Legal notice & Privacy policy

Site publisher

This site is published personally by:
Florian Mousseau, private individual
France
Contact: [email protected]

Hosting

Interface (frontend)
Cloudflare, Inc.
101 Townsend St, San Francisco, CA 94107, United States
cloudflare.com

Real-time server (backend)
Fly.io, Inc.
2261 Market Street #4099, San Francisco, CA 94114, United States
Data hosted in region Europe (Paris, France)
fly.io

Personal data (GDPR)

Data controller: Florian Mousseau, [email protected]

Data collected

CleanPoker only collects the pseudonym you freely enter to join a session. This pseudonym is displayed to other participants in the same session. No email address, phone number, or real identification data is requested or stored.

Purpose and legal basis

The sole purpose of processing is to provide the collaborative planning poker service (legal basis: performance of the service requested by the user, Art. 6.1.b GDPR).

Retention period

Sessions and associated pseudonyms are automatically deleted 24 hours after the last activity. No archive is retained beyond this.

Data transfers

Backend data (pseudonyms, voting activity) is hosted exclusively in France (Paris) at Fly.io. The frontend is served via the global Cloudflare network, which has adhered to the EU-US Data Privacy Framework since July 2023.

Your rights

In accordance with the GDPR, you have the right of access, rectification and erasure of your data. To exercise these rights or for any questions: [email protected]

You may also lodge a complaint with the CNIL (French data protection authority).

Cookies

CleanPoker does not use any advertising cookie, and no tool that follows a visitor.

No script here measures your visit: no analytics tool is loaded, no cookie is set for that purpose, and no visitor identifier is written to your device. Like every website, the host that serves these pages, Cloudflare, records the requests it answers, the page, the country, the browser and the IP address at the moment of the request, in order to deliver and protect the service, as a processor. The real-time game server, hosted at Fly.io, logs its own connections in the same way. This is why nothing here asks for your consent: consent attaches to reading or writing information on your device, and no page here does either.

And since 1 September 2026 the site counts its readers itself, server-side, still without a single script on your device. For each page served, the server derives a fingerprint from your IP address, your browser and a secret that changes every day, then stores only that fingerprint, the site name, the date and the country. Your IP address is neither recorded nor kept: it goes into a one-way computation and disappears. Because the secret changes every day, yesterday's fingerprint and today's cannot be linked, so nothing lets you be followed from one day to the next, nor from one site to another. This count answers a single question: how many people read this site. The same rule runs on every site published by the same editor, so that the figures can be compared. Its legal basis is legitimate interest (article 6.1.f GDPR).

The game server keeps two anonymous counters, the number of sessions created and the number of arrivals. They hold no identifier, no pseudonym and no room name, nothing is written to disk, and they restart from zero every time the server restarts. Anyone can read them at /stats on the game server.

The site sets two functional cookies in your browser, to remember your language preference (lang) and your light or dark theme (theme), kept for one year. They are strictly functional, contain no personal data and do not require prior consent.

Cloudflare may set technical security cookies (__cf_bm) strictly necessary for the service to function (anti-DDoS protection). These cookies are exempt from consent.

Intellectual property

The CleanPoker source code is published under the MIT License. You are free to reuse, modify and distribute it under the terms of this licence.

Limitation of liability

CleanPoker is a free service provided without warranty. The publisher cannot be held liable for direct or indirect damages resulting from the use or unavailability of the service.

Applicable law

These notices are subject to French law. Any dispute falls within the jurisdiction of French courts.

Last updated: June 2026