Privacy policy

Who is responsible?

Glou et Glous is published by Brice Carbou, trading as Thiey Solutions, 1750 Route départementale 6085, 06460 Saint-Vallier-de-Thiey (France). For any question about your data, see the Contact section below.

What data is stored?

• Without an account (guest player): an anonymous technical identifier, where your first visit came from (for example the name of the site or social network), and your progress: cells dug, finds, visions seen, shards, trial digs used.
• With an account: your email address (to recover your progress), your browser language, the account creation date and the date of your last activity.
• Your password, if you choose that method: it is stored only in scrambled (hashed) form, never in clear text. If you sign in with Google, we receive your email address confirmed by Google, never your Google password.
• The number of digs you make each day in each layer (the detail of each dig is not kept), and simple game measurements: first visit, first object found, sign-up, return on the following days, visions seen. They are used to improve the game.
• An internal flag if your account is judged suspicious (for example digs too regular to be human).
• If the game was gifted to you, the date it was gifted.

What is it used for?

• Running the game: recognising you, keeping your dig, finds, visions, any purchase and the 24-hour timer, counting your trial digs.
• Sending you the emails you ask for: address confirmation, sign-in link, new password.
• Protecting the game against bots and cheating.
• Producing administration statistics (number of accounts created, sign-ins, player journeys).
• No advertising, no commercial profiling, no data resale.

Cookies and browser storage

• A session cookie (strates_session), needed to recognise you and keep your progress: 30 days at most.
• A very short cookie (strates_oauth, 10 minutes) while you sign in with Google, to protect that sign-in.
• A small local storage entry in your browser to remember your preferences (music, sound effects, voice, volume, day or night) and avoid showing some messages twice.
• No advertising cookies and no audience trackers.

Who receives your data?

• Railway: hosting of the game and its database (servers in the United States, US East region).
• Resend: sending of confirmation, sign-in and new-password emails.
• Stripe: payment for the full game, only if you buy it. The game never sees or stores your card number; it only keeps a record of your purchase (date, amount) and the payment identifier.
• Google: only if you choose to sign in with Google.
• Hosting providers may log IP addresses for technical security reasons.
• These providers are based in the United States: your data is therefore processed outside the European Union, under the contractual safeguards they offer.

For how long?

• Your data is kept as long as your account exists. A guest player who does not save their progress may be deleted after a long period of inactivity.
• Links received by email expire after 15 minutes, sessions after 30 days.

Your rights

• You can ask for access to your data, its correction, its erasure (deletion of your account), restriction of or objection to its processing, and portability.
• Write to the contact address below. You can also contact your data protection authority (in France, the CNIL: cnil.fr).
• You can also erase your own progress from the game menu (“Start over”). Full account deletion is currently done on request by email.

Money

• The game is free and ad-free. For free, you move forward by at most one stratum every 24 hours.
• A one-time purchase, the full game (€5, VAT not applicable under article 293 B of the French tax code), removes that wait. It is tied to your account, paid through Stripe, and does not renew. No stratum or vision is reserved for those who pay.
• Because the digital content is available immediately, you expressly request immediate access and waive your 14-day right of withdrawal by ticking the box before paying. If something goes wrong, write to us at the contact address above.

Contact

[email protected]