Privacy Policy

Who operates this website

APP-SOON, 61 rue de Lyon, 75012 Paris, France, operates theisle.fans and is responsible for the personal data processed for the website's accounts, community features, map tools and audience measurement. This policy applies to visitors and registered users. For questions about this policy or to exercise your rights, contact contact@app-soon.com.

Information we collect and how we use it

• Steam accounts and profiles. When you link your Steam account, we receive your Steam ID and profile information available through Steam, such as your display name, avatar and profile link. Depending on your Steam privacy settings and the information available, this may include online or in-game status, the game server you are using and your The Isle playtime. We store your selected server and creature preferences. These data support sign-in, player profiles and community features. Authentication takes place with Steam; we do not receive your Steam password.

• Visits, with your consent. We record a random visitor identifier, first and last activity times and visit times to measure visits and returns. When you sign in, these records may be associated with your account. This audience measurement does not store your IP address, browser user-agent or a list of the pages you visit. Separate infrastructure providers may process technical connection data when serving requests.

• Map coordinates. Coordinates you submit on the game map are stored with their time, input method and a session identifier or linked account. If audience measurement is accepted, map submissions may also be associated with the audience visitor identifier. These are positions inside the game, not your real-world location. We use submissions for map features, duplicate prevention and aggregated activity hotspots.

• Optional screen reading. If you enable automatic position detection, your browser requests permission to share a screen or window. The selected image area is processed in the browser to read game coordinates, the displayed server name, and death-screen indicators. This feature sends the resulting coordinates and detected server name to our service, where the name may be linked to a known game server. Detected deaths may also be stored with the last validated in-game position, its observation time, and an estimated location confidence. Screen images are not uploaded to our server.

• Groups and sessions. We store group membership, participation, game positions, labels and session activity needed for the group features you use. Positions can be visible to users who have access to the relevant session and contribute to aggregated map activity.

• Messages to us. If you contact us by email, we receive your email address and the information in your message to respond to your request.

Public player previews and more detailed profiles for signed-in users expose selected Steam profile information and game preferences according to the feature's access rules. Avoid entering personal information in public display names or group labels that you do not want others to see.

You can browse public pages without linking a Steam account. Features that require an account, group participation or submitted coordinates cannot provide their intended functionality without those inputs. Audience measurement remains optional and refusal does not block the map.

Data retention

Retention depends on the purpose of each record. There is no single statutory maximum that applies to every category of data. Identifiable personal data must not be kept indefinitely solely because storage remains available.

• Accounts and preferences: retention is assessed against the continued use of the account and the need to provide the account and community features you request. Inactivity and account-deletion requests are relevant to that assessment.

• Visit records: retention must be limited to the period needed to measure visits and returns over the analysis period being used. A persistent visitor identifier or an account link makes a record identifiable or pseudonymous; it does not make it anonymous.

• Game coordinates and session history: retention is assessed against the need to provide map, group-session and historical activity features. Identifiers must not be retained when the same purpose can be met with genuinely anonymous aggregates.

• Support and legal records: relevant information may be kept for handling the request, meeting an applicable legal obligation or establishing, exercising or defending legal claims, for the corresponding necessary period.

• Anonymous statistics: information that has been irreversibly anonymized so that individuals can no longer be identified may be retained without a fixed time limit.

The cookie lifetimes stated below describe browser storage, not automatic deletion of records already held by the service. Refusing or withdrawing audience measurement stops new audience collection; you can separately request access to or erasure of existing personal data at contact@app-soon.com. Applicable legal obligations and other lawful grounds for retention are considered when handling a request.

Recipients and external services

APP-SOON and the providers operating the website's hosting and infrastructure process data needed to run these services. The deployment configuration uses Fly.io with Paris as its primary application region; this does not establish that every provider, backup or external service processes data exclusively in France.

Steam, operated by Valve, handles Steam authentication and supplies profile information and external content. The website also loads Steam images and a Steam store widget. Requests to these services disclose connection information such as your IP address and browser information. Valve's processing is described in Steam's privacy policy.

The map loads the Tesseract text-recognition library from jsDelivr and may download recognition resources when you enable screen reading. These content delivery services receive technical connection information. See jsDelivr's privacy policy.

The audience-measurement choice described below controls our own visitor tracking. It does not constitute consent to optional tracking by external services or advertising partners. Adsterra is described in the advertising section.

Where providers process personal data on our behalf, applicable data-processing requirements apply. Other providers may act as independent controllers under their own policies. External services may process data outside the European Economic Area; their privacy notices describe the applicable locations and safeguards.

Early-access studies and waiting lists

When you request a server, we record your selected capacity, monthly price, region, language, date and the order of distinct configurations you request to assess demand. A functional session groups your choices and prevents repeated clicks on the same configuration from creating multiple entries. This request is independent of optional audience measurement and does not reserve a server or take payment. You may optionally provide your email and request a notification when hosting becomes available. We use that email only for this notification. Contact contact@app-soon.com to withdraw your request or ask for deletion.

User rights and choices

At APP-SOON, we recognize and respect your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:

Your rights

• Right of access (Art. 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.

• Right to rectification (Art. 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.

• Right to erasure ('right to be forgotten') (Art. 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.

• Right to data portability (Art. 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.

• Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.

• Right to withdraw consent (Art. 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws, including the CNIL in France.

Exercising your rights

To exercise any of these rights, please contact us at contact@app-soon.com. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

Advertising and Adsterra

APP-SOON has selected Adsterra as an advertising partner to fund theisle.fans. Our aim is to keep advertisements available, including when you refuse optional audience measurement. Refusing audience measurement does not itself disable advertisements.

We favor contextual advertising without advertising cookies or similar tracking technologies. Where an advertising format uses non-essential trackers, those trackers require prior consent where applicable, including in the European Economic Area and the United Kingdom. Accepting this website's audience measurement cookie is not consent to advertising tracking.

Technical information and external partners

External advertising requests can disclose your IP address, browser information and information about the page displaying the ad even without cookies. Depending on the format, advertising may also involve identifiers, impressions and clicks used for delivery, measurement or personalization. The data, recipients and legal basis depend on the integration actually used.

Adsterra's privacy policy identifies AD MARKET LIMITED (Cyprus) and ADMEDIA LLC FZ (United Arab Emirates) as its service providers. See Adsterra's privacy policy for its processing practices, retention criteria, international transfers and contact details. Its cookie policy concerns its own website and is not an inventory of cookies used on theisle.fans.

Adsterra describes possible processing outside the European Economic Area and safeguards including adequacy decisions and European Commission-approved contractual terms, where applicable. You can request information about the safeguards and retention relevant to its processing using the contact details in its policy.

No Adsterra advertising code is currently integrated on theisle.fans. Details of the actual advertising integration will be provided when it is introduced. For questions or data protection requests, contact contact@app-soon.com.

Cookies and local storage

Cookies and browser storage can support website functions independently of advertising. The absence of advertising cookies does not mean this website uses no cookies.

• The session cookie THEISLE_FAN supports sign-in and session-based map functionality. Its configured lifetime is 30 days and it is renewed during session use.

• With your consent, our first-party cookie THEISLE_VISITOR identifies visits and returns to the website, with a lifetime of 90 days renewed during activity. Visit records include first and last activity times and may be linked to your account when signed in. This processing is performed by APP-SOON for audience measurement, independently of advertising.

• Local storage is used for map preferences and the website's activity-tracking preference.

The banner lets you accept or refuse audience measurement. Without acceptance, this tracking remains disabled. The preference cookie THEISLE_CONSENT stores your choice, its version and date for 180 days; it contains no visitor identifier. A local-storage signal synchronizes changes between open tabs. Use “Manage cookies” in the footer to change or withdraw your choice at any time. Withdrawal stops future audience tracking and requests removal of the visitor cookie; it does not automatically erase existing records. Contact us to request erasure.

Map coordinate submissions use a separate functional session for duplicate prevention and may be linked to your signed-in account. Refusing audience measurement prevents linking new submissions to the audience visitor identifier; it does not disable map submissions.

Browser settings let you inspect, block or delete cookies and local storage. Blocking storage may affect sign-in and saved preferences. These browser controls do not replace prior consent for any storage or access that requires it under applicable law.

Compliance with United States privacy laws

To appeal a decision we may make regarding your request, please contact us within 60 days of receiving our response by contacting us:
Email: contact@app-soon.com.

For residents of the United States of America the following provisions apply:

A. Individual rights

The California Consumer Privacy Act provides residents of California specific rights regarding their personal information, additional to what has been described before.

B. Right to Know

You may request that we disclose to you what personal information we have collected, used, shared, or sold about you, and why we collected, used, shared, or sold that information. Specifically, you may request the disclosure of:

• The categories of personal information collected

• Specific pieces of personal information collected

• The categories of sources from which we collected personal information

• The purposes for which personal information is used

• The categories of third parties with whom personal information is shared

• The categories of information that are sold or disclosed to third parties

C. Right to Delete

You may request that we delete personal information we have collected about you.

D. Right to Correct

You may ask us to correct inaccurate information that we have about you.

E. Right to Limit

You can request us to only use your sensitive personal information (for example, your social security number, your genetic data, etc.) for limited purposes, such as providing you with the services you requested.

F. Right to Opt-Out

If advertising disclosures constitute a sale or sharing of personal information, or targeted advertising, under applicable US state laws, you may exercise the corresponding opt-out rights. Contact contact@app-soon.com to exercise that right.

G. Right to Non-Discrimination

You have the right to be protected from discrimination for exercising your rights.

H. Submitting requests

You may submit your request by sending an email to contact@app-soon.com. We will compare the information you submit to us with the information we have in our records to verify your request. We will then respond to your request in accordance with the requirements.

J. Sensitive data and/or biometric data

The account and map features described above do not ask for biometric, health or other sensitive personal information. Please do not include this information in public profile labels or messages unless it is necessary for your request.