Privacy policy

Data controller: AL Company, 160 rue Oberkampf, 75011 Paris. For any question about your data: [email protected].

What stays on your device

Your records, statistics, language, wallpaper, sound settings, drawings (Drawing program) and blog (My blog program) are stored only on your device (the browser’s or the app’s local storage). They are not sent to us. You can erase them from the High scores window, by clearing the site’s data in your browser or by uninstalling the app. This storage only makes the features you use work, so it does not require consent.

What we don’t do

No advertising, no selling of data, no profiling, no audience measurement cookies. If this changes, your consent will be asked for beforehand.

Hosting

When you open the site or the app connects to our servers, our hosting provider (Cloudflare, Inc. (Cloudflare Pages)) logs technical connection data (IP address, date, requested page or file) to keep the service secure. Legal basis: our legitimate interest in protecting the service and our legal obligations. Retention: 12 months at most. As Cloudflare is a US company, this data may be processed in the United States; the transfer is covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

Without an account: no third-party services

Fonts, images and sounds are included in the app or served by our hosting provider: as long as you don’t create an account or play online, no data is sent to any third-party service while you play.

Online games

If you play online with a friend (Tic-tac-toe, Four in a Row, Reversi, Checkers, Chess, Sea Battle, Letterama, Yam’s), your moves, a random identifier created for the game and, if you have an account, your username are sent to your friend through Supabase’s realtime service, along with the game code. These messages are not stored: they are only relayed during the game. No account is needed. Purpose: running the game you asked for. Legal basis: performance of the terms of use. Only share a game’s code or link with the person you want to play with.

Player account

If you choose to sign in:

Sign-in. You identify yourself with Google or Apple, who send us your email address (Apple lets you hide it behind a relay address) and a technical identifier. Google and Apple process this sign-in under their own privacy policies. We never receive your password or any other data from your Google or Apple account.

Data kept: email address, sign-in provider used, technical identifier, username, high scores, statistics, trophies and daily challenge results, account creation and last sign-in dates. A session token is stored on your device to keep you signed in; it is strictly necessary and does not require consent.

Purposes: managing your account and syncing your high scores across your devices. Legal basis: performance of the terms of use.

Retention: until you delete your account, which you can do at any time from the Player account window: it is then erased immediately along with all its online data. An account with no sign-in for 3 years is deleted automatically.

Public leaderboards: only if you turn on the option in the Player account window. Your username and best scores are then visible to everyone, with no other data; you can turn the option off at any time. If you report a username, we keep the reported username, the reason and your account identifier for one year, for moderation.

Friends: you can send a friend request to a player using their username; they see it in their Player account window and can accept or decline it (you are not told if they decline). Once you are friends, each of you sees the other’s username in their list and, if the other has turned on the public leaderboards, their scores and world rank. You can remove a friend or cancel a request at any time; unanswered requests are deleted after 3 months, and your friendships are deleted along with your account. Data: requests sent and received, the list of your friends. Purpose: showing leaderboards among friends. Legal basis: performance of the terms of use.

Account hosting: Supabase (Supabase Inc.), a processor, on servers located in the European Union. As Supabase Inc. is a US company, access from the United States remains possible for technical support; it is covered by the European Commission’s standard contractual clauses.

Purchases

Applies once purchases are offered. Data: order ID, content purchased, amount, date. Legal basis: performance of the contract and our accounting obligations. Retention: 10 years for accounting records. Payment data is processed directly by the payment provider or app store.

Recipients

Your data is only accessible to AL Company and its technical subcontractors (hosting provider, Supabase for accounts and online games and, when applicable, a payment provider), who are bound by confidentiality. It is never sold.

Your rights

You can access, correct, erase or export your data, object to or restrict its processing, and set instructions for what happens to it after your death, by writing to [email protected]. We reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Minors

Users under 15 can only create an account with the consent of a parent or guardian.