Privacy policy

Riskelo app (iPhone, iPad, Mac) · Version 1.0 · Last updated: 24 September 2026

1. Who is responsible

Riskelo is published by Robert Oulhen, an independent developer, acting as data controller within the meaning of the General Data Protection Regulation (GDPR).

Contact: bob.oulhen@gmail.com

2. The data the app does not collect

Riskelo collects none of the following:

• name, email address, phone number, account identifier;
• location, address book, photos, calendar, microphone, camera;
• advertising identifiers (IDFA), device identifiers used for tracking;
• usage statistics, analytics, telemetry, usage logs.

The app contains no third-party SDK: no ad network, no analytics tool, no social network, no authentication service.

It runs entirely offline, with one exception that you choose yourself: playing “far away”, described in section 4. As long as you do not open it, the app makes no request to any server.

Under the App Store's privacy labels, Riskelo declares a single piece of data: a device identifier, used for the app's functionality when playing far away, not linked to your identity and not used to track you. It is the random number the relay keeps for a week, described in section 4. Nothing else is kept off your device.

3. The data kept on your device

To work, the game writes files in its own storage space, on the device and nowhere else:

These files contain nothing but the state of the game: territories, men, scores by subject, the log of moves, preset side names (“Blue”, “Red”, …). They contain no data identifying you.

They are deleted with the app: uninstalling Riskelo erases everything, for good and without remainder. No backup is sent to any server; if you have enabled iCloud Backup on your device, these files may be included in Apple's encrypted backup, on your account and under your exclusive control.

4. Playing across several devices

There are three ways to link devices, and you choose yours for each game. They do not have the same consequences, which is why they are described separately.

In the same room

The devices find each other through Bonjour and talk over TCP, directly between themselves — over the local Wi-Fi network, or device to device when there is no network. Without passing through any server, and without anything travelling over the internet.

• Your device's name is visible to nearby devices that have opened the same screen, while a table is being looked for. It is the name you gave your device (for example “Camille's iPhone”); it serves only so that the people you play with recognise you in the list. You can change it in Settings ▸ General ▸ About ▸ Name.
• Only the moves of the game travel — a few dozen bytes describing a reinforcement, an assault or an answer.

The “local network” permission the system asks for serves that purpose alone. Refusing it does not prevent you from playing alone, or several around one device.

Far away, with a code

Two devices that are not in the same room cannot find each other on their own: they need a meeting point. Riskelo keeps one, hosted by Cloudflare. It does one thing only — copy packets whose contents it does not know from one device to the other.

What reaches it:

• an identifier drawn at random when the game is installed, belonging to that device. It designates nobody, is tied to no account, and serves only to give you your seat back if the link drops, or when you come back another evening to pick the game up;
• the moves of the game, in a form it does not try to read and simply passes along.

What never reaches it: your name, your nickname, the name of your device, your email address, any Apple identifier. The first name you give yourself travels inside the packets, and goes from one player to another without the relay seeing it.

The room stays open for one week after the last player leaves, so that a game can pick up again another evening under the same code. During that week the relay keeps only what it needs to let you back in: the code, the random identifier of whoever opened the room and those of the players admitted, the version of the game, and whether the game has started. It does not keep the game itself: that stays on your devices.

After a week with nobody in it, the room is erased and the code becomes free again. Nothing is kept afterwards: neither the games, nor the moves, nor who played with whom.

The invitation link you share contains nothing but the room code. The app or service you send it through — messaging, text message, mail — applies its own rules, over which Riskelo obviously has no say.

Through Game Center

Game Center is Apple's gaming service, and the game runs through it end to end: Apple brings you together and carries the moves. Riskelo receives only the Game Center nickname of the players in the game, as Apple displays it, and does not keep it.

What Game Center collects on its own account is covered by Apple's privacy policy. That path is optional: the other two ask for no account.

5. What Apple may receive

Independently of Riskelo, Apple collects certain information related to downloading and using apps (purchase, installation, aggregate statistics). If you have agreed to share analytics with app developers in your device settings, Apple may pass me crash reports and anonymous, aggregated statistics. That is the only form in which I have access to them, and those reports identify nobody. This sharing can be turned off at any time in Settings ▸ Privacy & Security ▸ Analytics & Improvements.

6. Children

Riskelo collects no data, whatever the player's age, and contains no advertising, no links to social networks, and no content generated by other users. The optional question packs are bought through the App Store: no payment goes through the app, and no banking data is given to it. The “Easy questions” setting is meant for playing with children. The app therefore complies, by construction, with COPPA and with Article 8 of the GDPR.

7. Your rights

The GDPR gives you rights of access, rectification, erasure, objection and portability over your personal data. As Riskelo holds none, those rights have in practice no object: there is no file to consult, correct or erase anywhere but on your device, where you have complete control.

To erase all of the game's data: delete the app. For any question, write to bob.oulhen@gmail.com; you will be answered within thirty days. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the supervisory authority of your own country.

8. This site

This site is hosted by GitHub Pages (GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, United States). It sets no cookie and contains no tracker, no font and no script loaded from a third party. Like any host, GitHub records technical connection logs (IP address, date, page requested) for security and service delivery; that processing is covered by GitHub's privacy statement.

9. Changes

If a future version of Riskelo were to collect any data at all, this policy would be updated before that version is released, and the change would be announced in the App Store release notes. The date at the top of this page governs.

This page is a translation of the French politique de confidentialité. Should the two differ, the French version prevails.