Privacy policy

The data controller is Tap&Go, a sole proprietorship, [ADRESSE], SIRET [SIRET].

For any question about your data: [EMAIL_CONTACT]. Tap&Go has not appointed a data protection officer, as this is not mandatory for its activity: this contact serves that purpose.

Account: email address; name provided by Google if you sign in with Google (your Google profile photo is neither stored nor displayed); name provided by Apple the first time you sign in with Apple, used only to prefill your profile.

Profile: username, friend code, optional name, bio, cover color and visibility settings.

Game shelf and plays: games in your collection and wishlist, ratings, reviews, loans, plays (date, duration, location entered, scores, notes), game draws (mode, number of games drawn, platform, date; no game is recorded) and player list. The names you enter in the player list may refer to other people: only enter what is useful.

Files: images and rulebooks (PDF) that you attach to your custom games. They are never shown to other users; the Ludis team may view them, along with the creator's name, description and username, for moderation and to enrich the catalog (legitimate interest, §3p2).

Social features and contributions: follows, activity feed, blocks, reports, barcodes, game entry corrections and place suggestions you submit, messages to support and ideas. If your right to report is suspended, we keep the date of the suspension, its end date and, where applicable, the date it was lifted.

Subscription: Premium status and customer identifier at Stripe (website) or at RevenueCat (purchases on the App Store and Google Play). We never receive your card details.

Device: notification token if you allow notifications; advertising identifier in the mobile app, only if you consent; technical error and performance data, without name or email address.

Location: “Where to play” calculates distances on your device. Your location is never sent to our servers or stored; the app only transmits the map area displayed, enlarged, or the city you choose.

Security: your IP address is used for a few minutes up to 24 hours at most to limit abuse (number of requests).

Performance of the contract (the terms of use and terms of sale you accept): account, profile, game shelf, plays, social features, loans, subscription, notifications, sign-in emails, identification of an unknown barcode.

Legitimate interest: security and abuse prevention; error and performance monitoring of the mobile app; cookieless website analytics; moderation; support and idea box; improving the catalog through your contributions. You can object to error monitoring in the app under Settings → Legal.

Consent: personalized advertising in the mobile app; error monitoring on the website (banner); notifications (your device's permission). You may withdraw your consent at any time.

Legal obligation: retention of accounting records and proof of your acceptance of the terms.

Your data is never sold. Other users only see what your visibility settings allow. We entrust your data to the following providers, each limited to its role:

Vercel Inc. (United States) — hosting of the website and API, website analytics; servers located in Frankfurt (Germany).

Neon, Inc. (United States) — database, hosted in Frankfurt (Germany).

Upstash, Inc. (United States) — abuse prevention (IP address, account identifier), hosted in the European Union.

Google LLC (United States) — sign-in with Google, advertising in the mobile app (AdMob), purchases and notifications on Android.

Apple Inc. (United States) — sign-in with Apple, purchases and notifications on iPhone.

RevenueCat, Inc. (United States) — management of subscriptions purchased in the app.

Stripe Payments Europe Ltd (Ireland) and Stripe, Inc. (United States) — payment on the website and invoices.

Resend, Inc. (United States) — sending emails (sign-in link, support replies).

Cloudinary Ltd. (Israel) — storage of images and rulebooks for your custom games.

650 Industries, Inc. — Expo (United States) — delivery of notifications.

Functional Software, Inc. — Sentry (United States) — error and performance monitoring, without name or email address.

Anthropic, PBC (United States) — identification of an unknown barcode: only the barcode is sent, never any data from your account.

OpenFreeMap — base maps: your browser or device requests the map images from it and therefore sends it your IP address.

We also consult, without sending them any personal data, BoardGameGeek (game entries), Wikidata and OpenUPC (barcodes), DeepL (translation of game descriptions) and OpenStreetMap (places).

Several providers are based in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider participates in it, and otherwise on the European Commission's standard contractual clauses. Israel benefits from an adequacy decision of the European Commission.

Account, profile, game shelf, reviews, social features, loans and game draws: for as long as your account exists. Game draws are included in your data export. Everything is erased when the account is deleted.

Plays and player list, whatever the plan: kept as long as your account exists, unless you delete them yourself. They are deleted along with your account.

Loan request left unanswered: turned into a local loan after 14 days.

Support messages and ideas: 3 years after their last update. When your account is deleted, they are anonymized: your email address is erased and the message is kept until that term.

Sign-in links sent by email: deleted as soon as they expire. Artificial intelligence usage counters: 30 days.

Moderation reports: deleted 12 months after they are handled, and anonymized as soon as the account of their author or of the person reported is deleted. Places you suggested: the published place remains in the directory, with no link to your account. Suspensions of the right to report: kept as long as your account exists, included in the export of your data and deleted with your account.

Error and performance data: 90 days at most. Abuse-prevention data: from a few minutes to 24 hours.

Accounting records: 10 years, held by Stripe, Apple or Google depending on the purchase channel (legal obligation).

Website: a strictly necessary session cookie keeps you signed in (httpOnly, Secure, SameSite). Your consent choices and a display preference are stored in your browser. Website analytics uses no cookies.

The website does not display any third-party ad network advertising. If this changes, your consent will be requested beforehand.

Mobile app: your sign-in tokens are kept in the device's secure storage; a copy of your data is stored there to work offline, and erased when you sign out or delete your account.

Advertising in the app (free plan): Google AdMob only serves personalized ads with your consent, collected through a form at first launch, and on iPhone only with your tracking permission. Without consent, ads are not personalized. The Premium subscription removes advertising.

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set out instructions regarding what happens to your data after your death.

Portability: export your data at any time from Settings → My data, whatever your plan.

Erasure: delete your account from the settings of the website or the app. The “Delete my Ludis account” page details what is erased.

Rectification: edit your profile at any time. For any other request: [EMAIL_CONTACT]. We respond within one month.

You may lodge a complaint with the CNIL (the French data protection authority, www.cnil.fr).

Ludis is not intended for people under 15, nor for those who have not reached the age of digital consent in their country if it is higher. If we learn that an account belongs to a younger person, we delete it. A parent can report it to us at [EMAIL_CONTACT].

We inform you of any significant change to this policy in the app, and ask you to accept our terms again when necessary.