RetroRecomp

Privacy

Privacy policy

Updated 24 October 2026. This is a translation; the French version is the reference.

Who is responsible

Arthur Reboul Salze, publisher of retro-recomp.com, is responsible for the processing described here. Contact: contact@retro-recomp.com.

Without an account

Visiting the site requires no data. It uses no advertising, analytics, trackers, or fonts or scripts loaded from third parties. The News page is prepared by our server from the versions published on GitHub: your browser only contacts GitHub if you click a download link. The host (OVHcloud) keeps, like any host, technical access logs (IP address, page, date).

With an account

  • E-mail address: to send you sign-in codes and prevent abuse (one address, one account). It is never shown or passed on to anyone.
  • Pseudonym and avatar (optional): shown publicly. The uploaded image is cropped, reduced to 256 × 256 pixels and re-encoded by the server, without its metadata; an avatar that breaks the rules can be taken down.
  • Contributions: the discovery files sent by your converter. They only hold numbers (addresses, positions in the ROM) and game titles: never a ROM, file path or image. They are linked to your account for its history and, later, the leaderboard.
  • Password, if you choose one: the server only keeps an Argon2id hash, from which it cannot be recovered. It is erased with the account.
  • Sessions: one strictly necessary session cookie (rr_session, HttpOnly, 30 days) on the site, and one token per signed-in converter, which expires after a year without use. The server only keeps a hash of them.
  • Abuse protection: request counters per IP address and per account, where the address only appears as a hash, erased after two days. Sign-in codes are only stored as hashes and erased after one day.

Legal bases

Your consent, given by ticking the box before receiving a code, for the account and contributions; our legitimate interest in the security of the service (quotas, host logs).

Retention

Account data is kept while the account exists. When you delete it, the e-mail address, pseudonym, avatar and sessions are erased at once; contributions not yet checked are deleted, and checked ones remain as anonymous numbers, no longer linked to you.

Where the data is

At OVHcloud, in France. No data is sold or transferred outside the European Union.

Your rights

You can view, correct, download and delete your data from the Account page, or write to contact@retro-recomp.com (access, rectification, erasure, objection, restriction, portability). You may also complain to the French data protection authority, the CNIL (cnil.fr).