Privacy policy
This translation is provided for information. In case of doubt, the French version prevails.
This page explains which data Animal Pocket processes, why, for how long, and what your rights are, in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
[NAME OR COMPANY NAME OF THE PUBLISHER], [POSTAL ADDRESS]. Contact for any request relating to your data: [CONTACT EMAIL ADDRESS].
2. Data processed
- Google account (optional sign-in): email address, name and profile picture transmitted by Google when you sign in. Animal Pocket only receives this information, not your password.
- Profile: chosen username, profile picture, account creation date.
- Game: points balance, booster opening history (transaction log).
- Guest collection: if you play without an account, your collection is saved only in your browser (local storage). It is not transmitted to our servers.
- Ecoindex badge: at the bottom of the page, an image is loaded from the bff.ecoindex.fr service. This service receives the address of the page viewed and your IP address, as well as the time needed to load the image.
We use no advertising, no audience analytics tool and no marketing tracker.
3. Purposes and legal bases
- Create and manage your account and your progress: performance of the service (GDPR article 6.1.b).
- Secure the service and prevent abuse: legitimate interest (GDPR article 6.1.f).
- Display the Ecoindex badge: legitimate interest in measuring the environmental impact of the site (GDPR article 6.1.f).
4. Retention periods
- Account, profile and balance: as long as the account exists. Deleted on request (see section 7).
- Transaction log: kept with the account, then deleted with it.
- Guest collection: until your browser is erased.
- Technical logs of the host: retention period set by the host. [TO BE VERIFIED]
5. Recipients and processors
- Vercel Inc.: site hosting.
- Supabase, Inc.: database and authentication.
- Google: sign-in provider (if you choose to sign in with Google).
- Ecoindex (bff.ecoindex.fr): measurement of the site's impact, solely for displaying the badge.
Some of these providers are established in the United States. Transfers are governed by the European Commission's standard contractual clauses. [TO BE VERIFIED: contractual clauses and transfer framework of each provider.]
6. Cookies and local storage
Animal Pocket uses only the storage necessary for it to work: the sign-in session and the guest collection in the browser. It is used neither for advertising nor for tracking. No consent is therefore requested for this storage.
7. Your rights
You may request access to your data, its rectification, erasure, portability, restriction of or objection to its processing. To exercise these rights, write to [CONTACT EMAIL ADDRESS] from the address linked to your account. We reply within one month.
You may also lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), at cnil.fr.
8. Security
Data is protected by row-level security (RLS) rules: each user can only access their own data. Points can only be modified by the server.
9. Updates
This policy may change. The date of the last update is: [DATE].