Privacy Policy

Data Controller

Baptiste Briel

Contact: baptiste@antinomy.studio

Data We Collect

• IP Addresses: Collected automatically for technical operation and security. Logged server-side only, not shared with other users.
• Location Data: Approximate city/country location derived from your IP address. Used to generate your display name. Requires your explicit consent - by default you appear as "Anonymous". Stored locally in your browser if you consent.
• Connection IDs: Random, temporary session identifiers required for real-time collaboration. Deleted when you disconnect.
• Behavioral Data: Cursor positions, typing activity, text selections. Transmitted in real-time only, not stored.
• Chat Messages: Messages you send. Stored temporarily in server memory (last 100 messages) until server restart. Not tied to your identity after being sent.

How We Use Your Data

• Enable real-time collaborative features (cursors, chat)
• Security and abuse prevention (IP logging)
• Technical operation (WebSocket connections)

Data Sharing

• With Other Users: Your location (if consented), connection ID, cursor positions, typing activity, and chat messages are shared with other users currently online. This is necessary for collaborative features to function.
• With Third Parties: We do not sell or share your data with third parties for marketing purposes.
• Service Providers: Vercel (hosting) and PartyKit/Railway (WebSocket servers) process data necessary for service delivery.

Your Rights (GDPR)

You have the right to:

1. Access your personal data
2. Rectify inaccurate data
3. Erase your data (session data is automatically deleted when you disconnect)
4. Restrict processing (opt-out of location sharing)
5. Data portability
6. Object to processing

To exercise these rights, contact: baptiste@antinomy.studio

Consent and Location Sharing

Location sharing requires your explicit consent. By default, your display name is "Anonymous". You can consent to share your approximate location (city/country) or opt-out at any time. Your choice is stored locally in your browser.

Data Retention

• Session Data: Deleted immediately when you disconnect
• Chat Messages: Stored in server memory (last 100) until server restart, not persisted to disk
• Consent Preferences: Stored in your browser (localStorage) until you clear browser data
• Server Logs: IP addresses logged for security (managed by hosting provider)

Data Security

• Secure WebSocket connections (WSS) in production
• No persistent storage of personal data beyond active sessions

International Data Transfers

Data is processed by service providers (Vercel, PartyKit/Railway) that operate globally and comply with applicable data protection laws.

Changes to This Policy

We may update this privacy policy from time to time. The "Last Updated" date indicates when changes were made.