Privacy policy
Last updated: October 2, 2026
Gamestimate is a free game. We only collect what's strictly needed to make it work: no ads, no selling of data, no advertising trackers.
Who is responsible?
[To be completed: raison sociale], [To be completed: adresse]. Contact for any question about your data: [To be completed: email rgpd].
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| A random identifier stored in your browser (local storage, not an advertising cookie) | Recognizing you from one visit to the next: game in progress, streak, game library | Necessary for the service (Terms of use) |
| Your answers, scores, response times, dates played | Calculating your score, your rank and the leaderboards; fighting cheating | Terms of use; legitimate interest (fair play) |
| Your username, your friend code, your friends and squads | Leaderboards and playing with friends. Your username is public (leaderboards, share cards). | Terms of use |
| Your email address (if you sign in) | Signing you in with a one-time code; finding your account on another device. Never any marketing without your explicit consent. | Terms of use |
| If you choose Google or Discord: your ID with them, your verified email and the name suggested as your username | Signing you in without a password | Terms of use |
| Your share card (image of your score) | Displaying the preview of your challenge link | Terms of use (you choose to share) |
| Technical logs (IP address, browser, time of requests) | Security, anti-abuse limits, diagnostics | Legitimate interest; legal retention obligation |
How long?
- Account and games: as long as the account is active. Deleted after 24 months without signing in.
- Anonymous profile (no account): deleted after 12 months without activity.
- Sign-in codes: 10 minutes. Share cards: 90 days. Technical logs: 12 months at most.
Who with?
Nobody receives your data for commercial purposes. Only our technical service providers process it on our behalf: the host Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, États-Unis (cloudflare.com), the email delivery service Resend (États-Unis), encadré par les clauses contractuelles types de la Commission européenne, and Google or Discord if you choose to sign in with them (their own policies apply).
Security
Encrypted connection (HTTPS), no passwords stored (sign-in with a one-time code or via Google/Discord), codes stored in hashed form, access to data limited to the people who need it.
Transfers outside the European Union
Some providers (email delivery, Google, Discord) may process data outside the EU. These transfers are governed by the European Commission's standard contractual clauses or by an adequacy decision.
Your rights
You can download your data and delete your account at any time, directly in the game (Lobby → your account). You also have the rights of access, rectification, objection and restriction: write to us at [To be completed: email rgpd]. You can lodge a complaint with the CNIL (the French data protection authority) if you believe your rights are not being respected.
Local storage and cookies
The game uses your browser's local storage only to work (identifier, sound preferences, progress). These trackers are strictly necessary, so they don't require consent. If we ever add audience measurement or advertising, we'll ask for your consent first.
Minors
The game is open to everyone. In France, minors under 15 need a parent's consent to create an account.