Privacy policy

In short: what we collect, how, and why

• What we collect. Your account details (email address, nickname, language); for a linked console, its model, its name and the names of its game files (never the games themselves); the console's state when you control it (game being played, volume); usage statistics without personal content.
• How we collect it. You enter your account details yourself when you sign up. The console data is sent by the ROMKADE app installed on your console, only after you link it to your account. The console state is read at the moment an assistant or Google Home sends a command.
• How we use it. Only to provide the service: sign you in, show your library, and carry out your requests (launch a game, set the volume, quit) from ROMKADE Manager, an AI assistant or Google Home. We do not sell your data, we do not use it for advertising, and we do not share it except with the processors listed below and with the services you choose to connect.
• Your control. You can remove a console, disconnect an assistant or Google Home, and delete your account at any time from ROMKADE Manager (My account); the data is then erased.

The romkade.com website

• Static website, without cookies. Only the sign-in page (/authentification) exchanges data, with the account service described below.
• Anonymous audience measurement with PostHog (servers in the European Union): page views, clicks, referrer (site of origin), device and browser type. Nothing is stored on your device. To count unique visitors, PostHog computes a fingerprint from the IP address and the browser, with a key renewed every day, then deletes the IP address: a visitor who comes back another day is not recognized. These statistics are only used to improve the website and are neither sold nor combined with other data. An ad blocker is enough to turn them off.
• Fonts are served by the website itself, without calling a third-party service.
• The Installation page remembers the steps you tick in your browser's local storage. This data does not leave your device; you can erase it by clearing the website's data.
• Like any host, OVH may keep technical connection logs (IP address, date, requested page).
• Links to Discord, GitHub or the Docker documentation lead to third-party services, subject to their own rules.

The ROMKADE Manager app

• It runs on your computer. The catalog, the copies of saves and the settings stay there.
• It requires a ROMKADE account (see below); the session stays remembered in the app.
• If you accept (question asked at first launch, adjustable later in Settings → About), it sends anonymous usage statistics to PostHog (servers in the European Union): screens visited, buttons used, app version and language. No game titles, no text you type, no console addresses. Refused by default.
• To work, it downloads box art from the RetroArch image bank and, if you turn them on, queries YouTube (trailers) or Anthropic (AI descriptions) with your own API keys.

Your ROMKADE account

• Data: email address, first name or nickname, language, date you accepted the terms of use, password (never stored in clear: only an encrypted hash is), two-factor authentication method if you turn it on, sign-in dates.
• Use: create and secure your account, sign you in to the Manager and to the assistants, send you verification codes and security alerts (password change, two-factor authentication). No newsletter and no advertising.
• Legal basis: performance of the terms of use you accept when creating the account.

ROMKADE Cloud and the assistants (ChatGPT, Claude…)

• If you link a console: model, firmware, name given to the console and list of the files in its games folder (names and sizes only, never the content of the games), to show your library and pass your requests (launch a game, set the volume…) to the agent installed on the console.
• If you connect an assistant: you authorize it yourself, from the ROMKADE sign-in page. The assistant receives the information needed for your requests (game titles, console state…); what you write to it is subject to its own rules (OpenAI for ChatGPT, Anthropic for Claude…). You can withdraw this authorization at any time.
• Favorites: the games starred in the Manager, sent by the console so that the assistant can find them.
• Saves: when the assistant asks for them, the names and dates of a game's saves, read on the console at that moment and passed to the assistant, without being kept by ROMKADE Cloud. The content of the saves stays on the console.
• Server usage statistics, with PostHog (servers in the European Union): tool called (“launch a game”…), duration, success or error, assistant used (ChatGPT, Claude…) and technical session identifier. Never your requests, game titles, pairing codes, console names, nor the content or identifier of conversations. They are used to fix errors and improve the service.
• Box art: downloaded by the ROMKADE server from the RetroArch image bank, without passing on your data.

Google Home

• If you link ROMKADE in the Google Home app, you authorize it yourself from the ROMKADE sign-in page (OAuth). You can unlink it at any time in the Google Home app, or disconnect it in ROMKADE Manager.
• Data shared with Google: for each linked console, its name, its type, the list of game titles you can open by voice (favorites, recently played games and known games from your library) and its state (online, game being played, volume, muted). Google uses it to understand and carry out your voice commands (“Hey Google, open Zelda on the console”).
• Data received from Google: the commands you give (open a game, set the volume, turn off) and a technical account identifier. ROMKADE carries them out on your console; the content of your voice requests never reaches ROMKADE (only the resulting command does).
• When you unlink Google Home, ROMKADE stops sending data to Google.

Processors and hosting locations

• Supabase Pte. Ltd. (Singapore): accounts and authentication; data hosted in the European Union (Paris region).
• Mailjet (Sinch group), France: sending verification and security emails, from noreply@romkade.com.
• DigitalOcean, LLC (United States): ROMKADE Cloud server (mcp.romkade.com), located in London (United Kingdom, a country recognized by the European Commission as providing adequate protection).
• OVH SAS (France): hosting of the romkade.com website.
• PostHog (servers in the European Union): audience measurement and usage statistics described above.
• Google LLC: Google Home, only if you link it (see the Google Home section).
• When a processor falls under a country outside the European Union, the transfer is governed by the safeguards provided by the GDPR (standard contractual clauses of the European Commission).

Retention periods

• Account: as long as it exists. After its deletion, your data is erased within 30 days, backups included.
• Linked consoles and the list of their files: until you remove the console or delete your account; the list is replaced at each update sent by the console.
• Technical logs of the ROMKADE Cloud server (IP addresses, requests, errors), used for security: a few weeks at most.

Your rights

You can access your data, correct it, have it erased, restrict its use, object to it and get it in a readable format (articles 15 to 21 of the GDPR), by writing to the contact address below. If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr).

Contact

contact@romkade.com