Privacy & legal
16 questions
-
Ensuring security and data protection is of paramount importance, both for our users and ourselves.
Each feature in development undergoes a rigorous assessment to align with the comprehensive GDPR Compliance Checklist. We uphold a strict policy of refraining from storing any extraneous data, thus guaranteeing the utmost safeguarding of your privacy.
For more detailed insights, please refer to the dedicated Privacy Policy section.
-
If you have any concerns regarding privacy in WorkAdventure, please visit our Privacy Policy.
If you have any kind of request regarding privacy in WorkAdventure, please contact us. -
WorkAdventure may use cookies, web beacons, tracking pixels, and other tracking technologies when you visit our website. This could also include any other media form, media channel, mobile website, or mobile application related or connected to help customize the website and improve your experience.
If you have any concern regarding our Cookie Policy, please visit the documentation.
If you have any request regarding our Cookie Policy, please contact us.
-
This behavior is usually related to the Apple ecosystem. When an iPhone is close to the Mac and recognized as an available device, it may appear in Chrome as a usable audio source. The browser may then select it automatically, even if it is not the desired device.
In this case, you should check both Chrome settings and Mac settings. You can also choose to set your default microphone directly in WorkAdventure. It will be activated whenever available for each of your sessions. To do this, go to the microphone settings, click the chevron, and set your default microphone.
-
No. Audio and video streams in WorkAdventure are relayed in real time between participants and are never written to disk by WorkAdventure. When the conversation ends, nothing remains on our servers.
The only exception is an explicit recording: when a participant starts a recording in a meeting, the resulting file is stored by WorkAdventure. The user who started the recording can view it, download it and delete it at any time. Every participant is notified when a recording starts. A recording is kept for at most 90 days, or until the user deletes it, whichever comes first.
Video quality statistics (for instance connection quality and packet loss) are collected to help us diagnose issues; they contain no media and are kept for three months.
-
Yes, and without asking us.
- Members and visitors: the list can be exported in CSV or Excel format directly from the dashboard.
- Chat messages: WorkAdventure’s chat is built on the open Matrix protocol. Each user can connect a standard Matrix client such as Element to their WorkAdventure account and export their conversations from there.
- Maps and assets: your maps are plain files (Tiled maps, images, scripts) that you upload, so you already hold the source.
If you need an export in another form, contact us.
-
Yes, on paid plans. WorkAdventure commits to a Service availability of at least 99.9% measured over each calendar month. The commitment is part of our terms of use — there is no separate contract to sign.
Two things are excluded from the measurement: scheduled maintenance, and events beyond our reasonable control — in particular your own network, third-party infrastructure and force majeure.
Scheduled maintenance is announced four (4) calendar days in advance. We keep it outside business hours (9 a.m. to 6 p.m. Paris time) as far as possible, and it never exceeds four consecutive hours during business days and hours. Routine backups and updates do not interrupt the service at all.
You can check availability yourself, at any time, on our live status page.
The Free plan is provided without any availability commitment or service level. It is the same platform, but we give no guarantee as to its availability or continuity, and we may suspend or change it at any time.
-
Thank you for looking. Please report vulnerabilities privately, so that we can fix them before they are disclosed.
Send the details by e-mail to [email protected]. You may also ping us in a GitHub issue to say that you have sent a report, but please put no details in the issue: anything posted there is public.
We assess every report as soon as possible, on a best-effort basis, and give you an estimate of when a fix and a release will be available, ahead of any public disclosure. Security patches are applied to the latest tagged release (which is what runs on play.workadventu.re) and to the
masterbranch; we do not patch past releases. We do not run a bug bounty program.The full policy is in the SECURITY.md file of the WorkAdventure repository.
-
WorkAdventure backs up its database every day. Backups are kept for 30 days in a bucket encrypted at rest, hosted with a different provider than the database itself, so that an incident at one provider cannot take both the data and its backup.
Backups are only useful if they restore. Our CI/CD pipeline restores the latest backup on every deployment, automatically, so a broken backup is detected within a working day rather than on the day we need it.
Files uploaded to the map storage (maps, images) are stored in redundant object storage at the hosting provider. Since you own your maps, we also recommend keeping your map sources in your own version control, as most of our customers do.
-
WorkAdventure is a multi-tenant platform. Each customer’s data belongs to a world, and separation is enforced at two levels.
In the database, every table holding world data carries a world identifier, and the filter on that identifier is applied automatically by the data access layer rather than by each individual query. A query cannot forget to scope itself to your world.
Files (maps, uploaded assets, recordings) are stored in separate object storage buckets, each accessed through its own domain name, so a file from one world is never served under another world’s address.
If logical separation is not enough for your context, WorkAdventure can also be self-hosted on infrastructure that is entirely yours.
-
World data (members, visitors, configuration, uploaded files) is kept for as long as it is needed to provide the service. When a paid subscription ends, the world is not deleted: it falls back to the free plan, so that you do not lose your data by letting a subscription lapse.
Deleting a world is self-service. A world administrator can delete the world at any time from the dashboard, and this permanently deletes all the data attached to it. If you want your data removed at the end of a contract, this is the way to do it, and no request to our support is needed.
Individual users can update their personal data at any time from their profile screen, and world administrators can remove a member from their world.
Logs are deleted automatically at the end of their retention period, between one week and one year depending on the log (see What does WorkAdventure log?). The retention periods for every category of data are stated in our privacy policy.
-
In transit, every connection to WorkAdventure is encrypted. Web traffic uses HTTPS with HSTS. Audio and video use WebRTC, which encrypts media with DTLS and SRTP, whether the stream goes peer-to-peer or through our media servers.
Chat messages can additionally be end-to-end encrypted. WorkAdventure’s chat is built on the Matrix protocol and supports its end-to-end encryption, so that encrypted messages are readable only on the participants’ devices and by no one else (including WorkAdventure’s administrators).
At rest, stored files are encrypted with AES-256 server-side encryption, using keys managed by the hosting provider (OVHcloud or AWS, depending on where the file lives). Database backups are stored in an encrypted bucket at a different hosting provider than the database itself.
The full list of measures is in the security section of our privacy policy.
-
WorkAdventure does not hold an ISO 27001 or SOC 2 certification itself. We are a small company, and we have chosen to invest in the measures rather than in the audit of them.
All of our hosting providers do hold these certifications. OVHcloud, which hosts the platform and all stored data, is ISO 27001 and ISO 27017 certified and SOC 1/2/3 audited. Livekit Cloud, which relays some real-time traffic through SFU servers, is SOC 2 type II certified. The certificates are linked from our sub-processors page.
The technical and organisational measures WorkAdventure applies on top of that infrastructure are described in the security section of our privacy policy.
-
WorkAdventure keeps two kinds of logs.
- Technical logs (server and infrastructure logs) are kept between one week and three months, depending on their nature. Those logs are centralised in a logging platform hosted outside the production cluster (OVHcloud Logs Data Platform). Once written, a log entry cannot be modified or deleted by anyone at WorkAdventure, which is what makes it usable as an audit trail. Read access is limited to the infrastructure team. Logs are deleted automatically at the end of their retention period.
- Application logs (access logs, activity logs) are kept between three months and one year: three months for video quality statistics, one year for access logs.
-
The WorkAdventure platform and all the data it stores for regular operation (user accounts, list of members, world configuration, analytics) are hosted by OVHcloud in the Gravelines data center, France. Files you upload through the map storage (maps, images, recordings) are stored in object storage buckets, either at OVHcloud or at AWS in Ireland, depending on the type of file.
Audio and video are relayed in real time and are never written to disk, unless a user explicitly starts a recording (see Are calls recorded?). Depending on the world, the streams go through either a LiveKit server that WorkAdventure operates at Hetzner in Falkenstein, Germany, or through LiveKit Cloud. Peer-to-peer connections are relayed, when needed, by our TURN servers at AWS in Ireland.
The complete and current list of our hosting providers and sub-processors, with the certifications each one holds, is on our sub-processors page. If your requirements exclude any hosting by WorkAdventure, the platform can also be self-hosted entirely on your own infrastructure.
-
Access to production systems is limited to the engineers who operate the platform. There are no shared accounts: every engineer connects with a personal account, using either a personal private key or a login and password with multi-factor authentication.
Some data is out of reach even for them. Audio and video are relayed in real time and never stored, and chat messages can be end-to-end encrypted with the Matrix protocol, in which case they are readable only on the participants’ devices: no one at WorkAdventure, with or without production access, can read them (see Is my data encrypted?).
Every employee and contractor is bound by a confidentiality clause in their contract, and is made aware of data protection obligations when they join. When someone leaves, their credentials are removed following a documented leaver checklist.
Data protection at WorkAdventure is owned by David Négrier, CTO and co-founder, who is your point of contact for any privacy or security question. You can reach him through our contact page.
No results.