Terms of service

1. Who we are

The service is operated by Viktor Tsykunov ("we", "us"). By using the service you agree to these terms. If you do not agree, please do not use it. How we handle personal data is described in the privacy policy.

2. Who may use the service

• Players take part in a game run by a facilitator. You need the game code and the name the facilitator put on the list.
• Facilitators sign in with a Microsoft account and create and run games. You must be old enough to enter into a contract where you live, and in any case at least 16 years old. If you use the service for an employer or another organisation, you confirm that you may do so for it.
• The service is meant for professional team activities with adults. Do not run games with children.

3. Provided as is: no support, no warranty

• The service is free of charge and is provided "as is" and "as available".
• No warranty. We make no promises about availability, accuracy, fitness for a particular purpose or that it is free of errors, and we give no service level.
• No support. We do not promise to answer questions, fix problems or make changes. You are welcome to report problems and suggest ideas (see section 8), but there is no right to a reply or to a deadline.
• No guarantee that data is kept. Games close after their expiry date and are deleted automatically 30 days later, and the service could lose data. Export the results you want to keep (as images) and do not store anything here that you cannot afford to lose.
• Some countries give consumers rights that cannot be excluded. Nothing in these terms limits such rights.

4. Facilitator accounts

Facilitators sign in with a personal or work Microsoft account. We do not see your password. You are responsible for what happens under your sign-in, so keep your Microsoft account secure. Each facilitator can only see and change the games they created. You can stop using the service at any time by deleting your games.

5. Facilitator responsibilities

When you run a game you decide whose names are put into it. You therefore agree that:

• you are allowed to use these names for a team activity and have a valid legal basis under data protection law (for example legitimate interests, or consent);
• you will tell participants that their names and connections are processed by the service and point them to the privacy policy;
• you will not enter special categories of personal data (health, religion, political opinions and similar), data of children, or secrets of any kind;
• you will respond to questions and requests from participants about their data in your game, and delete data when it is no longer needed;
• you stay within the limits: up to 200 participants, 200 topics and 50 games per facilitator.

6. Acceptable use

You agree not to:

• enter or post anything unlawful, offensive, discriminatory, harassing or misleading, or anything that violates other people's rights;
• use the service to collect data about people for other purposes, to monitor or evaluate them, or to profile them;
• try to access games, accounts or data that are not yours, guess game codes, or work around the limits or security of the service;
• send automated or excessive requests, scrape the service, or do anything that could overload, damage or disrupt it (load testing needs our written permission);
• reverse engineer or attack the hosted service. Reviewing and running the open-source code on your own systems is welcome (section 8).

We may remove content, close games or block access if these rules are broken or to protect the service, without notice where necessary.

7. Content and intellectual property

Names, topics and other content you enter remain yours (or your organisation's). You give us only the permission needed to store, display and process it to run the service for you, as described in these terms and the privacy policy. The name, logo and design of the service are ours, except for the software itself, which is available under the licence described in section 8.

8. Open source and feedback

• The software is open source under the MIT License. That licence, not these terms, governs what you may do with the code. It includes its own disclaimer of warranty. The licence covers the code only: it gives no right to use, access or copy the data stored in the hosted service. Open source, repository coming soon.
• Feedback (bug reports, ideas, complaints) is welcome as a GitHub issue: open an issue. Issues are public, so do not include personal data or security vulnerabilities. For security problems and privacy requests, write to us by email (see section 14).
• If you contribute code or text, you agree that it is released under the same licence as the project.

9. Data processing terms

If you are a facilitator, you are the controller of the personal data of the participants in your games and we are your processor (Article 28 GDPR). This section is the data processing agreement between you and us.

1. Subject matter and duration. Storing and displaying the participant names, topics and connections of your games so that you can run them. It lasts until the game is deleted (by you, or automatically 30 days after it expired).
2. Types of data and people. Names, topics and connections (who connected with whom, on what topic, when) of the people on your participant list, typically employees or team members.
3. Instructions. We process this data only to provide the service and on your documented instructions, which are your use of the features of the service. We will tell you if we think an instruction breaks data protection law.
4. Confidentiality. People who have access to the data on our side are bound to confidentiality.
5. Security. We apply the measures described in section 8 of the privacy policy.
6. Sub-processors. You agree that we use Microsoft Corporation and its affiliates (Azure hosting) in the region East US 2 (United States). We will update this page before we add or replace a sub-processor. Microsoft's own data protection terms, including international transfer safeguards, apply to its services.
7. Help with rights and obligations. We help you, as far as reasonable, to answer requests from participants (access, correction, erasure and others) and with your security, breach-notification and impact-assessment duties. The service lets you correct and delete data yourself.
8. Personal data breaches. We inform you without undue delay after we become aware of a breach that affects your games.
9. Deletion. When a game is deleted, its data is removed permanently. We keep no other copies.
10. Proof of compliance. We give you the information needed to show that these duties are met (this page and the privacy policy). Because the service is free and shared, audits on site are not possible.

10. Availability, changes and termination

We may change, limit, suspend or end the service, or any feature, at any time, with or without notice, and we may close accounts or games that break these terms. If the service ends, we will try to give notice on the start page but we do not promise to. You may stop using the service at any time.

11. Liability

• We are not liable for indirect or consequential damage, loss of profit, loss of data or damage that you could have avoided, for example by exporting results.
• Because the service is free of charge, we are liable only for intent and gross negligence, and for injury to life, body or health, and as far as liability cannot be limited by law (including mandatory consumer protection and data protection law).
• You are responsible for the content you add and for how you use the results.

12. Changes to these terms

We may change these terms, for example when the service changes. The date at the top shows the latest version. If you keep using the service after a change, you accept the new terms. We will point out important changes on the start page.

13. Governing law

These terms are governed by the law of the Czech Republic, excluding rules that would lead to another country's law. If you are a consumer, you also keep the protection of the mandatory rules of the country where you live, and you may bring a claim in the courts there.

14. Contact

Viktor Tsykunov, email game@connect-the-dots.top. Send privacy requests and security reports by email, not as public issues.