Legal Information — Privacy Policy

Data Controller

Fabrica Digitalis — contact@fabricadigitalis.fr

Data Collected

• Email, username — Account creation and management (Performance of contract)
• Password (hashed) — Secure authentication (Performance of contract)
• Game data (progress, inventory, statistics) — Save and leaderboard (Performance of contract)
• Advertising cookies (Google AdSense) — Ad display (Consent)

Data Retention Period

• Account data: until account deletion by the user or 2 years of inactivity.
• Advertising cookies: 13 months maximum (renewed with consent).

Cookies

Functional cookies (always active):

• token / refreshToken — JWT authentication (duration: session / 7 days)
• cookie_consent — Remembers your cookie preference
• localStorage — Local save of the current game

Advertising cookies (subject to consent):

• Google AdSense — Personalized ads. Google's policy: policies.google.com/privacy

Your Rights (GDPR)

In accordance with the General Data Protection Regulation (EU 2016/679), you have the following rights:

• Access — Obtain a copy of your personal data.
• Rectification — Correct inaccurate data.
• Erasure — Request the deletion of your data.
• Portability — Receive your data in a structured format.
• Objection — Object to the processing of your data.
• Restriction — Restrict processing in certain cases.

To exercise your rights, contact us at: contact@fabricadigitalis.fr. In case of a dispute, you may file a complaint with the CNIL (French Data Protection Authority).

Transfers Outside the EU

Google (AdSense) may transfer data to the United States under the EU-U.S. Data Privacy Framework. No other data is transferred outside the EU.