Privacy policy

Who we are

Postgame is published by SAN (trade name Ithildin Labs), a SARL registered in Versailles under SIREN 934 439 662, 68 B avenue de la Convention, 78500 Sartrouville, France. We decide why and how your personal data is processed, which makes us the controller under the General Data Protection Regulation (GDPR). The legal notice gives the full details.

Write to contact@postgame.news about anything in this policy.

In short. The cookies we set are the ones the site needs to work, listed below. We count visits without cookies. We show no third-party advertising. Our servers are in France. You can export your data and delete your account yourself.

When you read the site

You do not need an account to read Postgame. Here is what is processed when you do.

Server logs

The web server in front of the site keeps logs of the requests it answers: your IP address, the time, the page requested, the response status, the page that linked to us and your browser's user agent. We use them to keep the site secure and working and to investigate abuse. We keep them for 14 days.

Our own software also writes logs. They contain your IP address only in a few cases: when you sign in with a password (with the handle you used, or your email address with most of it hidden), when a rate limit stops you, and when you sign in with an Ithildin Labs account. They are kept by size, not by date: each part of the software keeps its latest 30 MB of log lines at most, and the oldest lines are overwritten first. How many days that covers depends on how busy the site is.

Rate limits

To stop automated abuse, the API counts how often an address does certain things (signing up, asking for a link, posting to the newsletter form, sending a notice, guessing without an account). A counter is stored under a SHA-256 hash of your IP address, or of the email address you typed, never under the address itself; for guesses made without an account the hash is of your network (the first three bytes of an IPv4 address, the first six of an IPv6 one). A daily cleanup deletes counters once they are more than 2 days old.

Errors and uptime

When the site or the API fails, an error report goes to Sentry (Functional Software, Inc.), in its European region (Frankfurt). We configure it to send no personal data by default: no IP address is stored, and request bodies and cookies are removed before the report leaves our servers. A report can still contain the address of the page (which can include what you searched for), your browser and system, and the technical trace of the error. For about one request in twenty, Sentry also receives timings: which page or API route was called and how long each step took, with the same data removed. Sentry keeps reports 30 days.

Better Stack, Inc. checks that the site is up by requesting our public addresses, and receives a ping when our scheduled jobs finish. It receives no reader data.

Prometheus and Grafana, run on our own server, keep technical metrics: request counts, response times and resource use. They carry no identifier of any reader.

Audience statistics

We measure which pages are read with Plausible Analytics, run by Plausible Insights OÜ (Estonia) on servers in the European Union. It sets no cookie and stores nothing on your device, and we see only aggregate statistics, never a profile of one reader. We do it to know what to write and what to fix: that is our legitimate interest.

You can object at any time. This button tells Plausible's script to ignore this browser:

The choice is kept in this browser only. If you clear its storage, make it again.

Cookies and browser storage

The site sets only the cookies below. Each is ours, sent only to us, and set to do something you asked for: sign in, make a guess, send a form. None is used for advertising or tracking, so none asks for your consent.

The site also uses your browser's own storage, on your device only:

• theme, kept until you clear it, remembers the light or dark theme if you choose one.
• Session storage, which goes when you close the tab, holds the job you had open on the jobs page, the acknowledgement of a form that sends you to another page, and, if you use a desk's chat, the chat's sign-in for an hour.

Content from other sites

• Company pages and the markets page can show price charts from TradingView. A chart loads only when you press its "Show the price chart" button (or "Show the price ticker", for the strip of prices at the top of the markets page). Until you do, your browser makes no request to TradingView and TradingView can set nothing on your device. When you press it, your browser loads TradingView's script and frame directly from its servers. TradingView, Inc. then receives your IP address and browser details, learns which price you are looking at on Postgame, and may set its own cookies. Once you have asked for one chart, the other charts on the same page load too. We do not keep your choice, in a cookie or anywhere else, so the next page asks again. We receive nothing from TradingView. See TradingView's privacy policy.
• Game pages that link to an App Store listing show Apple's badge, loaded from Apple's servers (tools.applemarketingtools.com), so Apple receives your IP address.
• Links to other sites leave Postgame. Their owners' policies apply there.

The site loads no advertising network and no social-media tracker.

Your account

An account is optional. It lets you save things, take part in the Desk and set your own newsletter.

What we store

• A handle you choose (a pseudonym that other readers see next to what you post), your email address (never shown to other readers), the dates the account was made and the address was verified, and your settings (calm mode, sound, reading history).
• If you set a password, only a hash of it (Argon2id). If you sign in with an emailed link, the link is single-use and we keep only a hash of it. Session tokens are hashed the same way.
• For each signed-in session: when it started, when you last used it, when it expires, the network it started from (the first three bytes of an IPv4 address, the first six of an IPv6 one, never the full address) and the browser and system names only ("Chrome on Mac"). Your account page lists your sessions so you can recognise and end them.
• A ledger of what you do on the Desk (a guess, a forecast, a post), which acknowledges your actions and works out the levels shown on your public card.

Passwords

When you choose a password, our server checks it against the Have I Been Pwned range service. It sends only the first five characters of the password's SHA-1 hash, with padding; the service never receives your password, handle or email address, and sees our server's address, not yours. If the service does not answer in three seconds, the check is skipped.

Mail about your account

Sign-in links, verification, password and email-change messages are sent from our mail queue through our host, OVH's mail servers. A message waits in the queue only until it is sent; its text is then erased and its record is deleted 30 days after it was queued. An account whose email was never verified is deleted after 7 days.

Export and deletion

Your account page downloads the data we hold under your account as a file and deletes the account after you type your handle back. Deletion removes your sessions, links, saves, drill cards, activity ledger, corrections, desk memberships and the mail queued for you. What other readers may rely on stays, without you: your forecasts and scores lose their link to you, and the cases, moves, explanations, slices and desks you made lose your handle (a move or an explanation's text is replaced by "Removed by its author", a slice's note is removed). Your newsletter subscription is separate: see below.

The newsletter, alerts and digest

If you give us your email address for the newsletter, we first send a message with a confirmation link and subscribe you only when you click it. A signed-in reader turns it on from the newsletter page, with the address already verified.

We store the address, its status (pending, confirmed, unsubscribed), what you follow (the weekly digest, companies, games), the dates of sign-up, confirmation, unsubscription and last mail, and a private token in your links. For follow alerts we also keep a list of the records and articles we have already mailed you about, so none is sent twice. The weekly digest goes out on Monday mornings. Alerts are checked every hour and you get at most 3 alert emails in any 24 hours.

These emails, like every email we send (sign-in, confirmation, password reset), go through Brevo, our email-sending processor, based in France. Every email has an unsubscribe link, including the one-click kind your mail app can use. Brevo tells us about bounces, complaints and unsubscribes, which we record on a suppression list of addresses we must not mail again.

After you unsubscribe we keep the address with the status "unsubscribed", and on the suppression list, so the emails do not start again. To have the address erased instead, write to us. Deleting your account does not erase a newsletter subscription by itself.

The Desk

The Desk is where readers work on our data together. Some of what you do there is public, some is private.

• Public, under your handle: the cases and moves you post, the slices you share by link (a slice is a frozen view of our data, with an optional note), and a card at /readers/your-handle with your counts, score and accepted slices per subject.
• Private to you, or for your attempts to the members of your desks: your saves, your drill cards, your calibration and your guesses. A forecast is scored; other readers see totals, not yours, unless you choose to show one to a desk.
• Guesses without an account are kept under an identifier our server issues and hashes. They are deleted after 90 days unless you sign in and claim them.
• A desk is a private group. Its members see each other's attempts on the same items and the explanations they write for one another, and the desk's chat and files live on Ithildin Labs's chat service (below).

Every post passes automatic checks: that the records it cites exist, that its numbers match them, that its links go to primary sources, that it does not read as investment advice or name an unannounced product, and that it contains no email address or phone number. A post that fails a check is held until a person reads it, and a person decides whether a post that enough reports have hidden stays hidden.

Reports, corrections and legal notices

• A signed-in reader can report a post. We store the report, its reason and who made it. A person reviews posts that enough reports have hidden. If you delete your account your reports stay without your name, so that the outcome still counts.
• A signed-in reader can send a correction about one of our facts. It is read by the people who review corrections and is deleted with your account.
• Anyone can send a notice about content they think is illegal from the Report contentpage, signed in or not. We store the address of the content, your explanation, your statement of good faith, your name and email address (not required for notices about child sexual abuse material), and we email you an acknowledgement. We do not store your IP address with a notice. We keep a notice, and what we decided, for as long as we need to show how we handled it. We may tell the author of the content that a notice was made and what it said, and we give your name only where the law requires it or where it is needed to assess the notice.

Ithildin Labs accounts and desk chat

You can sign in with an Ithildin Labs account. It is held on accounts.ithildinlabs.com by Ithildin Labs, our publisher, on servers in Gravelines, France. When you sign in that way, Postgame receives your account's identifier and handle and, if Ithildin Labs has verified it, your email address.

Each desk is a space in Ithildin Labs's chat service. The messages and files you post there are stored by Ithildin Labs, the files in OVH Object Storage in Gravelines, and are visible to the desk's members. Postgame tells the chat service your desk's name and who belongs to it. Deleting your Postgame account removes you from those spaces. It does not delete your Ithildin Labs account or what you wrote in the chat; you delete those from that account.

Who handles your data

Our staff and the people who review reports can see what they need to do that work. Beyond us:

We also disclose data to the authorities when the law requires it.

The whole database is copied every night to OVH storage. We keep 30 daily and 12 monthly copies, so data you delete leaves our backups when the copy that holds it is replaced, in the end within about a year.

Transfers outside the EU

Our hosting, our email services and our audience statistics stay in the European Union. Four things can reach the United States or another country outside it:

• Sentry is operated by a US company. We use its European region, and the transfer is covered by the EU-US Data Privacy Framework and by the Standard Contractual Clauses in Sentry's data processing agreement. Sentry says some data types can still be stored in the United States outside the region chosen.
• TradingView and Apple receive your IP address when your browser loads their content on the pages above (TradingView's only after you ask for a chart). That connection is yours, not ours, and we do not control it.
• Better Stack is a US company but receives no reader data.
• The password check sends only a hash prefix, from our server, to a service outside the EU.

How long we keep data

Why we may process it

Your rights

You can ask for access to your data, to have it corrected or erased, to restrict or object to its use, and to take it with you. Where processing rests on your consent, you can withdraw it at any time. Signed-in readers can export and delete their account from the account page. For anything else, write to contact@postgame.news. We answer within one month. We may ask you to prove who you are before we act.

Complaints

If you think we handle your data badly, tell us first. You can also complain to the French data protection authority, the CNIL: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr/fr/plaintes, or to the authority of the country where you live.

Changes to this policy

We update this page when what we do changes, and change the date at the top (October 21, 2026). If a change affects what you agreed to, we will tell you.