Ratio secreti

Ad tractationes adhibetur quae fiunt:

• cum Situm percurris (data technica),
• cum rationem creas et adhibes,
• cum litteris nuntialibus subscribis,
• cum contenta publicas (e.g. commentaria),
• cum mensurae securitatis et moderationis efficiuntur.

Ens quod fines et modos tractationis infra descriptae determinat — “moderator” ex sententia articuli 4(7) GDPR — est:

Data directe praebita

Secundum functiones adhibitas, PromethEUs tractare potest:

• Ratio: inscriptio electronica, nomen usoris/profili, optiones rationis; tessera cryptata (numquam aperta).
• Profilum (optivum): imago, vexillum, biographia, nexus, civitas, dies natalis (si indicatur).
• Litterae nuntiales: inscriptio electronica, status subscriptionis/abrogationis, vestigia technica ad inscriptionem pertinentia.
• Contenta publicata: commentaria et metadata adiuncta (dies/hora, identificator rationis).

Data automatice collecta

Cum Situm adis et securitatis causa, PromethEUs tractare potest:

• Data technica: inscriptio IP, user-agent, notae temporis, notitiae sessionis, identificatores technici.
• Data securitatis: eventus contra abusum (anti-bruteforce, anti-spam, deprehensio accessus abnormis), indices interdicti.

PromethEUs data tua tractat tantum cum basis iuridica extat (Articulus 6 GDPR).

Natura obligatoria datorum

• Data necessaria ad rationem creandam/administrandam obligatoria sunt ad ministerium praestandum.
• Data profili “optiva” notata non sunt obligatoria.
• Consensus ad litteras nuntiales liber est: recusatio usum Situs extra litteras non impedit.

Data patent:

• sodalibus auctorizatis gregis PromethEUs (accessus secundum munera et necessitates limitatus),
• provisoribus stricte necessariis ad Situm operandi, qui veluti sub-tractatores vel responsabiles autonomi pro re nata agunt.

Provisores technici (exempla)

• Hospitium / cursus electronicus: IONOS (Francia).
• Securitas / tutela situs: Cloudflare (secundum configurationem).
• Mensura frequentiae (cum consensu): Google Ireland Ltd, ut processor agens. Fascia consensus ipsius PromethEUs est: nullus praebitor externus.
• Tabulae geographicae / contenta tertiorum: ministeria externa (laterculi, API, lectores cinematographici) quae data technica (IP, user-agent) accipere possunt.

Quaedam ministeria tertiorum (e.g. fontes interretiales, CDN, pelliculae insertae) efficere possunt ut entitates extra UE data technica (inclusa inscriptione IP) percipiant.

Google Analytics (solum si consentis): data a Google LLC in Civitatibus Foederatis adiri possunt, quae certificata est sub Data Privacy Framework UE-CFA (decisio adaequationis Commissionis Europaeae diei 10 Iulii 2023).

Cum transmissiones extra UE fiunt, PromethEUs idoneas cautiones a GDPR provisas (e.g. clausulas contractuales canonicas) adhibet et tales transmissiones, ubi fieri potest, limitare studet.

PromethEUs data tantum servat quamdiu ad fines propositos necessarium est.

• Ratio: quamdiu ratio actuosa est; deletio/anonymizatio cum ratio clauditur.
• Inactivitas: ratio sine connexione per 3 annos automatice deletur, una cum datis consociatis. Epistula monitionis 30 diebus ante deletionem mittitur; simplici connexione ante illum diem ratio servatur.
• Deletio: ad petitionem tuam, ex optionibus rationis tuae (tessera requisita), ratio tua et data eius statim et omnino delentur (commentaria, signa gratiae, libri notati, contributiones, subscriptio litteris); confirmatio ad inscriptionem tuam mittitur. Responsa aliorum sodalium ad commentaria tua servantur.
• Litterae nuntiales: donec consensus revocetur (abrogatio); minima indicia technica revocationis servari possunt si necessarium sit.
• Securitas/contra abusum: diaria technica (errores epistularum, relationes securitatis) ad summum 28 dies servantur. Diarium inspectionis actionum administrationis (quis quid in solio egerit, cum inscriptione IP) per 12 menses servatur, prout ratio reddenda personarum aditum elevatum habentium exigit.
• Mensura frequentiae: data singulorum eventuum per duos menses in Google Analytics servantur, deinde solae statisticae collectae manent; electio consensus per sex menses servatur.
• Exemplaria tuta: conservatio limitata (scopus: <= 30 dies), cum renovatione progressiva.

Situs praecipue crustulis stricte necessariis (e.g. crustulum sessionis) ad operationem et securitatem utitur.

Crustula stricte necessaria

Haec crustula consensum priorem non requirunt (operatio/securitas). Exemplum:

• Crustulum sessionis (e.g. __Host-pe_sid): sustentatio sessionis/authentificatio, duratio sessionis vel brevis.
• Stay-signed-in cookies (__Host-pe_dev, __Host-pe_remember): only if you tick “Stay signed in”. The first holds a random token (only its fingerprint is kept on our servers) that reopens your session on this device for 90 days from your last visit; you can end it from Security (“Connected devices”) or by signing out. The second only remembers, for 400 days, whether the box was ticked, so that it is pre-ticked next time.

Crustula non essentialia

Solum consensu tuo PromethEUs frequentiam suam Google Analytics 4 metitur, ut sciat quae paginae legantur et quomodo visitatores ab alia pagina ad aliam transeant. Nihil a Google oneratur antequam accipias: nullum scriptum, nullum crustulum, nulla petitio.

• Crustula _ga et _ga_<ID> (Google Analytics): signum fortuitum visitatoris, XIII menses ad summum, numquam prorogatum, tantum in situ visitato positum (prometheus-euro.eu vel swipe.prometheus-euro.eu).
• Data missa: inscriptio paginae sine verbis quaesitis vel signis (tokens), titulus paginae, origo visitationis (situs referens sine via sua, et expeditio utm si qua est), patria/regio approximata, genus instrumenti. Nullum identificativum rationis, nullum signum venale, nulla observatio trans instrumenta (Google Signals inactivum).
• Crustulum electionis pe_consent (PromethEUs): electionem tuam per VI menses recordatur, in prometheus-euro.eu et swipe.prometheus-euro.eu valens, cum signo fortuito. Hoc signum, electio tua eiusque dies per XXV menses in nostris servitoribus ut probatio consensus servantur, sine inscriptione IP neque ullis aliis datis.
• Numquam mensurantur: spatium sodalis, pagina donationum, solium administrationis.

Recusare tam facile est quam accipere neque ullum effectum in usum tuum Situs habet. Sententiam quovis tempore mutare potes; consensu revocato, crustula Google Analytics delentur.

Praeferentiae crustulorum

Tabula Europe Live ostendit quot homines eam simul spectent et — solum si communicare eligis — ex qua fere regione spectent. Haec duae res distinctae sunt.

Numerator

Nullus consensus requiritur neque ulla data personalia tractantur: signum fortuitum et opacum pro tabula navigatri generatur, per nonaginta secundas servatur neque umquam cum ratione coniungitur. Pro omni nova sessione regeneratur et deletur cum tabula clauditur.

Regionem tuam communicare

• Fundamentum iuridicum: consensus tuus (GDPR art. 6.1.a), semel petitus et ex praefinito recusatus.
• Fons: geolocatio navigatri tui, quae suam ipsius licentiam petit. Geolocatio ex inscriptione IP numquam adhibetur — ei consentiri non potest.
• Subtilitas: positio tua in navigatro tuo ad cellam circiter 110 km rotundatur, antequam quidquam mittatur. Servitor numquam positionem accuratam accipit.
• Aggregatio: solae cellae quae saltem tres spectatores continent ostenduntur. Cella cum paucioribus omnino non ostenditur.
• Conservatio: nonaginta secundae. Ordines exspirati in omni scriptione delentur.
• Nulla inscriptio IP ab hac functione servatur vel legitur. Acta aditus servitoris interretialis inscriptiones IP pro omni petitione HTTP notant, ut in quolibet situ; id ab hac tractatione separatum est.
• Revocatio: unus ictus in tabula optionum tabulae, prorsus ubi consensum dedisti. Cella tua servata statim deletur.
• Recusatio nihil aliud in tabula mutat. Sola facultas videndi aliorum regiones ex communicatione tuae pendet.

Quaestionarium Swipe 2027 (swipe.prometheus-euro.eu) responsa tua solum in navigatro tuo servat: nullum responsum ad nos mittitur dum ludis. Si rationem PromethEUs habes, responsa tua in ea servare eligere potes, ut ea in alio instrumento rursus invenias.

• Numerator progressus anonymus (nullus consensus requiritur, nullum crustulum): cum ad initium, quartam partem, dimidium, tres quartas partes vel finem itineris pervenis, situs unum numeratori diei addit, cum sola longitudine itineris. Nullum responsum, identificativum vel datum instrumenti mittitur, ita ut numeri tecum coniungi non possint.
• Mensura frequentiae (solum cum consensu tuo, per fasciam crustulorum): ut in reliquo Situ, Google Analytics visitationes Swipe, tempus ludendo consumptum et gradus attactos (initium, quarta pars, dimidium, tres quartae, finis) metitur. Responsa et eventus tui numquam mittuntur. Electionem tuam quovis tempore ex optionibus Swipe (“Crustula mea administrare”) mutare potes.
• Data: responsa tua (assentior, neuter, dissentior, super likes), longitudo itineris electa et argumenta tua prima. Quia sententias tuas politicas reflectunt, data categoriae specialis sunt (GDPR art. 9).
• Fundamentum iuridicum: consensus tuus expressus (GDPR art. 9.2.a), separatim a creatione rationis petitus per arcam non signatam, datatam et versionibus notatam. Sine eo nihil servatur.
• Securitas: responsa in base datorum cryptographice teguntur (AES-256-GCM) et rationi tuae alligantur; solus numerus responsorum aperte servatur. Numquam communicantur, venduntur vel adhibentur ad te profilandum vel ad argumenta tibi dirigenda.
• Ratio: ratio ex Swipe creata est ratio PromethEUs, quae aditum ad totum Situm dat, non solum ad Swipe. Epistula nuntiorum libera et separata est.
• With saving on: the order in which you answered (the comparator’s “race” chart), a daily snapshot of your five closest candidates (your trajectory, 60 at most), the cards whose answer you changed after giving it (for the analysis of your second thoughts) and the last version of the cards you have seen (so that only new ones are offered to you). These items are encrypted together with your answers.
• “New proposals” alert (optional, unticked box): an email when new cards are published. Legal basis: your consent, which you can withdraw at any time from the Swipe profile, the notification settings page or the link in every message. The origin of your account (Swipe, Waves, site, newsletter) is recorded for account management.
• In-depth analysis (optional purchase): computed by the Site from your saved answers when you open it, and not stored. Payment takes place on HelloAsso’s page; the Site only keeps the amount, date, payment status and its reference, linked to your account, for ten years (accounting records).
• Result link (optional): when you share your result, the Site stores the answers contained in the link under an 8-character code, with no account, no IP address and no name, so that the link stays short. Any first name stays in the link address. A link not opened for 18 months is deleted.
• Barometer (optional in the game): if you turn on “Take part in the Barometer”, each of your next answers is sent on its own, with no identifier, to add 1 to a daily counter for that proposal (agree, neutral or disagree). Answers you have already given are never sent. On proposal pages and the embeddable card of the day, the answer given is counted the same way. No IP address is kept (only a hash, deleted after one hour, against abuse). Percentages for a proposal are only published from 15 answers; below that, only the number of answers for each choice is shown. Per candidate, only the number of their approved proposals is published (blind ranking), never the detail of their proposals. Nothing is published on the day before or the day of a vote.
• Conservatio: donec servata (tabula Profili in Swipe) vel rationem tuam deleas. In exportatione datorum tuorum includuntur et cum ratione tua delentur.

The WAVES mini-game (/waves) works without an account: your progress then stays in your browser. With a PromethEUs account, you can save it to find it again on another device and, if you choose to, appear on the leaderboard.

• In your browser (local storage, never sent without an account): high score, best wave, discovered creatures, current run, settings (sound, music, vibration, effects) and whether you have seen the tutorial. “Clear high score and bestiary” (game Settings) removes the high score, best wave and bestiary from this device; clearing the site's data removes all of it.
• On your account (if you are signed in): the same items, plus your best score and best wave of the week. This is non-sensitive game data; the score is reported by your browser and is not verified. Purpose: letting you resume your progress elsewhere. Legal basis: performance of the service you request.
• Leaderboard: off by default. If you tick “Appear on the leaderboard”, your first name, the initial of your last name, your high score and best wave (and those of the week) become visible to every visitor of the game. Unticking the box removes you from the leaderboard immediately. A run played with a cheat command is not counted.
• Account created from the game: first name, last name and email address, as for any PromethEUs sign-up. The “Waves has been updated” alert and the newsletter are optional (unticked boxes) and can be switched off at any time.
• Retention: until you delete the save (game Settings, “Delete”) or your account. Deleting the save affects neither your account nor the progress stored on the device. The save is included in the export of your data and erased with your account.
• No game-specific audience measurement: the /waves page loads neither Google Analytics nor any other tracker.

The Community area of “My space” (sign-in required, nothing is public) lets members find each other, publish short posts and exchange private messages.

• Findability: every signed-in member can find any account by its display name (your pseudonym if you set one, otherwise your first and last name) or its @username. A new account is private: others then see only your display name, photo and @username, and can ask to follow you; only the followers you accept read your bio, interests and posts. Switching to a public account makes them readable by every signed-in member. Never your email address, phone number, birth date or postal address; your country only if you tick it. To stay discreet, use a pseudonym and a @username that does not contain your name. Legal basis: performance of the community service you use; your account privacy setting is your control.
• Posts, replies, likes and follows: short texts (500 characters, no links), readable according to your account: every signed-in member if it is public, your accepted followers if it is private. A member you block sees nothing of yours and you nothing of theirs.
• Private messages are end-to-end encrypted: the keys are created in your browser and the server only stores encrypted blocks and key fingerprints. PromethEUs cannot read your messages. Your 4-digit messaging code protects your key together with a secret kept by the server (encrypted at rest), which is only released after a valid proof of the code; after 5 wrong tries code access is locked for an hour and you are warned by email. Your recovery key remains the way back in: if you lose both the code and the recovery key, your messages cannot be recovered. We do see the metadata: who writes to whom, when, and the size of each message.
• Reports: when you report a post, a profile or a message, the moderators see your report. For a message, only the text you choose to attach is passed on, in clear; the Site cannot verify it.
• Email notification (optional): a message telling you that you have a new message, never naming the sender or quoting the text, at most once every 6 hours. You can turn it off in “Public profile”.
• Retention: until you delete an item or your account. Erasing your account deletes your public profile, posts and the replies to them, likes, follows, messaging keys and your conversations on both sides. All of it is included in the export of your data (messages in encrypted form).

Donatio fieri potest per translationem argentariam SEPA, ab argentaria tua ad argentariam consociationis, vel — cum haec optio in pagina donationis offertur — per chartam argentariam vel debitum directum SEPA per HelloAsso, suggestum solutionum pro consociationibus. Utroque casu Situs numquam numerum chartae tuae vel IBAN accipit. Per translationem donare potes nihil nobis dicendo; si post translationem acceptilationem vis, donationem tuam per formulam declarare potes.

Formula declarationis praenomen, nomen, inscriptionem cursualem, patriam, inscriptionem electronicam et summam nuntiatam colligit. Hae informationes in base datorum cryptographice teguntur et a solo quaestore consociationis legi possunt, ex ratione authenticatione duplicis factoris munita. Cum translatio accepta refertur, argentaria consociationis etiam nomen solventis, IBAN rationis debitatae, summam, diem et notam praebet.

Pro solutione per chartam vel debitum directum ad paginam solutionis HelloAsso deduceris, ubi data solutionis et identitatem tuam inscribis; HelloAsso huius tractationis responsabilis est secundum suum consilium de secreto et acceptilationem tibi mittit. Solutione confirmata, Situs ab HelloAsso accipit praenomen, nomen, inscriptionem electronicam, inscriptionem cursualem (si inscripta est), summam et diem solutionis. Haec in base datorum cryptographice teguntur, a solo quaestore consociationis legi possunt et per decem annos servantur (obligatio rationum). Si nomen vel inscriptionem electronicam in pagina nostra ante solutionem inscribis, ad HelloAsso tantum transmittuntur ut paginam eius praeimpleant.

Donationes acceptilationem fiscalem non pariunt. Aditum ad data tua, eorum correctionem vel deletionem declarationis quam nulla translatio secuta est petere potes, ad consociationem scribendo. Data quae lex rationum nos servare iubet ante finem temporis conservationis deleri non possunt; cetera iura tua manent.

PromethEUs idoneas mensuras technicas et organizationales efficit, inter quas:

• accessus moderatio (partes),
• tutela contra abusum (contra vim brutam/contra spam),
• diaria actionum sensibilium,
• exemplaria tuta et rationes restitutionis.

Secundum GDPR, haec iura habes: accessus, rectificatio, deletio, limitatio, oppositio, portabilitas (sub condicionibus a lege provisis).

Ubi tractatio consensu tuo nititur (e.g. litterae nuntiales), illum consensum quovis tempore revocare potes, sine effectu in legitimitate tractationis ante revocationem factae (Articulus 7(3) GDPR). Revocatio tam facilis est quam consensus datus (nexus ad subscriptionem finiendam in omni nuntio vel petitio ad inscriptionem infra scriptam missa).

Etiam praecepta generalia vel particularia de fatis datorum tuorum personalium post mortem dare potes, secundum Articulum 85 Legis Francogallicae n° 78-17 diei 6 Ianuarii 1978 (“Informatique et Libertés”).

Exercitium iurum: support@prometheus-euro.eu (res: “GDPR — Exercitium iurum”).

Exemplar datorum tuorum ipse quovis tempore deponere potes, ex optionibus rationis tuae (tessera requisita); exemplar est fasciculus JSON et tesseram tuam vel codices securitatis non continet.

PromethEUs informationes additas postulare potest ad identitatem tuam comprobandam antequam petitioni satisfaciat.

Responsum intra tempora a GDPR statuta praebetur (plerumque 1 mensis, in quibusdam casibus prorogabilis).

Querimoniam apud auctoritatem competentem deponere potes, praesertim apud CNIL in Francia.

PromethEUs nullam decisionem automatam facit, ne profilationem quidem, quae effectus iuridicos in te producat vel te simili modo graviter afficiat, ex sententia articuli 22 GDPR.

Cautiones automatae contra abusum in sectione “Securitas” descriptae (contra impetus vi bruta factos, contra nuntios inutiles) aditum ad Situm ad tempus restringere possunt; hae cautiones quovis tempore impugnari possunt per inscriptionem in sectione “Iura tua” indicatam.

PromethEUs hanc rationem renovare potest ut mutationes ministeriorum vel legum indicet. Dies postremae renovationis supra indicatur.

Informationes de identitate editoris, provisore hospitii et proprietate intellectuali in Notitia Legalis legi possunt.