Privacy and cookies

The presentation pages (home, what’s new, report, credits) set no cookies. They load no font, script or image from another site, and contain no audience measurement and no trackers.

One cookie is set, and only when you sign in to your account. It is strictly necessary: without it, the site could not tell that you are signed in.

• Name: __Host-tether_session. Purpose: keep you signed in. Page scripts cannot read it (HttpOnly), it is only sent over HTTPS (Secure), it is not sent by requests coming from another site (SameSite=Lax) and it only applies to tether-game.com.
• Lifetime: 30 days at most, and it stops after 7 days without activity. Signing out removes it immediately.
• It holds only a random identifier: the server keeps just its fingerprint, never the value itself.
• No language cookie: the language of the page comes from its address.

No audience measurement, no trackers, no advertising and no third-party service in your browser.

Because only a strictly necessary cookie is used, no consent banner is shown. If that ever changes, this page will be updated along with it.

When you create an account, the server keeps:

• your e-mail address and, if you choose one, your username;
• your password as a fingerprint (Argon2id): the password itself is never kept;
• your account status (pending, approved or declined), the reason for a refusal if any, and the dates of registration, e-mail confirmation and decision;
• the devices linked to your account (for example “Lanceur Windows”), with their connection date and last activity. A device is signed out after 90 days without activity, or when you revoke it from “My account”.

Downloading the installer requires an approved account. Each download is recorded on the account: which account, on what date, which version. This record holds no IP address. Anonymous visitors of the download page are not recorded. No retention period is set for this record yet.

To slow down repeated sign-in attempts, the server counts failures per IP address over a 15-minute window. It does not keep the address itself but a fingerprint computed with a secret key, removed by a daily purge: it is kept between 15 minutes and 24 hours.

Like any web server, the hosting server notes the IP address of each request in its access logs, kept for 30 days.

The site writes to you to confirm your address, for a forgotten password, to tell you when your account is approved and when your password is changed. These messages are sent by a sending provider, Brevo, which receives your address and the content of the message (for example a confirmation link) for that purpose. The site’s sending register keeps only timestamps, no address.

The site and the accounts database are hosted by OVHcloud. The database is backed up every day; these backups are kept for 14 days on the same server.

Deleting an account is not available from “My account” yet. For any question or request about your data, write to us through the “Report a bug or suggest an idea” page.