Privacy policy

Data controller

Tom Deprez (ERUDIT-FRANCE), 511 Les Jardins de Noémie, 38540 Valencin, France. Contact for any question about your data: tom.deprez38540@gmail.com.

Data we collect

Account: email address, Google or Apple identifier if you use those sign-ins, nickname, your character’s appearance, friend code.

Game: games played (participants, roles, results), experience and level, unlocked cards and items, Star history.

Social: friends list, friend requests, private messages and gifts exchanged between friends.

Payments: amount, date and reference of the transaction. Your card details are processed only by Stripe: we never have access to them.

Technical: IP address and server logs, for security and fraud prevention.

Voice: voice chat is relayed live between players through our server. It is never recorded or stored.

Guest: if you play without an account, only a nickname and a randomly drawn character are stored.

Advertising: only if you accept it, a Google Ads cookie (_gcl_au) and the ID of the ad click that brought you (gclid).

Purposes and legal bases

Providing the game, your account and your purchases (performance of the contract); securing the service and preventing cheating or fraud (legitimate interest); keeping payment accounts (legal obligation); measuring how well our Google Ads work (consent, which you can withdraw at any time). We never sell any data.

Cookies and local storage

The session cookie, strictly necessary, keeps you signed in. Your preferences (language, volumes, display, cookie choice) are saved in your browser (local storage).

With your consent only, we load the Google Ads tag (gtag.js) to know whether an ad brought a player (sign-up, game started). Without consent, nothing is loaded. You can change your mind at any time in Settings → Ad measurement.

Recipients

Your data is only accessible to the publisher and its technical processors: Hostinger International Ltd. (hosting, EU), Stripe (payment), Google or Apple (if you choose those sign-ins). Some of these providers may transfer data outside the European Union, under the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Google Ads (Google Ireland Ltd.) receives ad measurement data if you accepted it.

Retention

Account data is kept as long as the account exists, then deleted when it is deleted. Payment records are kept for 10 years (accounting obligation), no longer linked to your deleted account. Technical logs are kept for a few weeks at most.

Guest accounts left unused for 30 days are deleted automatically. The Google Ads cookie expires after 90 days.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. From the Settings page you can download all your data and delete your account in one click. For any other request: tom.deprez38540@gmail.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with your local authority.

Minors

The game is open from age 13. Depending on your country, a minor may need a parent’s consent to create an account (under 15 in France). Purchases by a minor must be made with their parents’ consent.