Privacy Policy

Trombingo ("we", "us", "the app") is a game that helps teammates learn each other's faces and names using the profile photos in their Slack workspace. This policy explains what data we process, why, and your rights. It is operated by the Trombingo team.

Information we process

• Sign-in identity (via "Sign in with Slack"). When you log in, Slack shares your Slack user ID, display name, email address, profile photo, and your workspace's ID and name.
• Workspace installation. When Trombingo is added to a workspace, we store the workspace ID and name, the installing user's ID, and a Slack access token used to read the member list. The token is encrypted at rest.
• Gameplay. We store your game scores, number of correct answers, and related timestamps to power the leaderboard.
• Teammate roster (quiz content). The names and photos of other workspace members shown as answer options are requested from Slack in real time during a game and displayed to you. They are not saved to our database.

How we use it

• Authenticate you and keep you signed in.
• Run games and maintain a leaderboard for each workspace.
• Recognize you across multiple workspaces you belong to, using your email address.
• Operate, secure, and troubleshoot the service.

We do not use your data for advertising, and we do not sell it.

Legal bases (GDPR)

We process this data to provide the service you request (performance of a contract) and based on our legitimate interest in operating and securing the app.

Where your data is stored

The app is hosted in the European Union (application on Fly.io in Paris; database on Neon). All traffic is served over HTTPS, and Slack access tokens are encrypted at rest.

Sharing and sub-processors

We share data only with the infrastructure providers needed to run Trombingo — Fly.io (hosting) and Neon (database) — and with Slack's API to authenticate you and read your workspace roster. We do not share your data with any other third parties.

Retention and deletion

We keep your account and leaderboard data while you use the app. When a workspace owner or admin uninstalls Trombingo from Slack, we are notified automatically and immediately delete that workspace's data — its players, scores, games, and the encrypted access token. You can also ask us to delete your data at any time by emailing contact@trombingo.com.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. To exercise these rights, contact us at contact@trombingo.com. If you are in the EU, you may also lodge a complaint with your local data protection authority (in France, the CNIL).

Cookies

We use a single essential cookie to keep you signed in. We do not use tracking or advertising cookies.

Children

Trombingo is intended for use by members of a workplace Slack and is not directed to children under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above.

Contact

Questions about this policy or your data? Email contact@trombingo.com.