Privacy notice
This notice explains how we handle data for your game account, chat, moderation, contact emails, the beta list and optional news emails.
Your game account
Philippe RAYNAUD, based in France, runs Gallopera and is responsible for your game account. For questions about your information, email contact@gallopera.com.
What the game keeps
We keep your email address, account number, the version of the beta rules you accepted at signup and the date you accepted them. If your account is suspended, we also keep the suspension date. Your password is held by Amazon Cognito and is never stored by Gallopera. We keep your yard name and silks, your public profile introduction of up to 500 characters, any country flag you choose to display, your featured horse and its caption. We also keep records of your game activity, including horses, races, bets, purchases, messages, club activity and bug reports. Bug reports include the page you were on, your language and your browser’s identification string.
We use this information to provide the game you signed up for, run your account and the shared world, and answer your reports and messages. We also use it to send password reset emails you request and to notify you when your password changes or your account is deleted. Beta signup uses your invitation and does not require an email confirmation code. An older signup page may still ask for an optional code. Refresh the page to sign up directly.
The legal basis is the agreement you accept at signup, the beta rules. We need this information to provide the game. Server logs, backups, limits on repeated sign-in attempts and deletion records are based on our legitimate interest in keeping the game and your account secure.
Other players see your yard name, silks, public profile text, your optional chosen country flag, featured horse and its caption, horses and results. Your email address is never shown to other players.
The Gallopera operator also keeps copies of profile text for review, along with profile reports. If your profile text is removed, you will receive an in-game message.
Chat and moderation
We keep the messages you send, when and where they were sent, and their author. We also keep private conversation requests and responses, your blocks and chat preferences. To show unread indicators, we store your reading position in conversations and which moderation notices you have read. These indicators are private. Other players do not receive read receipts. World messages are visible to players with access to that channel. Club messages are visible to its members. Private conversations start once a request is accepted, and their messages are accessible to the two participants.
When a message is reported, we copy its text and any necessary context into a case for the Gallopera operator to review in the admin centre. This may include private message excerpts needed to handle the report. Volunteer players cannot access moderation cases. You can also report content without a game account. The case includes the explanation, content location, contact details provided, dates, decision and any appeal. Keep the private receipt you receive confidential.
We record chat restrictions, their reasons, the rules they are based on, their duration, any use of automation and moderation actions. You can find receipts, decisions and appeal information under Chat, then Reports and decisions. While you can access these notices through your account, we do not also send them by email, even if you are signed out or temporarily muted in chat. We use email for reports made outside the game. When account access is unavailable, we also use email for unread notices or ongoing appeals, provided an address is available. These are service emails, separate from optional news.
Delivering messages you choose to send forms part of the service under the game rules. Abuse prevention and moderation rely on our legitimate interest in protecting players and the service. Notices, authority disclosures and retention required by law rely on our legal obligations. Technical chat records include the account number, message identifier, operation, time, protocol and available IP address.
You can block a yard, disable private requests and report a message. The reporting and appeal form is accessible without an account. To challenge a decision or exercise your rights, write to contact@gallopera.com, including when your account is suspended. Competent authorities may receive necessary information where a legal obligation or valid request requires it.
How long the game keeps it
- Active account and world data are kept until account deletion, a world reset or the end of the beta. A reset deletes the world and all active accounts. You will then receive a new invitation. Moderation cases and separately retained records follow the periods below.
- World and Club messages: 30 days after sending. Private messages: 90 days after sending. Account deletion or a world reset removes ordinary messages earlier; excerpts needed for a moderation case follow that case’s retention period.
- Reports, necessary context, decisions and appeals are kept while the case is being handled, then for one year after it closes. Data needed for proceedings or required by an authority may be kept for longer.
- Notices, delivery records and the general moderation log: 365 days after creation. Records linked to a case or needed for an ongoing appeal may follow that case’s retention period.
- Technical records of chat operations: one year after the operation, even if the message or account has been deleted. A specific preservation obligation may extend that period for the relevant data.
- When the account closes, a separate identification archive retains your email and its link to the account number for five years, and your yard’s public identity for one year. It serves applicable identification obligations and valid authority requests; it cannot sign you in and contains no password.
- A sign-in session expires after 14 days without a visit, or after 30 days at most.
- Automatic database backups are kept for 7 days, backups taken before a reset for 30 days, and server logs for 30 days.
Deleting your account
You can delete your account from Settings, where you will be asked for your password, or email contact@gallopera.com from your account’s email address. A confirmation email will be sent to that address.
We delete your sign-in, email from the active account, yard name, public profile text and its review copies, flag choice, messages in your mailbox, bug reports and ordinary chat messages.
Necessary moderation cases, technical records and data subject to a preservation obligation follow their separate retention periods. Access is restricted to the purpose for which they are kept.
Your horses leave the game but remain in its shared history, including race results and pedigrees, under a yard number without your public name. Backups expire as described above.
A deletion record containing only the account number, timestamps and deletion status is kept to prevent a backup from restoring your account. It expires after 38 days.
A parent can ask for their child’s account to be deleted by writing to contact@gallopera.com.
In your browser
The game uses your browser’s local storage for your sign-in token, language, sound setting, read notifications and a cache to load pages faster. It does not use advertising cookies or audience trackers.
Who runs the list?
The person named above is also responsible for the Gallopera beta list. For questions about your information, write to contact@gallopera.com.
Information the list uses
We use your email address to send invitations and manage beta access. We also keep your language, email preferences, signup and withdrawal dates, the version of the consent notice you saw, and delivery records. We need your email address to add you to the list.
Beta emails are based on your consent. No confirmation email is sent when you sign up. Development news and launch updates are a separate, optional choice, and are only sent if you opted in. We do not sell your information or use it for third-party advertising.
The form no longer asks for a Discord username. If you provided one on an earlier form, we keep it for the same period as your signup. You can ask us to remove it at any time.
We keep limited security records to prevent abuse and unwanted emails, and to make sure withdrawals are respected. This is based on our legitimate interest in protecting you and the service.
How long the list keeps it
- We keep your signup for no more than 180 days after your request.
- If you confirmed your signup through an earlier form, we keep it for no more than 180 days after confirmation.
- Leaving the entire beta list deletes your signup and any queued emails. An email already being sent may still arrive.
Expired signups are no longer used. Daily cleanup normally deletes them within 24 hours. After a service interruption, cleanup resumes when the service restarts.
These limits cover the active list. Backups and security records have separate retention periods, explained below.
Backup and security records
- Automatic database backups are kept for 7 days and application logs for 30 days. Manual backups expire after 30 days and are deleted during daily cleanup. Older backups cannot restore the beta list.
- Withdrawal records contain a random signup ID and withdrawal dates, but not your email address or Discord username. They are kept for 38 days after withdrawal, then until AWS deletes them automatically, usually a few days later.
- Protected email identifiers used to limit requests expire within 24 hours after a sending attempt, then await daily cleanup, normally within another 24 hours.
- Identifiers derived from your IP address stay in memory for up to 6 minutes. Your raw IP address is not added to the list.
- Permanent delivery failures or spam reports delete your signup and queued emails. We keep a protected email fingerprint for 180 days after the report, then until daily cleanup.
- Delivery reports may remain with AWS during about 23 days of transfer retries and up to 4 days at each processing or recovery stage. SES keeps blocked addresses in readable form until removal after review. Contact us to correct a block; signing up again does not remove it.
Who receives your information
Access is limited to authorised Gallopera operators and the providers needed to run the service. Amazon Web Services (AWS) handles hosting and email delivery, with the list’s services configured in Ireland.
AWS may process information outside the European Economic Area. Its data processing agreement provides safeguards, including the European Commission’s standard contractual clauses. You can ask us for a copy.
Messages sent to our contact address are forwarded to Gmail and processed by Google so we can reply.
Contact emails
When you email our contact address, the Gallopera operator can read your address, message, delivery information and attachments to handle your request and reply. This correspondence is private and does not sign you up for beta news.
A copy is stored in the Gallopera administration centre on AWS in Ireland. Original messages and attachments are kept there for 90 days. Conversation text and delivery history are removed during daily cleanup after 180 days without a new exchange. A game-world reset does not delete an ongoing contact request. The copy forwarded to Gmail has a separate retention period.
Technical identifiers and fingerprints are retained to prevent duplicate sends. Addresses with delivery refusals or spam complaints remain blocked to prevent further sending. You can contact us to request access to your correspondence or its deletion.
Your choices and rights
Use the link in our emails to stop development news while keeping your beta signup, or to leave the entire list. Withdrawing does not delete your game account or affect the lawfulness of earlier processing.
Contact contact@gallopera.com to request access, correction, erasure, restriction of processing or portability of your information. You can object to processing based on our legitimate interest for reasons relating to your situation. You can also complain to the CNIL or the relevant authority in your country.
Cookies and tracking
These pages do not add advertising cookies or audience trackers. Our emails do not track opens or clicks.