Privacy

• Your team name — You choose it, and it is shown publicly on the leaderboard including the large screen in the hall. So decide for yourself what to reveal — a unit name is not required.
• Your recovery phrase — Not the phrase itself. We store only an irreversible cryptographic derivation (HMAC-SHA256 with a key that is not in the database). Anyone stealing the database cannot recover a phrase from it. Neither can we — which is why the organising committee has to issue a new one if you lose it.
• Your gameplay — Which duck you scanned, when, what you answered and how many points it was worth. Needed to run the game and to settle a scoring dispute.
• A hashed form of your IP address — Your IP address is never stored — not even encrypted, since that would be reversible. The log holds only a salted, truncated HMAC of it. That lets us spot abuse during the event but cannot be traced back to a person or device afterwards.
• One cookie — A strictly necessary, signed session cookie containing only your team ID and team name. HttpOnly, so scripts cannot read it. No tracking, no advertising cookies, no cookie banner needed.

Stated explicitly, because absence is harder to verify than presence:

• • No email address, no name, no phone number, no account.
• • No analytics, no statistics tool, no advertising network.
• • No third-party scripts, fonts or images — the Content Security Policy actively blocks them.
• • No location, no access to camera, microphone or contacts.
• • No sale or sharing with third parties. With anyone.

All data is held on servers in Nederland (EU), under EU jurisdiction. The application uses no external providers for storage, analytics or messaging.

Everything is destroyed in full by 30 April 2027 at the latest.

That is not a retention period on paper: the server and the database are thrown away after the event. Until then we keep the data to run the game, determine the winners, and substantiate any dispute about a score.

You can ask at any time for:

• • access to what has been recorded about your team;
• • correction of your team name;
• • deletion of your team and all associated data — including during the event;
• • objection to the processing, after which participation simply stops.

Deleting during the event does mean you are out of the game; there is no way to keep a score without the data. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Controller:

Naam van de organisatie

Contact:

privacy@example.org