Privacy notice
Last updated: 29 October 2026.
Alboria keeps the least it needs for your account to work, and nothing more. This notice says what, why, for how long and what you can do about it.
Who is responsible
Carolina Molina Elvira runs Alboria and is responsible for your data. You can write about anything in this notice to privacy@alboria.org.
What we keep, why and for how long
| Data | Why | How long |
|---|---|---|
| Your email | To send you the sign-in codes. Nothing else is ever sent to it. | Until you delete your account |
| Your gamertag and its tag | So other players see and find you | Until you delete your account |
| Your devices: the game, the system, the device's public key, a hash of the computer's ID (never the ID itself), the address it last signed in from and the dates | To let each of your devices sign in, and to keep a banned player out | Until you remove the device or delete your account |
| Who was in each room: its code, the game, each member's key and Gamertag#tag, and when they joined | To check reports of abuse | 7 days |
| The device keys seen each month | To count how many players use the service | 13 months |
| Bans: the account, keys, computer hashes or addresses banned, and the reason | To keep a banned player out | Until the ban is lifted; a banned account's addresses, 30 days |
| Sign-in codes | To check the code you type | In memory only, as a hash, for 10 minutes |
While you play, the relay sees your connection's address so it can pass the game's traffic to the other members of your room. It keeps it in memory only while you are connected, and it never reads or stores what the game sends.
Legal basis
- Your account, your devices and online play: providing the service you ask for (article 6.1.b of the GDPR).
- The room log, the computer hash, the last address, the bans and the monthly count: our legitimate interest in keeping the service safe and free of abuse, and in knowing whether it is used (article 6.1.f).
Who else handles it
- Amazon Web Services runs our server (in Stockholm, Sweden) and sends the emails with the codes (Amazon SES, same region).
- Cloudflare serves this website and our domain's DNS.
Both only process data on our behalf. As they are companies based in the United States, data may be transferred there under the safeguards they offer, such as the EU–US Data Privacy Framework and standard contractual clauses.
What we never do
- No advertising, no tracking, no profiling and no automated decisions about you.
- We never sell or share your data with anyone else.
- This website sets no cookies. It only remembers the language you pick, in your own browser.
Your rights
You can access, correct, delete or download your data, restrict or object to how we use it, at any time. From the launcher's Account section you can download all your data and delete your account yourself. For anything else, write to privacy@alboria.org. If you think we have not respected your rights, you can complain to the Spanish data protection authority (aepd.es) or the one where you live.
Age
To create an account you must be at least 14 years old, or have the consent of your parents or guardians.
Changes
If this notice changes in anything that matters, we will say so on this website and in the launcher before it applies.
This text is translated from the Spanish version, which prevails if they differ.