TableNight/Privacy & cookies
Last updated: 22 August 2026
Privacy & cookies
This page explains what data TableNight collects, why, how long it is kept and how to have it deleted. It is written to be read, not skipped.
1. Who handles your data
The data controller is Domenico Catalano, VAT no. 02965540814, based in Castelvetrano, Italy.
For anything concerning your data, write to hello@tablenight.app. I answer personally — there's no department.
2. What this site collects
TableNight is a static site. There's no account, no login, no user database. Only four categories of personal data come into play.
| Data | When | Legal basis | Retention |
|---|---|---|---|
| Message, game, report type, language | Only if you fill in the contact form | Legitimate interest in receiving reports and improving the service (Art. 6(1)(f) GDPR) | 24 months, then deleted |
| Email address | Only if you type it in the optional field | Legitimate interest in replying to you (Art. 6(1)(f) GDPR) | Deleted after the reply, 6 months at most |
| IP address, user agent, requested page | On every visit, in server logs | Legitimate interest in security and operation (Art. 6(1)(f) GDPR) | Held in the host's technical logs, typically 30 days |
| Advertising identifiers in cookies | Only if you accept in the cookie message | Consent (Art. 6(1)(a) GDPR) | As declared by Google, revocable at any time |
I don't collect special category data (health, opinions, orientation) and I ask you not to put any in the form. I don't profile users on my own account and I don't sell data to anyone.
3. The contact form
Messages sent through the form come to me and stay private: they're never published on the site, never shown as reviews, never displayed anywhere public.
Technically the form is handled by a Google Apps Script: the message is saved to a Google Sheet in my account and a copy is emailed to me. The provider is Google (Google Ireland Limited), acting as a data processor. Data may also be processed on servers in the United States, on the basis of the European Commission's Standard Contractual Clauses.
The email field is optional: leave it blank and the message stays anonymous — I simply won't be able to reply. If you do fill it in, I use it only to answer that message. No newsletter, no mailing list, no follow-up about anything else.
4. Cookies and advertising
The site is paid for by Google AdSense advertising (Google Ireland Limited). To serve ads, Google may place cookies and similar identifiers on your device, including for personalisation and measurement. Ads appear on the pages of this site; there are no ads inside the games.
These cookies are not set before you consent. On your first visit you'll see a message letting you accept, reject, or choose in detail. If you reject, the ads stay but are non-personalised, and the site works exactly the same.
You can change your mind whenever you like: reopen the preferences from the cookie message, or clear cookies in your browser. You can also manage ad settings directly at myadcenter.google.com.
Beyond that, the site stores two technical entries in your browser: tn_lang, remembering whether you prefer Italian or English, and tn_altro, remembering that you have already dismissed the suggestion to read the site in the other language. They aren't cookies, they don't identify you and they never leave your device, so they don't require consent.
5. The games live elsewhere
When you open a game room you leave this site and are taken to an application hosted on Render (Render Services Inc., United States), at a different address.
Inside the games you join with a name of your choosing and a room code: no account required. The name you type and any chat messages stay in memory for the length of the game and disappear when the room closes. Nothing is stored permanently and there is no match history.
One practical note: the name you pick is visible to the other players. If you'd rather not be identifiable, use a nickname.
The pages of this site also send a technical request to the game servers to wake them in advance: it only reduces the wait when you open a room and transmits nothing about you.
6. Hosting
Pages are served by Netlify, which like any web server records technical connection data (IP address, browser type, requested page, timestamp). It keeps the site running, protects it from abuse and shows when something breaks. I don't cross-reference it with anything else to identify you.
7. Who it's shared with
No data is sold or handed over. Only the providers that make the service possible have access, each within its own scope:
- Netlify Inc. — site hosting
- Google Ireland Ltd. — AdSense advertising, consent collection and contact form handling (Apps Script, Google Sheets, Gmail)
- Render Services Inc. — hosting of the game applications
- Porkbun LLC — domain registration and email forwarding
Some of these providers are based in the United States. Transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, on Data Privacy Framework certification.
8. Your rights
At any time you can ask me to access your data, correct it, delete it, restrict its processing, receive it in a readable format, or object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it without affecting the lawfulness of what came before.
Write to hello@tablenight.app. I reply within a month, usually much sooner. You don't need to justify the request.
If you think something isn't right, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority in your own country.
9. Children
The site isn't aimed at children under 14 and I don't knowingly collect their data. If you're a parent and believe your child wrote to me leaving personal details, contact me and I'll delete everything straight away.
10. Changes
If I add games or tools that change how data is handled, I'll update this page and change the date at the top. Earlier versions aren't kept: the published one is the one that applies.