This is a translation provided for convenience. In case of discrepancy, the French version prevails.
The essentials
irs-rp.com is a fictional role-play website. It is designed to work without any real data: your character's first and last name, a username and imaginary business data. No email address is requested, no analytics or advertising tool is used, and no data is sold or passed on to third parties.
If you nevertheless enter real information in a free-text field, you do so at your own risk; you can ask for it to be deleted (see “Your rights”).
Data processed and retention periods
| Data | Content | Retention |
|---|---|---|
| Account | Character's last and first name, username, password (stored only in irreversibly hashed form), role, sign-up date. | As long as the account exists. |
| Sign-in session | Random token stored in a cookie, of which only a hashed fingerprint is kept on the server. | 30 days, or until you sign out. |
| Business returns | Business, head office, sector, amounts reported, accounts link, comment, status and IRS note. | As long as the account exists, for game tracking. |
| Payment plan and refund requests | Return concerned, amounts, reason, supporting document link, IRS decision. | As long as the account exists. |
| Fraud reports | Type, person or business reported, description, evidence link, optional contact details. Can be made without an account. | For as long as they are being handled in the game. |
| IP address | Used only in memory, to limit abuse (number of sign-in attempts, sign-ups, reports…). It is not stored in the database. | About one hour at most, then deleted automatically. |
| Preferences in your browser | Your choice regarding the cookie notice, stored on your device (local storage). The site language depends only on the page address (/en/ for English): nothing is stored. | Until you clear your browser data. |
Purposes and legal bases
- Providing the game service (account, returns, requests, tracking): performance of the terms of use that you accept by using the site.
- Securing the site (limiting abuse, protecting accounts): legitimate interest of the publisher.
- Handling reports: legitimate interest of the gaming community in fighting abuse.
Recipients
The data is accessible only to the site's administration team (accounts with full access), to the extent necessary for the game. It is stored on the server of the host, OVH, which acts as a technical processor. No other transfer takes place: the site does not use any third-party service (fonts, images and scripts are hosted on the site itself).
Security
The site is only accessible over an encrypted connection (HTTPS). Passwords are irreversibly hashed (scrypt algorithm); the session cookie cannot be read by scripts and is only sent over a secure connection. Repeated attempts are limited automatically.
Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability.
To exercise these rights, contact the site's administration team through an IRS agent, on the role-play server.
If, after contacting it, you believe that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).