Privacy Policy

Trombingo ("we", "us", "the app") is a game that helps teammates learn each other's faces and names using the profile photos in their Slack workspace. This policy explains what data we process, why, and your rights. Trombingo was developed and is operated by Clément Avenel, who is the data controller for personal data processed through the service. Publisher details are set out in the legal notice.

Data controller

The data controller is Clément Avenel. For privacy requests, email privacy@trombingo.com.

Information we process

• Sign-in identity (via "Sign in with Slack"). When you log in, Slack shares your Slack user ID, display name, email address, profile photo URL, and your workspace's ID and name. We store these on your player profile so you can play and appear on the leaderboard.
• Workspace installation. When Trombingo is added to a workspace, we store the workspace ID and name, the installing user's ID, and a Slack bot token used to read the member list and handle the /trombingo slash command. The token is encrypted at rest. Bot scopes requested: users:read and commands.
• Gameplay. We store your game scores, number of correct answers, and related timestamps to power the leaderboard.
• Active game rounds. While a game is open, we temporarily store the names and profile photo URLs needed for that game's shared rounds (so every player sees the same quiz). This data lives only on the game session and is removed when the session expires or the workspace uninstalls Trombingo. We do not build a permanent roster or photo library.

How we use it

• Authenticate you and keep you signed in.
• Run games and maintain a leaderboard for each workspace.
• Recognize you across multiple workspaces you belong to, using your email address.
• Operate, secure, and troubleshoot the service.

We do not use your data for advertising, and we do not sell it.

Legal bases (GDPR)

We process this data to provide the service you request (performance of a contract) and based on our legitimate interest in operating and securing the app.

Where your data is stored

The app is hosted in the European Union (application on Fly.io in Paris; database on Neon). All traffic is served over HTTPS, and Slack access tokens are encrypted at rest.

Sharing and sub-processors

We share data only with the infrastructure providers needed to run Trombingo — Fly.io (hosting) and Neon (database) — and with Slack's API to authenticate you and read your workspace roster. We do not share your data with any other third parties.

Retention and deletion

We keep your account and leaderboard data while you use the app. Open games expire automatically (typically within a few hours); expired sessions are closed and no longer used for play. When a workspace owner or admin uninstalls Trombingo from Slack, we are notified automatically and immediately delete that workspace's data — its players, scores, games (including any temporary round data), memberships, and the encrypted access token. You can also ask us to delete your data at any time by emailing privacy@trombingo.com.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. To exercise these rights, contact us at privacy@trombingo.com. If you are in the EU, you may also lodge a complaint with your local data protection authority (in France, the CNIL).

Cookies

We use a single essential cookie to keep you signed in. We do not use tracking or advertising cookies.

Children

Trombingo is intended for use by members of a workplace Slack and is not directed to children under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above.

Contact

Questions about this policy or your data? Email privacy@trombingo.com.