PlayerVox OverCrow privacy policy

This policy covers the PlayerVox OverCrow application ("OverCrow") on Linux and Windows, its widget catalog, widget ratings and reports, and the creator portal at creators.playervox.com. Your PlayerVox account itself is covered by the playervox.com privacy policy.

In short

• PlayerVox OverCrow runs on your computer. Your settings, notes and diagnostic logs stay there, and so does your session journal unless you sync it.
• By default, OverCrow sends anonymous statistics about your widgets: no identifier, no error message, nothing that links your widgets together. You can switch them off; one last message then says so, and nothing more leaves.
• Everything else leaves your computer only for a feature you use: connecting an account, publishing a rating, syncing your journal, sending a report, showing a widget that needs the network.
• To work, OverCrow also downloads its catalog and checks for updates. These requests carry no identifier.
• Creators' sources stay private. Only reviewers read them, and the creator sees every reading.

1. Who is responsible

Valhallab SASU, publisher of PlayerVox and PlayerVox OverCrow, is the data controller: a French single-shareholder simplified joint-stock company registered with the Créteil trade and companies register under number 987 488 228, 17 rue des Orvilliers, 94320 Thiais, France.

• Contact for your data: contact@valhallab.com
• Data protection officer: none, the law does not require one for our activity. Write to the address above.

2. What stays on your computer

• Your settings, selected games, widget layouts, widget data and the permissions you granted.
• Your notes, lists and session journal.
• Your sign-ins to PlayerVox and Twitch: in your desktop's keyring, or in a file only you can read. On Windows, Windows encrypts them for your user account.
• Diagnostic logs. They exclude private content and rotate: on Linux, each log keeps at most 2 MiB and 3 older files; on Windows, recent events stay in memory and are cleared when OverCrow closes.

Uninstalling a widget removes its data and the permissions you granted.

3. What PlayerVox OverCrow downloads on its own

These requests carry no identifier, no account and no cookie. The update check states the OverCrow version. Like any connection, they show your IP address: to Cloudflare, which carries overcrow.playervox.com and api.playervox.com for us, and to GitHub for updates. PlayerVox's servers do not write this address: to limit abuse, they keep only a fingerprint of it, in memory, for one day at most.

4. Anonymous statistics

They help creators see whether their widgets are used and where they fail, and help PlayerVox fix problems.

On by default. OverCrow says so at first launch. Switch them off in the Control Center: Settings → Share anonymous statistics. Switching them off sends one last message that says so (below); after it, nothing more is sent. Settings also shows the last message sent, as is.

One message per widget, once a day at most, at a random time. Each widget is sent separately, so nothing links the widgets of one player.

Error counts are rounded to 1, 5, 50 or 100, and a message holds at most 10 errors, so that a widget cannot use them to pass on information.

Never sent: an identifier of you, your computer or your installation; your account; the text of error messages; your games; your other widgets; your settings, notes or any content.

Messages of OverCrow itself. Three more messages, separate from the widgets', carry exactly this and nothing else: no widget, no day, no system, no version.

They tell us what share of players switched the statistics off, so that the installation counts shown also include those players. A small mark on your computer keeps "installed" from being sent twice.

Counting installations. OverCrow keeps a small mark per widget on your computer. "Installed" sets it. "Uninstalled" is sent only if the mark exists, and clears it. An update counts as neither. If you switch the statistics back on, OverCrow sends "installed" for the widgets present that were never counted.

On our side. The IP address of these messages is never stored: abuse limits work in memory only, on a fingerprint of the address that changes at each restart. No server or proxy log keeps it. Cloudflare, which carries the connection, sees it like any connection. Each message is added at once to daily counters per widget, version, day, system and OverCrow version, then discarded; the messages of OverCrow itself, to counters of the day they arrive. The creator sees the counters of their widgets: daily active players, active installations, and errors traced to their source files. Active installations, corrected to include the players who switched the statistics off, are also shown in OverCrow and on overcrow.playervox.com.

Legal basis: our legitimate interest in measuring the use of widgets and fixing them. These statistics serve only this measurement: they are never combined with other data and do not let anyone follow you. You can object at any time by switching them off. Since they cannot be linked to you, we cannot find or delete "yours".

5. What you choose to send

PlayerVox account

Connecting PlayerVox OverCrow to your PlayerVox account is optional. You sign in in your browser. OverCrow can then:

• show your name and avatar;
• publish a game rating or review when you click to publish it;
• show your rating of the game and reviews from other players;
• rate widgets (section 6);
• synchronize your play sessions, only if you switch synchronization on (it is off by default): game, start, end, duration, whether it was interrupted, and the text you wrote about the session. Games added by hand stay on your computer.

PlayerVox stores the authorization (permissions and dates) and only a fingerprint of its access keys. For each connected device, PlayerVox also keeps the date of last use and the country it connected from, derived from the IP address by Cloudflare. The IP address itself is not kept. You can see them at playervox.com/overcrow/devices. Disconnect in OverCrow, or on that same page. Changing or resetting your password also disconnects all your PlayerVox OverCrow devices.

Legal basis: the service you ask for by connecting your account.

Widgets that use PlayerVox or other services

• The PlayerVox score widget sends the game's Steam number to PlayerVox, every 5 minutes and through a live connection, while it is shown. With an account connected, the live connection uses your account.
• The Twitch chat widget connects with your Twitch account, after your consent, to read and send chat. Your channel and favourites stay on your computer; chat messages are not saved. Twitch's privacy policy applies to what Twitch receives.
• The Media widget loads the cover image from the address your music player gives, for example your music service's servers. Untick Show cover artwork in the widget's settings to stop it.

Widgets that use the network

Before installing a widget, you see its permissions, and you can untick them. PlayerVox's built-in widgets receive their permissions by default. A widget reaches only the exact addresses it declared, through OverCrow, which sends no cookie or password. What these servers receive falls under the creator's responsibility and privacy policy, which the publication rules make mandatory. A third-party widget that can read personal data (notes, media, journal, accounts) cannot use the network at all.

Reporting a problem

Diagnostics → Report a problem sends nothing until you have read the preview and clicked to send. The report holds:

• the description you write;
• the OverCrow version, your system, desktop and graphics card;
• the Steam numbers of the games you selected, and how many games you added by hand;
• the update status and diagnostic codes;
• your logs, only if you tick the option;
• on Windows, the Windows version and the names of installed antivirus programs;
• the widget's ID, when you report it from its page.

It contains no e-mail address and no account. PlayerVox uses it to help you and fix OverCrow. It is kept 12 months after receipt.

Legal basis: our legitimate interest in fixing OverCrow, at your request.

Reporting a widget

You can report a widget in two ways:

• in OverCrow, Report this widget, on the widget's page, opens a problem report (above) that names the widget. It holds no address: we cannot answer you;
• anyone, with or without OverCrow, can write to contact@valhallab.com. We receive your message, your e-mail address and whatever you choose to put in it, such as your name. We answer you at that address: receipt, then our decision.

We use the report to examine it. If it leads to a decision, the creator gets the reasons, never your identity, unless the law requires it. The report is kept 12 months after receipt.

The website had a report form, now removed. The reports received through it (the widget, the reason, the message and, when given, the name, the e-mail address and the statement of good faith) are kept 12 months after receipt. If you gave your address there, we still send you our decision.

Legal basis: our legal obligations to handle reports, and our legitimate interest in protecting players.

6. Widget ratings

• Rating needs a PlayerVox account with a verified e-mail, connected in OverCrow, and the widget installed.
• We store your account, the widget, your score from 0 to 100 and the dates. OverCrow tells us the widget is installed; we do not keep that statement.
• The average, its rank and the number of ratings are public, from 5 ratings; the creator also sees the spread by rank. The creator never sees who rated.
• Change or remove your rating at any time. Deleting your account deletes your ratings.
• Legal basis: the service you ask for.

The PlayerVox OverCrow terms of use say how ratings are collected and checked.

7. Creator portal

To publish widgets, we process:

• your PlayerVox account and your two-factor authentication data;
• your publisher: handle, name, description, website, logo, contact e-mail and verified domains;
• your acceptance of the creator agreement: version, date, account and publisher;
• your widgets: sources, packages, build reports, listings, release notes, permission justifications and statistics;
• the reviews: messages, remarks, decisions and appeals;
• the source access log: which reviewer read which sources, when, and for which review;
• the private source maps built from your sources, which turn error positions into files and lines;
• your publish keys: their visible prefix, a fingerprint (never the key itself), dates and last use;
• the portal notifications and the e-mails we send you;
• your account's security logs (IP address, sign-ins).

During the review, a reviewer may have your sources analyzed by Claude, Anthropic's artificial intelligence tool (section 8), unless you refused it. Every review decision is made by a person; automatic checks only refuse an invalid submission.

Public: your handle, name, description, website, logo, verified domain, arrival date, published widgets and their active installations.

Never public: your contact e-mail, members, sources, source maps, reviews, access log and keys. Only reviewers read sources, and you see every reading in the portal.

Legal basis: the creator agreement; our legitimate interest for security logs and abuse prevention.

8. Who receives data

These providers process data on our behalf:

During the review, a reviewer may send a creator's sources to Claude (Anthropic, USA), which processes them under its own terms. We switch off training when the service allows it, without being able to guarantee that Anthropic will never use them for its models. A creator can refuse (creator agreement, section 5.2).

You also contact GitHub directly, for OverCrow releases and update checks, and, if you create widgets, npm, to download the creator tools. They see your IP address and apply their own policies. When you choose to use them, Twitch, the services that your widgets call and your music player's image servers receive data under their own policies.

Transfers outside the European Union follow the same safeguards as playervox.com: the EU-US Data Privacy Framework where the provider is certified, and standard contractual clauses.

9. How long we keep data

10. Your rights

You have the right to access, correct, delete, restrict, object to and receive your data.

• Account: in your playervox.com settings (export, deletion).
• PlayerVox OverCrow: disconnect your account, switch off the statistics, remove your ratings.
• Creators: in the portal.
• Anything else: write to contact@valhallab.com.

Using OverCrow requires no data. To publish widgets, the portal's data is needed for the creator agreement. No decision about your widgets or your account is made by a machine alone, except the immediate refusal of an invalid submission (creator agreement, section 6.1).

You can also complain to the CNIL (cnil.fr) or to the data protection authority of your country.

11. Age

OverCrow needs no account. Rating widgets needs a PlayerVox account, which requires being 16 or older, or parental consent where the law requires it. Creating a publisher requires being an adult, or the acceptance of a parent or other legal guardian (creator agreement, section 2.2).

12. Changes

We date each version of this policy and announce changes in OverCrow's release notes and on overcrow.playervox.com. A change that sends new data is announced in OverCrow before it applies.