you are logged in at | Crediting your games to you | Contract | Until you log out there |
| Finished games from linked boards: game, date, every dart. Players not logged in appear only as "Guest" codes: their names never leave the board. No game logs. | Stats | Contract | Until the game is deleted on the board, or the board or account is removed |
| Diagnostics you send from a board: camera images of the board area and whatever else is in view, the session's log (player names replaced by the same Guest codes), technical details of the Pi | Finding scoring errors | Consent (the button, or the automatic setting, off unless you switch it on) | 90 days at most; delete them yourself any time |
| Voice recordings you make in the studio (your voice), with the line each one is for | Your boards' caller voice | Contract (you choose to record) | Until you delete them, or the account |
| Attempt counters for logins, sign-ups and codes, as one-way hashes | Stopping password guessing | Legitimate interest (security) | One day |
What we don't store
- No email address, no real name, no IP addresses in our database, no video.
- One cookie: your login session (30 days, or until you log out). No tracking, no ads, no third-party scripts.
Security
- HTTPS only. Passwords are stored as PBKDF2-SHA256 hashes; sessions, board tokens and recovery codes only as hashes.
- Each account sees only its own data: your stats, the boards you own, the games played on them.
Your rights
See and download everything about you (My Peela → Your data), delete it (Delete my account), withdraw consent to diagnostics, and complain to a data protection authority (in Iceland: Persónuvernd, personuvernd.is).