This page covers dart-room.com itself — accounts, rooms, online matches and voice. What your trainer rig uploads (throws, calibration, health) has its own notice, including the legal basis and your rights: statistics & your data.
A private, non-commercial hobby and research project operated by z3n. Contact for anything data-related, including every request listed below: z3nlabs@proton.me. The operator's full identity is disclosed on request via that address.
| data | why | kept |
|---|---|---|
| Account — a Nostr public key (npub). No email, no name, no password. | so your boards and rooms are yours across devices | until you ask |
Session — one random id in an HttpOnly cookie (dr_session) |
keeps you signed in | 14 days idle, 21 days max |
| Passkey — a WebAuthn public key, only if you add one | sign in without the seed words | until you remove it |
| Rooms — name, join tokens, members' chosen display names | that is what a room is | deleted after a period without activity |
| Boards — the board id and name you pair | so dart-room can seat your board in a match | until you unpair |
| Matches — every throw, score and correction of an online match | scoring, the recap, and leaderboards; visible to everyone in the match | until the match or room is deleted |
| Custom sounds — audio files you upload to a room | your caller | with the room |
| Rate-limit counters — per IP address | stops scripts filling the database with rooms or login attempts | about an hour |
| Web-server logs — IP address, URL, browser string | abuse and fault diagnosis (legitimate interest) | days, then rotated |
Voice runs over LiveKit and is relayed in real time between the people in the room. It is not recorded and nothing of it is stored.
There is exactly one persistent cookie, the session cookie above, set only when you sign in. A second short-lived cookie exists during sign-in to bind the challenge to your browser. Neither is used for tracking, which is why there is no cookie banner. Page views are counted with a self-hosted Plausible instance: cookieless, no cross-site tracking, no personal data, and it is left out entirely on the account page and on live match and lobby screens.
Nothing is sold or shared. The site runs on Oracle Cloud in Frankfurt, Germany; uploaded trainer data and match evidence are stored in a Hetzner object-storage bucket in Falkenstein, Germany. Nothing leaves the EU. No advertising networks, no social plugins.
Access, correction, erasure, and objection — at any time, by one email to z3nlabs@proton.me. There is no self-service delete yet: ask by email and the npub, sessions, passkeys and board pairings are removed, together with the rooms and matches you own. Because your identity is a key you hold, there is no account recovery — a lost seed is a lost account.
Last changed 2026-09-13.