Personal data

What Neurostim keeps, why, and for how long. Who publishes the site: see the legal notice.

Your account

Your username, your email address and your password, which is kept in a hashed form that no one can read back. What you add to your profile: description, avatar chosen from the site's images, coach, country and department, preferences.

Your email address is only used for messages you trigger: address confirmation, a link to choose a new password, notice of a change of address, duel notifications if you turn them on. The “news” checkbox only records your consent: no newsletter is sent.

Your games

Every game is recorded: questions, answers, times measured by the server, score. This is what builds the rankings and settles duels and tournaments.

With every game and every login, the site keeps a hash of your IP address, computed with a secret key held by the site (the address itself is not recorded), and your browser family, for example “Firefox/Linux/desktop”. Both are erased after 12 months; the games remain. Visits are counted without IP address or browser and erased after 13 months. The web server logs keep the IP address for 14 days.

Cookies

• Session cookie and XSRF-TOKEN cookie: keeping you logged in and protecting forms.
• “Remember me” cookie, only if you tick the box when you log in.
• ns_visitor cookie: a random identifier for your browser, kept for one year. It keeps track of the games you play as a visitor, links them to your account when you sign up or log in (games from the last 30 days) and detects accounts used in the same browser.

No advertising or analytics cookies.

What others see

Everyone, even without an account: your username in the rankings, stars and records, and your results in the “Now on Neurostim” feed if you appear in it (adjustable in your preferences).

Logged-in members: your profile (description, coach, level, location, online status), the list of members online, the results of duels and tournaments, your global test report if you allow it in your preferences.

Your private messages are read only by the participants in the conversation; the moderators only read a message that a member reports to them.

Preventing cheating

Two accounts seen on the same connection or in the same browser during the last 30 days play their duels and tournaments against each other as linked accounts, with nothing at stake: stakes returned, no Elo, no winnings. A game played faster than a human could play it does not count in the rankings.

Deleting your account

In “My account”, “Delete my account”: your username becomes “membre-supprime-” followed by a number; your email address, password, profile, contacts and block list are erased, as are the IP address hashes and browser families kept with your games. Your games, duels, tournaments, private messages and forum posts remain for others to see, under that name.

For any other request about your data, including data from the old site: Contact page.