Privacy Policy

The person identified below is the controller for processing performed by What Plays Next ?. The non-professional publisher’s home address and phone number are not made public under the French LCEN exception.

Controller

Maxence Lepeuve

Privacy contact

contact@whatplaysnext.com

The website has no accounts, advertising or audience analytics.

• Website preferences

  user_lang, user_timezone and user_timezone_auto are stored in a cookie and local storage for 12 months. jv-preferred-platforms remains in local storage until reset. Permission to enable YouTube or Twitch is kept for no more than 6 months. These values only apply your choices.

• Server logs

  Vercel may process the IP address, user agent, date, requested route and diagnostic information to provide, secure and troubleshoot the service. Hobby Runtime Logs are retained for 1 hour according to Vercel documentation. The publisher relies on its legitimate interest in securing and maintaining the website.

• Abuse prevention

  The local limiter transforms the IP address into a non-reversible HMAC identifier before use. No raw IP is kept in its memory table. Counters expire after 1 minute for standard APIs or 15 minutes for feedback, then are purged during the next check or when the instance stops.

• Feedback form and email messages

  The required category and message, and the optional email address, pass through Vercel before being sent to the publisher’s OVHcloud mailbox. They are used to process feedback and reply on the basis of the publisher’s legitimate interest. They are not stored in the website database and are deleted from the mailbox no later than 12 months after the last exchange unless required by law or a dispute.

Three functional cookies save the language, time zone and automatic detection mode for 12 months. They contain no account or advertising identifier. YouTube and Twitch permissions are stored locally for no more than 6 months.

Functional cookies only apply your choices. YouTube and Twitch players remain blocked until you explicitly activate them in the media area. Permission can be withdrawn at any time in Settings.

When your browser contacts a third-party provider, it may receive your IP address, technical headers and, depending on your session with that provider, other information. Its own terms apply.

• Vercel Hobby: hosting and SSR execution may process requests and technical data in the United States. Vercel’s public DPA covers Pro and Enterprise plans and is not represented here as applying to Hobby.
• YouTube and Twitch: no player is contacted before your explicit activation. A preview is loaded through the website server. Once enabled, the existing player appears and the provider may process technical data or use its own trackers. Permission expires after 6 months and can be withdrawn in Settings.
• Google Calendar, Microsoft Outlook and Yahoo Calendar: these services are contacted only when you choose an add or subscription action. Event details are then included in the transmitted URL.
• IGDB/Twitch API: data requests are made by the What Plays Next ? server. They do not directly send your local preferences to IGDB.
• OVHcloud Mail: messages submitted through the form are sent over an encrypted SMTP connection to the website contact mailbox.

Information may be accessed by the publisher, Vercel for hosting and OVHcloud for email. Vercel, YouTube and Twitch may process data in the United States. Vercel states that it is certified under the EU-US Data Privacy Framework. YouTube and Twitch are contacted by your browser only after permission. What Plays Next ? does not sell personal data.

Where the GDPR applies, you may request access, rectification, erasure, restriction or objection, and data portability where its conditions are met. You may also lodge a complaint with the French data protection authority, the CNIL. Reasonable identity verification may be requested where necessary.

This page will be updated if the website changes. The French version is authoritative. Other languages are translations.