Pantouflard Privacy Policy

Effective date: October 27, 2026

Last updated: October 27, 2026

Language: this is an English translation, offered for your convenience. The French version, « Politique de confidentialité », is the binding one.

In short

• We collect as little as we can. You don't need an account to play. Names, answers, drawings and photos stay between the phones and the TV: we never receive them.
• What we do receive:
  • technical information to connect the devices, like IP addresses and game codes;
  • your email address, if you sign up for news or create an account.
• What we don't do:
  • no ads, no ad trackers, no analytics tools from other companies;
  • we sell nothing.
• Where your information goes: our server is in Montréal (Québec). Some of our providers are outside Québec (details in sections 6 and 7):
  • Cloudflare and Stripe, in the United States;
  • SiteGround, which hosts our mailboxes, in the United States;
  • Metered, a Canadian company with servers in several countries, including the United States;
  • Google, as a last resort only, in the United States and elsewhere;
  • Zedmail, an Ontario company whose servers are in Québec.
• Your rights: you can see, correct or delete your information. Email us.

1. Who is responsible for your information

The company. Pantouflard is a service of Victor Conceptum Développement et Stratégie Web Inc., 303-164 Cowie, Granby, Québec J2G 3V3. It is responsible for the personal information it holds.

The person in charge of protecting personal information

• Name and title: Vincent Claeys, person in charge of protecting personal information
• Email: [email protected]. Put "Privacy" in the subject line.
• Address: 303-164 Cowie, Granby, Québec J2G 3V3

By default, this role belongs to the person with the highest authority in the company.

2. What this policy covers

What it covers:

• the pantouflard.ca website: the homepage, the TV page (/tv) and the phone page;
• the server that connects the devices;
• the news sign-up;
• accounts and the subscription, from December 1, 2026;
• the emails we send you.

How we collect information:

• through the site's forms: news and sign-in;
• through the game pages, which send technical information to our server;
• through Stripe's payment page;
• through the emails you send us.

What it doesn't cover: Stripe's payment pages and other websites. They have their own policies.

3. What we don't collect

• Nothing from your games. Players' names, answers, drawings, votes, scores, photos (in Zoom Mystery, for example) and your « Nos mots » (Our words) lists never go through our server.
  • All of that travels between the phones and the TV, over an encrypted connection.
  • It stays in the TV's memory and is erased when the game ends (except what section 5 describes).
• Your card number. Only Stripe sees it.
• What we don't do:
  • no advertising;
  • no ad trackers or social media pixels;
  • no analytics tools from other companies;
  • no profiling;
  • no locating you from your IP address.
• We don't sell or rent your information.
• We don't ask for your name, date of birth or address. The only exception is what Stripe asks for to take a payment.

4. What we collect, why, and how long we keep it

4.1 When you play (no account)

To connect the TV and the phones

• The game: when the TV opens a game, our server gives it a 4-letter code and a secret code. We keep only a fingerprint of the secret.
• The phones: each phone that joins gets a random connection number.
• Connection offers: to connect directly, the TV and phones exchange "connection offers" through our server. These offers contain the devices' IP addresses.
  • We delete them as soon as they're read, or after 2 minutes at most.
  • The game code is deleted at most 30 minutes after the TV page is closed.
• Once connected, the phones and the TV talk to each other directly, like in a video call. During the game, they therefore know each other's IP addresses.
• If a direct link isn't possible, the connection goes through a relay server (section 6). It stays encrypted, and the relay can't read it.
• To find their way, the devices also ask a Cloudflare server (a "STUN" server) for their public IP address.

To run the site and protect it

• Going through Cloudflare: every time your device communicates with pantouflard.ca, it goes through Cloudflare first, which passes the request on to our server. Cloudflare therefore sees, among other things, your IP address, the page or file requested, your browser and the time.
  • To make the site load faster, Cloudflare keeps copies of our images, sounds, videos and scripts. These copies never contain personal information.
  • Cloudflare keeps its own logs, under its own privacy policy.
• Against abuse: we count requests per IP address for about an hour, to block abuse and bots.
• Web server logs: like any web server, our server records each request: IP address, date and time, page requested, browser. We keep these logs for 14 days.

To fix bugs

• The log: our server keeps a daily log. It holds:
  • the game code and the random connection numbers;
  • the TV's browser model and screen size;
  • error messages from the TV and phones;
  • how each phone connected (directly or through the relay).
• What it doesn't hold: no IP address and no player name.
• How long: we keep it for 30 days.

👍 / 👎 votes

• What we receive: after a game, your phone may ask whether you liked it. If you answer, we receive:
  • the game (or the game's question);
  • your vote;
  • the language and the date;
  • a random number kept on your phone, used to count one vote per phone, per game and per day.
• What it isn't linked to: that number isn't linked to any name, email or IP address.
• How long: after 12 months, we keep only the totals per game.

4.2 Pantouflard news (if you sign up)

• What we collect:
  • your email address and language;
  • the exact consent text you accepted and the form's version;
  • the date and time;
  • your IP address.
• Why:
  • to write to you when Pantouflard launches and when there's something new (new games, for example);
  • to prove you consented, as Canada's Anti-Spam Legislation requires.
• It's optional, and separate from the account. You must be 14 or older.
• You can unsubscribe any time: with the link at the bottom of every email, or by emailing us.
• How long:
  • for as long as you're subscribed;
  • after you unsubscribe, we keep the proof of your consent and of your unsubscribe (email, dates, IP address, text accepted) for 3 years. That lets us prove we followed the law and makes sure we don't write to you by mistake. Then we delete it.

4.3 Your account (from December 1, 2026)

What we collect

• Your email address.
• The 6-digit sign-in codes. They're deleted after 10 minutes or 5 tries.
• Your session: a cookie on your phone. We keep only a fingerprint of the session, and it expires 1 year after you last used it.
• Your access:
  • your subscription status and renewal date;
  • your Stripe customer number;
  • the dates you used your passes.
• The game your phone is in (the code and the time). We keep only the latest. It's used to unlock the paid games, one game at a time, for about 10 minutes.
• The version of the terms of use you accepted, and the date.

Why

• to sign you in and unlock the paid games;
• to limit the passes (a first one, then one every 3 months);
• to send you account emails: codes, receipts, renewal reminders and important notices.

What the TV shows: the "Everything's unlocked" message shows the name you chose as a player in the game, never your email address.

How long we keep it

• For as long as your account exists. You can delete it any time with "Delete my account".
• If your account goes unused for 24 months with no subscription, we delete it. We warn you by email 30 days before.

4.4 The subscription and payments (Stripe)

What Stripe collects on its secure payment page:

• your name and email address;
• your card details;
• your billing address: at least the country and postal code, to work out the tax;
• technical information to prevent fraud, like IP address and device.

What we see: we never see your full card number. In our Stripe dashboard, we see:

• the card type and its last 4 digits;
• payments and refunds;
• your country and province (for taxes).

Why:

• to take the payment and work out the tax;
• to send your receipts and your copy of the contract. That copy contains your name and address, as the law requires;
• to handle cancellations and refunds;
• to prevent fraud.

How long:

• Billing records (invoices, amounts, taxes, dates, billing name and address) are kept 6 years after the end of the tax year, as tax laws require. That's true even if you delete your account.
• Stripe also processes some information for its own purposes, like fraud prevention and its legal obligations, under its own privacy policy (stripe.com/en-ca/privacy).

4.5 The emails we send you

What we send:

• sign-in codes;
• receipts and your copy of the contract;
• reminders before a renewal;
• important account notices;
• news, only if you signed up for it.

How:

• They go through Zedmail, our email-sending provider.
• Zedmail keeps a record of sent messages for 7 days, and its server logs for 7 days at most.
• Every email identifies us and says how to reach us or unsubscribe.
• We don't use pixels or tracking links to find out whether you opened our emails or clicked their links.

4.6 When you email us

• What we keep: your address and your message.
• Why: to answer you.
• How long: 2 years after our last exchange.
• Where: our mailboxes ([email protected] and [email protected]) are hosted by SiteGround, in the United States.

4.7 Summary: how long we keep what

When a period ends, we delete the information or make it anonymous.

5. What stays on your devices (cookies and local storage)

Cookies

• Today, pantouflard.ca sets none. Cloudflare, which visits go through, doesn't set any either.
• From December 1, 2026, if you sign in to your account, a single cookie keeps your session open. The account needs it to work.
• No advertising or analytics cookies.
• Stripe's payment page sets its own cookies, in particular to prevent fraud.

Your browser's local storage. To make the game handy, the TV and phones keep a few things in their own browser. They aren't sent to us, except the random number that goes with your votes.

To erase all of it, delete pantouflard.ca's site data in your browser's settings.

6. Who we share your information with

We use a few providers. Each one gets only what it needs to do its job. We ask each of them for a written agreement that protects your information (section 7).

Apart from these providers, we share your information only:

• if the law requires or allows it, for example to comply with a court order;
• if Pantouflard were sold or merged with another business. The buyer would then have to protect your information as this policy says, and we would let you know.

Never for advertising, and we don't sell it.

7. Your information outside Québec

We'll say it plainly: your information is communicated outside Québec.

• Our server is in Montréal (Québec). Everything it keeps (section 4) is stored there. Our encrypted backups are kept at our office, in Québec.
• Cloudflare, Stripe, Metered and Google may process your information in the United States, or elsewhere in Canada and the world.
• SiteGround, which hosts our mailboxes, keeps the emails you send us on servers in the United States.
• Zedmail is an Ontario company, even though its servers are in Québec.

What we do first:

• before we communicate information outside Québec, we assess whether it will be well protected there. That's the "privacy impact assessment";
• we ask each provider that handles personal information for us for a written agreement that protects it.

What it means for you: while your information is in another country, it's subject to that country's laws. It may be accessible to its courts, police and national security authorities.

8. Children

Playing without an account

• Pantouflard is made for family play. To play, a child needs no account: they only type a nickname, which stays on the TV and the phone. We never receive it.
• A child's phone sends us only:
  • the technical information it needs to connect, like its IP address (section 4.1);
  • if they answer, 👍 / 👎 votes linked to a random number.

14 and older for the rest

• Accounts and the news sign-up are for people 14 and older. In Québec, collecting information from a child under 14 requires the consent of their parent or guardian. So we don't create accounts for children under 14.
• If you're a parent and your child under 14 signed up, email us: we'll delete their information.
• The subscription is paid by an adult.

Tips for parents

• Have your child use a nickname rather than a full name.
• Choose the "Family" tone.
• Keep an eye on photos: in Zoom Mystery, players photograph objects, not people.

9. Your rights

You have the right:

• of access: to know what information we have about you and get a copy. It's free;
• of correction: to have inaccurate, incomplete or ambiguous information corrected;
• to deletion: to have your information erased. For your account, the "Delete my account" button does it right away. We keep only what the law requires us to keep, like billing records;
• to withdraw your consent: for example to the news, with the unsubscribe link. Some information is still needed to provide the service or to comply with the law: we'll tell you if that's the case;
• to portability: to receive the information you gave us in a common computer format (JSON or CSV, for example), or to have it sent to someone else;
• to have dissemination stopped: to ask us to stop disseminating information about you, or to de-index a link, in the cases the law provides. We don't publish any personal information about you, but you can email us if you think we do;
• to be informed of an automated decision: unlocking the paid games is automatic. It's based only on your subscription or pass and on your phone being in the game. You can ask us:
  • what information was used, and why;
  • to have it corrected;
  • to present your observations to a person, who then reviews the decision.

How

• Email the person in charge: [email protected], with "Privacy" in the subject line.
• We may ask you to confirm your identity, for example by replying from your account's email address.
• We answer in writing within 30 days.

A complaint?

• Email us first: we acknowledge your complaint, look into it and answer in writing within 30 days.
• If you're not satisfied:
  • if you live in Québec, you can go to the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca);
  • elsewhere in Canada, to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

10. How we protect your information

• Encryption: the whole site uses an encrypted connection (HTTPS). The exchanges between the phones and the TV are encrypted too, even when they go through a relay.
• Secrets: game secrets and sign-in sessions are kept only as fingerprints, never as they are.
• Sign-in codes expire after 10 minutes and 5 tries.
• Limits: limits per IP address and per email address block bots and repeated attempts.
• Out of reach: the databases and logs are kept outside the site's public folder. Our server refuses requests sent by other websites.
• Relays: access to the relay servers is temporary and expires by itself.
• Cards: card details stay with Stripe, which is PCI DSS certified.
• Admin pages are protected by long secret keys.
• As little as possible: we keep as little information as we can, for as short a time as we can. Only the person in charge can see it (section 12).

No measure is perfect, but we take security seriously.

11. If an incident happens

An incident can be unauthorized access, use or disclosure, or a loss of information. If we have reason to believe one has happened:

• we act quickly to reduce the risks and keep it from happening again;
• we record it in our incident register;
• if it presents a risk of serious harm:
  • we notify the Commission d'accès à l'information and the people affected;
  • when federal law applies, we also notify the Office of the Privacy Commissioner of Canada.

12. How we handle your information in-house

• Who can see it: only the person in charge of protecting personal information.
• Retention and destruction: we follow the periods in section 4.7.
  • Every night, we make a backup copy of our databases. We keep it for 14 days on our server.
  • An encrypted copy is also kept for 30 days on a drive stored at our office, in Québec.
  • So deleted information disappears from our databases right away, and from all our backups within 30 days.
• Before a new project: before any new system that involves personal information, and before any communication outside Québec, we do a privacy impact assessment.
• Complaints: they're handled by the person in charge, as section 9 describes.
• Approval: this policy and our practices are approved by the person in charge.

13. Changes to this policy

• We publish every new version on pantouflard.ca, with its date.
• For an important change, we also announce it on the site. If you have an account, we let you know by email.
• For a new use of your information, we ask for your consent first, when the law requires it.

14. Contact us

Vincent Claeys, person in charge of protecting personal information Victor Conceptum Développement et Stratégie Web Inc. (Pantouflard)

• Address: 303-164 Cowie, Granby, Québec J2G 3V3
• Email: [email protected] (subject: "Privacy")
• Phone: 450-305-0330